Cookie Policy
1. Who we are (Controller)
The data controller is the WMSU CE Batch 2001 Alumni Association, an alumni organization domiciled in Zamboanga City, Philippines. Contact for privacy matters: amsap@wmsuce2001alumni.org (marked “Data Privacy”), or via our Contact page. We have not appointed a Data Protection Officer as we are not required to under GDPR Art. 37; privacy inquiries are handled by the Technology Committee.
2. What cookies and similar technologies we use
“Cookies” here includes browser localStorage and similar technologies covered by ePrivacy Directive Art. 5(3). We currently use:
| Name | Category | Purpose | Type / Provider | Retention |
|---|---|---|---|---|
ce2Consent | Strictly Necessary | Records your consent choices so we don't re-ask on every page | localStorage · first-party | 12 months, then we re-ask |
ce2ConsentLog | Strictly Necessary | Audit trail of your consent decisions (accountability, GDPR Art. 7(1)) | localStorage · first-party | Last 50 entries |
theme / interface preferences | Functional | Remembers dark-mode and display preferences on committee consoles | localStorage · first-party | Until you clear it or withdraw consent |
| Analytics cookies | Analytics | None currently deployed. If ever added, they load only after opt-in | — | — |
| Marketing cookies | Marketing | None currently deployed. If ever added, they load only after opt-in | — | — |
Web fonts are loaded from Google Fonts (Google Ireland Ltd.), which involves transmitting your IP address to Google to deliver the font files; Google Fonts does not set cookies. Registration, donations, and profile features are processed via Google Apps Script / Google Sheets (Google as processor) — see our Data Privacy commitments under RA 10173.
3. Purposes and legal bases (GDPR Art. 13(1)(c))
- Strictly necessary storage — operating the site and proving your consent choices. Legal basis: legitimate interests (Art. 6(1)(f)); exempt from consent under ePrivacy Art. 5(3) as strictly necessary for a service you request.
- Functional, Analytics, Marketing — only with your prior, explicit, opt-in consent (Art. 6(1)(a)). No pre-ticked boxes, no cookie walls; “Reject All” is as prominent as “Accept All”, and the site never loads these before you opt in.
4. Recipients and international transfers (Art. 13(1)(e)–(f))
Consent records stay in your own browser (localStorage) and are not transmitted to us. Site functionality relies on Google LLC / Google Ireland Ltd. as processors (Fonts, Apps Script, Sheets, Drive). Transfers outside the EEA rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses maintained by Google.
5. Retention (Art. 13(2)(a))
Your consent record expires after 12 months, after which we ask again. You can erase it sooner at any time via Cookie Settings → Reject All, or by clearing your browser storage.
6. Your rights (Art. 13(2)(b)–(d))
- Withdraw consent at any time (Art. 7(3)) — use the Cookie Settings link (also in the footer of every page). Withdrawal does not affect processing before withdrawal.
- Access, rectification, erasure, restriction, portability, and objection (Arts. 15–21) — email amsap@wmsuce2001alumni.org.
- Complain to a supervisory authority (Art. 77) — your local EU/EEA data protection authority; in the Philippines, the National Privacy Commission under RA 10173.
- Providing non-essential cookie consent is never a condition of using this site.
- We do not use automated decision-making or profiling (Art. 22).
7. California residents — CCPA/CPRA
We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use cookies for cross-context behavioral advertising. You may nonetheless record a formal opt-out at any time:
We honor the Global Privacy Control (GPC) browser signal automatically as a valid opt-out. California residents also have rights to know, delete, correct, and to non-discrimination for exercising their rights — contact us at the email above.
8. Philippine Data Privacy Act (RA 10173)
As a Philippine organization, we process personal data in accordance with RA 10173 and its IRR, under the oversight of the National Privacy Commission. The rights and contact channels above apply equally to Philippine data subjects.
9. Changes to this policy
Material changes bump the policy version, which automatically re-displays the consent banner so you can make a fresh choice.