Cookie Policy

Version 1 · Effective 8 July 2026 · WMSU CE Batch 2001 Alumni Association

Change your mind anytime. Withdrawing consent is as easy as giving it:  ·  California residents: Do Not Sell or Share My Personal Information.

1. Who we are (Controller)

The data controller is the WMSU CE Batch 2001 Alumni Association, an alumni organization domiciled in Zamboanga City, Philippines. Contact for privacy matters: amsap@wmsuce2001alumni.org (marked “Data Privacy”), or via our Contact page. We have not appointed a Data Protection Officer as we are not required to under GDPR Art. 37; privacy inquiries are handled by the Technology Committee.

2. What cookies and similar technologies we use

“Cookies” here includes browser localStorage and similar technologies covered by ePrivacy Directive Art. 5(3). We currently use:

NameCategoryPurposeType / ProviderRetention
ce2ConsentStrictly Necessary Records your consent choices so we don't re-ask on every page localStorage · first-party12 months, then we re-ask
ce2ConsentLogStrictly Necessary Audit trail of your consent decisions (accountability, GDPR Art. 7(1)) localStorage · first-partyLast 50 entries
theme / interface preferencesFunctional Remembers dark-mode and display preferences on committee consoles localStorage · first-partyUntil you clear it or withdraw consent
Analytics cookiesAnalytics None currently deployed. If ever added, they load only after opt-in
Marketing cookiesMarketing None currently deployed. If ever added, they load only after opt-in

Web fonts are loaded from Google Fonts (Google Ireland Ltd.), which involves transmitting your IP address to Google to deliver the font files; Google Fonts does not set cookies. Registration, donations, and profile features are processed via Google Apps Script / Google Sheets (Google as processor) — see our Data Privacy commitments under RA 10173.

3. Purposes and legal bases (GDPR Art. 13(1)(c))

4. Recipients and international transfers (Art. 13(1)(e)–(f))

Consent records stay in your own browser (localStorage) and are not transmitted to us. Site functionality relies on Google LLC / Google Ireland Ltd. as processors (Fonts, Apps Script, Sheets, Drive). Transfers outside the EEA rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses maintained by Google.

5. Retention (Art. 13(2)(a))

Your consent record expires after 12 months, after which we ask again. You can erase it sooner at any time via Cookie Settings → Reject All, or by clearing your browser storage.

6. Your rights (Art. 13(2)(b)–(d))

7. California residents — CCPA/CPRA

We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use cookies for cross-context behavioral advertising. You may nonetheless record a formal opt-out at any time:

We honor the Global Privacy Control (GPC) browser signal automatically as a valid opt-out. California residents also have rights to know, delete, correct, and to non-discrimination for exercising their rights — contact us at the email above.

8. Philippine Data Privacy Act (RA 10173)

As a Philippine organization, we process personal data in accordance with RA 10173 and its IRR, under the oversight of the National Privacy Commission. The rights and contact channels above apply equally to Philippine data subjects.

9. Changes to this policy

Material changes bump the policy version, which automatically re-displays the consent banner so you can make a fresh choice.