Privacy Policy

Last updated: November 19, 2025

CSC Training Management System (CSC-TMS)


Civil Service Commission Regional Office VIII

Government Center, Palo, Leyte, Philippines

This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you use the CSC Training Management System. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Key Definitions

Account

A unique account created for you to access our Service or parts of our Service.

Agency

Civil Service Commission Regional Office VIII, Government Center, Palo, Leyte, Philippines.

Cookies

Small files placed on your device by a website, containing details of your browsing history.

Device

Any device that can access the Service (computer, phone, tablet).

Personal Data

Any information that relates to an identified or identifiable individual.

Website

CSC Training Management System, accessible from tms.cscro8.com

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you:

  • Email address
  • Full name (first name, middle name, last name, suffix)
  • Phone number / Mobile number
  • Address, Region, Province, Barangay, ZIP/Postal code, City/Municipality
  • Employment information (Position title, Salary grade, Agency name, Agency unit, Sector)
  • Date of birth, Gender, Civil status
  • Profile photo (optional)
  • Food restrictions or dietary preferences
  • Usage Data

OAuth Authentication Data

If you register or log in using Google OAuth, we collect:

  • Google ID (unique identifier)
  • OAuth provider information
  • OAuth access tokens and refresh tokens (encrypted)
  • Email address from your Google account
  • Profile information from your Google account

Usage Data

Usage Data is collected automatically when using the Service. This may include:

  • Your Device's Internet Protocol address (IP address)
  • Browser type and version
  • Pages visited and time spent
  • Unique device identifiers
  • Mobile device information (when applicable)
  • Login attempts and authentication history
  • Last login timestamp
  • Account status and verification information

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to track activity on our Service. The types we use include:

Use of Your Personal Data

The Agency may use Personal Data for the following purposes:

Service Provision

To provide and maintain our Service, including monitoring usage and managing training programs.

Account Management

To manage your registration, provide access to Service functionalities, and track professional development.

Communication

To contact you via email, phone, SMS, or push notifications regarding training updates, announcements, and security notices.

Certification & Records

To issue certificates, maintain training records, and track your professional development for civil service requirements.

Analytics & Improvement

To analyze system usage, generate reports, and improve Service functionality and training program effectiveness.

Legal Compliance

To comply with legal obligations, civil service regulations, and government reporting requirements.

Sharing of Your Personal Data

We may share your Personal Data in the following situations:

With Government Agencies

For legitimate governmental functions, civil service administration, training coordination, and compliance with legal requirements.

With Your Employer

With your government agency regarding training completion, certification status, and professional development records.

With Service Providers

With trusted third-party providers (hosting, email, OAuth) under strict confidentiality agreements.

Data Protection Commitment

  • We do NOT sell your Personal Data
  • We do NOT share data for marketing purposes
  • We do NOT transfer data outside the Philippines without proper safeguards

Retention of Your Personal Data

The Agency will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce legal agreements and policies
  • Maintain civil service records
  • Strengthen security or improve functionality

Retention Periods

Active Accounts:

Data retained while your account is active and during your government service employment.

Inactive Accounts:

Accounts inactive for 3 years may be archived or deleted unless retention is required for legal purposes.

Training Records:

Training certificates and completion records retained permanently for civil service record-keeping.

Security Logs:

Login attempts and access logs retained for 2 years for security auditing.

Transfer of Your Personal Data

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. The Agency will take all steps reasonably necessary to ensure that your data is treated securely.

Delete Your Personal Data

You have the right to delete or request that we assist in deleting the Personal Data that we have collected about you.

How to manage your data:
  • Sign in to your Account and visit account settings
  • Update, amend, or delete your information directly
  • Contact us to request access, correction, or deletion

Note: We may need to retain certain information when we have a legal obligation to do so.

Your Data Privacy Rights Under Philippine Law

Right to be Informed

Know how your data is collected, used, and shared.

Right to Access

Request access to your Personal Data.

Right to Correction

Update or correct inaccurate information.

Right to Object

Object to certain processing activities.

Right to Erasure

Request deletion of your Personal Data.

Right to Data Portability

Obtain your data in a portable format.

Disclosure of Your Personal Data

Business Transactions

If the Agency is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your data is transferred.

Law Enforcement

Under certain circumstances, the Agency may be required to disclose your Personal Data if required by law or in response to valid requests by public authorities.

Other Legal Requirements

The Agency may disclose your Personal Data to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Agency
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users or the public
  • Protect against legal liability

Security of Your Personal Data

Security Measures We Implement

Encryption

All passwords are encrypted using industry-standard hashing. Data transmission protected by SSL/TLS.

Access Controls

Strict authentication, role-based access, and account lockout after failed login attempts.

Secure Infrastructure

Servers hosted in secure environments with regular updates and monitoring.

Staff Training

Authorized personnel receive regular training on data privacy and security.

Your Security Responsibilities

  • Keep your password confidential
  • Log out after each session, especially on shared computers
  • Use strong, unique passwords
  • Notify us immediately of any unauthorized access

Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without parental consent, we take steps to remove that information.

Age Requirement: You must be at least 18 years old to use this Service. This Service is intended for government employees and civil servants.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Sending you an email notification
  • Displaying a prominent notice on our Service
  • Updating the "Last updated" date at the top

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Your Continued Use: By continuing to use the Service after changes become effective, you acknowledge and accept the updated Privacy Policy.

Contact Us

Have questions about this Privacy Policy?

We're here to help. Feel free to reach out to us for any inquiries or concerns.

ro08.hrd@csc.gov.ph

Civil Service Commission Regional Office VIII

Government Center, Palo, Leyte, Philippines


National Privacy Commission

For data privacy complaints or concerns, you may also contact:

National Privacy Commission
Website: www.privacy.gov.ph

Response Time

We will respond to your inquiries within fifteen (15) calendar days as mandated by the Data Privacy Act of 2012.

Acknowledgment

By using the CSC Training Management System, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this Policy, please do not use our Service.