Privacy Policy

Campus Connect for DBS

This Privacy Policy explains how personal information, school-related information, and technical information are handled when users install and use Campus Connect for DBS.

HITC provides, operates, maintains, and supports Campus Connect and its related technical systems. Certain student, employee, financial, attendance, and school records displayed through the application originate from, are maintained by, or are processed for Don Bosco School (Salesian Sisters), Inc. as part of the services made available to authorized users.

1. Purpose of Campus Connect

Campus Connect for DBS is a school communication and student/employee information application.

Depending on the services made available to a user, Campus Connect may allow users to:

• receive school announcements and administrative notifications;
• link an authorized student or employee record through an ID number and activation process;
• receive or view attendance notifications and attendance-related records;
• receive or view eCash reload, transaction, and balance information made available by the school system;
• receive or view tuition, school-fee, and other payment-related notifications or transaction information;
• receive or view Statements of Account and other authorized school-account information, where enabled;
• receive links or URLs contained in authorized school announcements or notices; and
• access other school-related information and services made available through Campus Connect.

2. Information We Process

Campus Connect processes only information reasonably necessary to provide, secure, maintain, and support the application and its authorized school services.

Depending on the user's relationship with the school and the functions being used, this information may include:

2.1 Student or Employee Identification Information

• student or employee ID number;
• name associated with the authorized school record;
• student or employee classification where applicable;
• school-related identifiers necessary to locate and link the proper record; and
• other limited account information required to provide authorized Campus Connect services.

2.2 Activation and Account-Linking Information

Campus Connect may process:

• activation codes;
• activation requests;
• activation status;
• linked-student or linked-employee information;
• linked-device information;
• session information; and
• security records associated with activation and account linking.

2.3 Email Information

The school may maintain an email address associated with a student, parent, guardian, employee, or authorized record. Campus Connect or its supporting systems may use that email address to send an activation code or related security notice.

Where appropriate, the application may display only a limited or masked portion of the email address.

2.4 School Information and Records

Depending on the services authorized by DBS, Campus Connect may process or display:

• attendance events and attendance notifications;
• eCash reload information;
• eCash transactions or balances;
• payment and school-fee notifications;
• payment transaction information;
• Statements of Account;
• school announcements;
• administrative notices;
• school-generated URLs or links; and
• other school information made available to the authorized user.

Campus Connect does not require a user to enter full credit-card numbers, bank-account passwords, ATM PINs, online-banking credentials, or similar payment-authentication credentials merely to receive or view school payment notifications.

2.5 Device and Notification Information

To identify an authorized installation and deliver notifications, Campus Connect may process:

• push-notification registration tokens;
• Firebase Cloud Messaging registration tokens;
• Apple Push Notification service device tokens;
• Huawei Push Kit tokens, where applicable;
• Firebase installation identifiers;
• application-generated device identifiers;
• device model or device name;
• operating-system information;
• application version;
• platform information; and
• other technical information reasonably necessary to deliver notifications and operate the service.

2.6 Server, Security, and Diagnostic Information

When Campus Connect communicates with HITC or supporting services, ordinary technical records may be generated, including:

• IP address;
• request date and time;
• requested server endpoint;
• application and device information;
• login, session, or activation records;
• error and diagnostic information;
• security logs; and
• information reasonably necessary to identify and investigate technical or security problems.

2.7 Information Campus Connect Is Not Designed to Collect

Campus Connect is not designed to collect the following merely for the operation of the functions described in this Policy:

• precise GPS location;
• device contact lists;
• SMS or personal text messages;
• call history or call logs;
• microphone recordings;
• personal photographs or videos;
• biometric information; or
• behavioral advertising profiles.

3. How We Use Information

Information processed through Campus Connect may be used to:

• verify and activate an authorized student or employee connection;
• associate the correct authorized school record with a user's device;
• authenticate and maintain authorized application sessions;
• display school information to authorized users;
• deliver attendance notifications;
• deliver eCash notifications and related information;
• deliver school-fee and payment notifications;
• deliver announcements and administrative notices;
• provide Statements of Account and other authorized school information;
• operate, secure, maintain, troubleshoot, and improve Campus Connect;
• prevent fraud, unauthorized access, misuse, and security incidents;
• respond to support and privacy requests;
• maintain appropriate school, security, technical, and business records; and
• comply with applicable legal obligations and lawful government or judicial requests.

HITC does not sell personal information obtained through Campus Connect.

Campus Connect is not designed to use student, employee, school, or notification information for behavioral advertising.

4. Legal Basis, Authorization, and Consent

Information is processed only when there is an appropriate legal, contractual, school, or operational basis.

Depending on the circumstances, processing may be based on:

• user consent;
• the user's request to activate or use Campus Connect;
• legitimate school and administrative functions;
• contractual or service obligations;
• protection of authorized users and system security; or
• compliance with applicable laws and regulations, including applicable Philippine data-protection laws.

Where consent is legally required, appropriate consent or authorization will be obtained before information is processed on that basis.

5. School Records and Authorized Access

Campus Connect generally does not create the underlying official student or employee record. It provides authorized access to information made available by or through DBS systems.

Users must link only student or employee records they are authorized to access.

DBS may maintain official student, employee, financial, attendance, and related school records in accordance with its policies, contractual requirements, and applicable laws.

Depending on the applicable service arrangement and the type of information involved, DBS may be responsible for the underlying school record while HITC processes information as necessary to provide, maintain, secure, and support Campus Connect and related systems.

6. Push Notifications and Platform Services

Campus Connect may be distributed through Apple App Store, Google Play, Huawei AppGallery, or another authorized distribution method.

The notification technology used depends on the device, operating system, and application build.

6.1 Google Firebase Cloud Messaging

Campus Connect may use Google Firebase Cloud Messaging (“FCM”) to register devices and route push notifications.

FCM may process technical information such as:

• Firebase installation identifiers;
• FCM registration tokens;
• application version;
• operating-system information;
• device-related technical information; and
• other information necessary to route and deliver notifications.

FCM may be used on supported Android devices and may also be used in conjunction with Apple's notification infrastructure for the iOS version of Campus Connect.

6.2 Apple Push Notification Service

On Apple devices, push notifications are delivered through Apple Push Notification service (“APNs”).

For the iOS version of Campus Connect, Firebase Cloud Messaging may be used to manage notification registration and routing, while final push delivery to Apple devices is performed through APNs.

Apple may process device tokens and other technical information necessary to route and deliver notifications.

6.3 Huawei Push Kit / Huawei Mobile Services

On supported Huawei devices or Huawei-specific builds, Campus Connect may use Huawei Push Kit and Huawei Mobile Services (“HMS”) for push-notification delivery.

Huawei Push Kit may process:

• push-registration tokens;
• application identifiers;
• device-related identifiers;
• operating-system information;
• application version; and
• other technical information necessary to provide notification services.

6.4 Notification Permission

Campus Connect may request permission to display push notifications. Users may allow or deny this permission and may later change notification settings through the device's operating-system settings.

7. Other Service Providers

HITC may use service providers that are reasonably necessary to operate Campus Connect, including:

• cloud and server-hosting providers;
• internet and domain-service providers;
• email-delivery providers;
• notification-service providers;
• security and backup providers;
• database and infrastructure providers; and
• technical maintenance providers.

These providers may process information only to the extent reasonably necessary to perform their services, subject to applicable contractual, technical, security, and legal requirements.

8. Data Sharing and Disclosure

HITC does not sell, rent, or trade personal information obtained through Campus Connect.

Information may be disclosed only when reasonably necessary to:

• provide Campus Connect and related school services;
• provide information to DBS where necessary for authorized school operations;
• use the service providers described in this Policy;
• investigate or prevent fraud, unauthorized access, abuse, or security incidents;
• protect students, parents, guardians, employees, DBS, HITC, or the public;
• comply with law, regulation, subpoena, court order, or lawful government request; or
• establish, exercise, or defend legal rights.

9. Data Retention

App-related personal and technical information is retained only for as long as reasonably necessary for the purpose for which it was processed, including:

• providing authorized school services;
• maintaining linked devices and sessions;
• security and fraud prevention;
• technical troubleshooting;
• legitimate school or business recordkeeping; and
• compliance with applicable legal requirements.

Notification tokens and session information may remain active while Campus Connect remains installed or linked to an authorized account, until the information expires, is refreshed, is deleted, or is no longer required.

Official underlying school records may be retained by DBS in accordance with applicable education, financial, accounting, administrative, contractual, and legal requirements.

10. Data Security

HITC uses reasonable administrative, technical, and organizational safeguards designed to protect information processed through Campus Connect.

These measures may include:

• encrypted HTTPS communications;
• account activation and access controls;
• authenticated administrative access;
• database access restrictions;
• server access controls;
• secure handling of notification credentials;
• session-management safeguards;
• security and diagnostic logging;
• system monitoring;
• backups; and
• technical maintenance and software updates.

No internet-based service, network transmission, or electronic storage system can be guaranteed to be completely secure.

11. Children and Student Information

Campus Connect is intended for use in a school environment and may process information relating to students, including minors.

Student information is processed only for authorized school-related functions and services.

Parents, guardians, students, employees, and school personnel should link and access only records that they are legally or properly authorized to access.

Where parental consent, guardian authorization, school authorization, or another legal basis is required, DBS and/or HITC will apply the appropriate process consistent with applicable law and school policy.

12. Privacy Rights and Choices

Subject to applicable law and appropriate verification of identity and authority, users may request to:

• obtain information about personal information processed through Campus Connect;
• access applicable personal information;
• correct inaccurate or incomplete information;
• request deletion or unlinking of an application activation, linked device, or application account where appropriate;
• withdraw consent where processing is based on consent;
• object to or request restriction of certain processing where applicable;
• request a copy of applicable personal information, where provided by law; and
• submit a privacy concern or complaint.

Users may disable Campus Connect notifications through their device settings.

Requests concerning an official underlying student or employee school record may need to be directed to DBS because HITC may not have authority to alter the official record independently.

13. Unlinking or Removing Campus Connect

A user may stop using Campus Connect by uninstalling the application.

Where available and appropriate, users may also request that a linked device or Campus Connect activation be removed or unlinked.

Uninstalling the application may remove locally stored application information from the device, but it does not automatically delete official school records maintained by DBS or records that HITC or DBS is legally required to retain.

14. International Processing

Some technical information may be processed by service providers located outside the Philippines, including notification, cloud, infrastructure, or technology providers.

Where applicable, such processing is subject to the providers' privacy and security practices, contractual requirements, and applicable laws.

15. Links to External Websites

Campus Connect announcements or school notices may contain links to websites or online resources.

When a user chooses to open an external website, that website may have its own privacy policy, terms, security practices, cookies, and server logs. HITC is not responsible for the privacy practices of an unrelated third-party website.

16. Changes to This Privacy Policy

This Privacy Policy may be updated when Campus Connect features, school services, service providers, technical infrastructure, or applicable legal requirements change.

The latest version will display an updated Last Updated date.

Where required by law or appropriate for a material change, users may be notified or asked to review an updated Privacy Policy.

17. Contact Information

隐私政策

Campus Connect for DBS

本隐私政策说明用户安装和使用 Campus Connect for DBS 时， 我们如何处理个人信息、学校相关信息和技术信息。

HITC 提供、运营、维护并支持 Campus Connect 及其相关技术系统。 应用中显示的部分学生、员工、考勤、eCash、付款及其他学校记录， 由 Don Bosco School (Salesian Sisters), Inc. 提供或维护， 或由 HITC 在向经授权用户提供服务所需的范围内进行处理。

1. Campus Connect 的用途

Campus Connect for DBS 是一款用于学校沟通以及学生和员工信息服务的应用。

根据用户获准使用的功能，本应用可能用于：

• 接收学校公告和行政通知；
• 通过学号、员工编号及激活流程绑定经授权的记录；
• 接收或查看考勤通知和考勤记录；
• 接收或查看 eCash 充值、交易及余额信息；
• 接收或查看学费、学校费用及付款相关通知；
• 接收或查看对账单（Statement of Account）；
• 打开学校公告或通知中提供的授权链接；以及
• 访问通过 Campus Connect 提供的其他学校信息或服务。

2. 我们处理的信息

Campus Connect 仅处理提供、保护、维护和支持本应用及获授权学校服务 所合理必需的信息。

根据实际使用情况，可能包括：

2.1 学生或员工身份信息

• 学生或员工编号；
• 与授权学校记录关联的姓名；
• 适用情况下的学生或员工身份类别；
• 用于识别和绑定正确学校记录的相关标识符；以及
• 提供 Campus Connect 服务所需的其他有限账户信息。

2.2 激活与账户绑定信息

• 激活码；
• 激活请求；
• 激活状态；
• 已绑定学生或员工信息；
• 已绑定设备信息；
• 会话信息；以及
• 与激活和账户绑定有关的安全记录。

2.3 电子邮箱信息

学校可能保存与学生、家长、监护人、员工或授权记录相关联的电子邮箱地址。 Campus Connect 或其支持系统可能使用该邮箱发送激活码或相关安全通知。

在适当情况下，应用可能仅显示部分或脱敏后的电子邮箱地址。

2.4 学校信息及记录

根据 DBS 授权的服务，Campus Connect 可能处理或显示：

• 考勤事件及考勤通知；
• eCash 充值信息；
• eCash 交易及余额；
• 学校费用及付款通知；
• 付款交易信息；
• 对账单（Statement of Account）；
• 学校公告；
• 行政通知；
• 学校提供的链接；以及
• 向经授权用户提供的其他学校信息。

用户仅为了接收或查看学校付款通知，无需在 Campus Connect 中输入完整信用卡号、银行账户密码、ATM PIN、网上银行凭据 或类似付款认证信息。

2.5 设备及通知信息

为识别经授权的安装并发送通知，Campus Connect 可能处理：

• 推送通知注册令牌；
• Firebase Cloud Messaging 注册令牌；
• Apple Push Notification service 设备令牌；
• 适用情况下的 Huawei Push Kit 令牌；
• Firebase 安装标识符；
• 应用生成的设备标识符；
• 设备型号或设备名称；
• 操作系统信息；
• 应用版本；
• 平台信息；以及
• 提供通知和应用服务所合理必需的其他技术信息。

2.6 服务器、安全及诊断信息

Campus Connect 与 HITC 或相关服务通信时，可能自动生成以下技术记录：

• IP 地址；
• 请求日期和时间；
• 请求的服务器接口；
• 应用和设备信息；
• 登录、会话或激活记录；
• 错误及诊断信息；
• 安全日志；以及
• 识别和调查技术或安全问题所合理必需的信息。

2.7 Campus Connect 并非用于收集的信息

为实现本政策所述功能，Campus Connect 并非用于收集：

• 精确 GPS 位置信息；
• 设备通讯录；
• SMS 或个人短信；
• 通话记录；
• 麦克风录音；
• 个人照片或视频；
• 生物识别信息；或
• 行为广告画像。

3. 信息使用方式

我们可能将信息用于：

• 验证并激活经授权的学生或员工连接；
• 将正确的学校记录绑定到用户设备；
• 验证并维持授权应用会话；
• 向经授权用户显示学校信息；
• 发送考勤通知；
• 发送 eCash 通知及相关信息；
• 发送学校费用和付款通知；
• 发送公告和行政通知；
• 提供对账单及其他获授权学校信息；
• 运营、保护、维护、排错及改进 Campus Connect；
• 防止欺诈、未经授权访问、滥用及安全事件；
• 处理支持和隐私请求；
• 维护适当的学校、安全、技术及业务记录；以及
• 遵守适用法律及合法的政府或司法要求。

HITC 不会出售通过 Campus Connect 获取的个人信息。

Campus Connect 不会将学生、员工、学校或通知信息用于行为广告。

4. 法律依据、授权及同意

我们仅在具有适当法律、合同、学校或运营依据的情况下处理信息。

根据具体情况，处理依据可能包括：

• 用户同意；
• 用户主动要求激活或使用 Campus Connect；
• 合法的学校及行政职能；
• 合同或服务义务；
• 保护用户和系统安全；以及
• 遵守适用的菲律宾数据保护法律及其他法律要求。

在法律要求取得同意的情况下，我们会依法取得适当同意或授权。

5. 学校记录及授权访问

Campus Connect 通常不会创建底层官方学生或员工记录， 而是向经授权用户提供 DBS 系统中可用的信息。

用户只能绑定并访问其有权访问的学生或员工记录。

DBS 可根据其政策、合同义务及适用法律保存官方学生、员工、 财务、考勤及其他学校记录。

根据具体服务安排及信息类型，DBS 可能负责底层学校记录， 而 HITC 则在提供、维护、保护和支持 Campus Connect 及相关系统所必要的范围内处理相关信息。

6. 推送通知和平台服务

Campus Connect 可通过 Apple App Store、Google Play、 Huawei AppGallery 或其他经授权方式提供。

所使用的推送通知技术取决于设备、操作系统和应用版本。

6.1 Google Firebase Cloud Messaging

Campus Connect 可能使用 Google Firebase Cloud Messaging （“FCM”）注册设备并传送推送通知。

FCM 可能处理：

• Firebase 安装标识符；
• FCM 注册令牌；
• 应用版本；
• 操作系统信息；
• 设备相关技术信息；以及
• 路由和发送通知所需的其他信息。

FCM 可用于支持的 Android 设备，也可能与 Apple 的通知基础设施结合用于 iOS 版本的 Campus Connect。

6.2 Apple Push Notification Service

在 Apple 设备上，推送通知通过 Apple Push Notification service（“APNs”）完成最终发送。

在 Campus Connect iOS 版本中，Firebase Cloud Messaging 可用于设备注册及通知路由，而最终向 Apple 设备的推送 通知通过 APNs 完成。

Apple 可能处理设备令牌及发送通知所需的其他技术信息。

6.3 Huawei Push Kit / Huawei Mobile Services

在支持的 Huawei 设备或 Huawei 专用版本上， Campus Connect 可能使用 Huawei Push Kit 和 Huawei Mobile Services（“HMS”）发送推送通知。

Huawei Push Kit 可能处理：

• 推送注册令牌；
• 应用标识符；
• 设备相关标识符；
• 操作系统信息；
• 应用版本；以及
• 提供通知服务所合理必需的其他技术信息。

6.4 通知权限

Campus Connect 可能请求发送推送通知的权限。 用户可允许或拒绝该权限，并可随时通过设备的系统设置 更改通知权限。

7. 其他服务提供商

HITC 可能使用运营 Campus Connect 所合理必要的服务提供商，包括：

• 云服务及服务器托管提供商；
• 互联网及域名服务提供商；
• 电子邮件服务提供商；
• 推送通知服务提供商；
• 安全及备份服务提供商；
• 数据库及基础设施提供商；以及
• 技术维护服务提供商。

8. 信息共享和披露

HITC 不会出售、出租或交易通过 Campus Connect 获取的个人信息。

仅在合理必要的情况下，我们可能披露信息以：

• 提供 Campus Connect 及相关学校服务；
• 支持 DBS 的授权学校运营；
• 使用本政策中说明的服务提供商；
• 调查或防止欺诈、未经授权访问、滥用或安全事件；
• 保护学生、家长、监护人、员工、DBS、HITC 或公众；
• 遵守法律、法规、传票、法院命令或合法政府要求；或
• 建立、行使或维护合法权利。

9. 数据保存

应用相关个人及技术信息仅在实现相关处理目的所合理必要的期限内保存， 包括：

• 提供获授权学校服务；
• 维护已绑定设备及会话；
• 安全及防欺诈；
• 技术排错；
• 合法学校或业务记录保存；以及
• 履行适用法律义务。

推送通知令牌及会话信息可在 Campus Connect 保持安装或关联期间有效， 直至其过期、刷新、删除或不再需要。

DBS 可根据适用的教育、财务、会计、行政、合同及法律要求 保存官方底层学校记录。

10. 数据安全

HITC 采取合理的管理、技术及组织措施保护通过 Campus Connect 处理的信息。

这些措施可能包括：

• 加密 HTTPS 通信；
• 账户激活及访问控制；
• 经身份验证的管理员访问；
• 数据库访问限制；
• 服务器访问控制；
• 安全处理通知服务凭据；
• 会话管理措施；
• 安全及诊断日志；
• 系统监控；
• 数据备份；以及
• 技术维护及软件更新。

任何互联网服务、网络传输或电子存储方式均无法保证绝对安全。

11. 儿童及学生信息

Campus Connect 用于学校环境，因此可能处理与学生（包括未成年人） 有关的信息。

学生信息仅用于经授权的学校相关功能和服务。

家长、监护人、学生、员工及学校人员只能绑定和访问其依法或 按学校规定有权访问的记录。

在需要家长同意、监护人授权、学校授权或其他法律依据的情况下， DBS 和/或 HITC 将根据适用法律及学校政策采取相应程序。

12. 隐私权利和选择

在适用法律规定并经过适当身份或授权核实的前提下， 用户可以请求：

• 了解 Campus Connect 所处理的个人信息；
• 访问适用的个人信息；
• 更正不准确或不完整的信息；
• 在适当情况下删除或解除应用激活或设备绑定；
• 在处理基于同意时撤回同意；
• 在适用情况下反对或限制特定处理；
• 在法律规定的情况下取得适用个人信息的副本；以及
• 提出隐私问题或投诉。

用户还可以通过设备设置关闭 Campus Connect 推送通知。

对官方学生或员工学校记录的更正或删除请求可能需要直接提交 DBS， 因为 HITC 可能无权独立修改官方学校记录。

13. 解除绑定或删除 Campus Connect

用户可以通过卸载应用停止使用 Campus Connect。

在适当且可用的情况下，用户也可以请求解除设备绑定或 Campus Connect 激活。

卸载应用可能会删除设备本地保存的应用数据，但不会自动删除 DBS 保存的官方学校记录或 HITC / DBS 依法需要保存的信息。

14. 跨境处理

部分技术信息可能由菲律宾境外的第三方服务提供商处理， 包括推送通知、云服务、基础设施或其他技术服务提供商。

在适用情况下，此类处理受相关服务提供商的隐私及安全政策、 合同要求和适用法律约束。

15. 外部网站链接

Campus Connect 的公告或学校通知可能包含指向外部网站或 在线资源的链接。

当用户主动访问外部网站时，该网站可能有自己的隐私政策、条款、 安全措施、Cookies 及服务器日志。对于与 HITC 无关的第三方网站， HITC 不对其隐私实践负责。

16. 本隐私政策的变更

当 Campus Connect 功能、学校服务、服务提供商、技术基础设施 或适用法律发生变化时，我们可能更新本隐私政策。

最新版本将显示更新后的 “最后更新” 日期。

在法律要求或发生重大变更时，我们可能通知用户或要求用户 查看更新后的隐私政策。

17. 联系方式