DATA PRIVACY CONSENT FORM

Republic Act No. 10173, otherwise known as The Data Privacy Act of 2012 (the "Data Privacy Act), sets out the principles that should be followed when processing Personal Information and Sensensitive Personal Information (collectively, "Personal Data") of any kind. One of the ways in which Rockwell Land Corporation and its subsidiaries ("Rockwell") can take steps to comply with some of these principles is to ask for your consent to process your Personal Data which are related to your assignment.

Personal Data We Collect

We maintain certain Personal Data about you as part of our general employee records. Our records may include your name, address and context details (email address and can be reached numbers), birthday, marital status, gender, nationality, educational background, employment application, history with the company, areas of expertise, details of salary and benefits, bank details, performance apparatus and quality reviews, records relating to holidays and other books, working time records, meetfullhealth records and history, government-based identification (including passport, driver's license, social security, number, PHILIPPA) numbers. This identification (number), tax records, and other management records related to your employment with Rockwell. We have obtained this data in several ways - directly from you, from third-party service providers and/or otherwise over time through our relationship with you - and may receive and/or retain the same in various forms identified by writing electronically, verbally or otherwise.

Purposes of Data Processing

We use the Personal Data for a variety of legitimate business purposes, including but not limited to:

• To comply with the laws of legal, regulatory and government and/or agency requirements and obligations, and to perform other processing or disclosure that may be required under law or regulations.
• To allow Rockwell to understand employees and individual consultant profiles, skills, and capabilities necessary for designing and informing decisions for group-wide other management. Indirective includes: Not as not limited to: all relevant management and mobility; (i) performance management; (ii) succession management; (iii) leadership development; (iv) competency management; (v) talent acquisition; etc.;
• To perform employee actions and benefits;
• To perform employee success on executive and employee development, communications, health and safety engagement programs, and organizational planning and management;
• To provide assurance in case of emergency, and to account for employees during emergencies and/or crises;
• To enable effective management of HR functions (e.g. socioeconomic risk, and compliance review) while ensuring compliance with legal, regulatory and ethical standards.
• To provide insights into the state of our Diversity, Equity, Inclusion and Biasing policy and processes that are appropriate for employees, and help us enter initiatives and interventions that will bring the most important to the organization. Sample data may include, but as not limited to, (1) gender equality; (2) inclusion of persons with disabilities; (3) creation of employee resource groups; (4) policy changes, among others.
• To establish data quality standards and a governance structure to ensure accuracy, solid, and reliable employee data across Rockwell, its affiliates, and its parent company.
• To collect employee data in a single, secure system and centralise information for accuracy, security, and accessibility, ensuring seamless data management that occurs with business needs;
• To ensure business continuity and employee welfare checks;
• To educate benefits processing support services, including medical reimbursements and transportation legislation.
• To include in Rockwell's Integrated Report, reflecting the organisation's commitment to employee development, regulatory compliance, and sustainability, it provides transparency on workforce level, and communication between personnel, and highlighted investments in human capital.
• To track attendance for the following purposes: (1) Annual Integrated Report; (2) assess participation trends and identify high-impact topics; (3) support employee growth and determine engagement with people and society/engage in leading resources;
• To validate health and safety health data for participation in engagement and training, including a clearing of participants according to age group, and to gather profiles of participants for examining design of engagement activities and logistical preparations;
• To manage security to Rockwell's payments by granting required access at the workplace for the performance of an individual's duties and obligations;
• To grant access to Rockwell's IT systems and infrastructure - consistent with IT policies and procedures;
• To process requirements for work purposes, including travel, certification, appointments, and the like;
• To conduct internal investigations and reduce the cost of education, disciplinary proceedings, and other analogous circumstances;
• To respond to or address specific complaints, inquiries, or requests; and
• Other similar or related purposes.

Data Sharing and Disclosure

As a general rule, we do not and will not share personal data with third parties except as necessary for the proper execution of processes related to a declared purpose, or the use or disclosure is reasonably necessary, required, or authorised by our uncle law. This means Rockwell may provide personal data to (a) existing and prospective business partners, service providers, and contractors, consistent with third parties discussed above; (b) affiliates and subsidiaries of Rockwell; and (c) law enforcement and government agencies. However, such third parties may only use personal data for the purposes disclosed in this document, and may not use a few any other purpose.

Data Storage and Security

Some of these Personal Data are stored in a database and file system located in our company premises and/or online facilities. Both database and file systems are controlled by our authorised administrative personnel and can be only accessed by authorised personnel. Rockwell has organisational or administrative, physical, and technical controls and security measures in place ensuring the confidentiality, integrity, and availability of the information contained in the database and file system and all measures are reviewed once they were updated in line with technological developments. All other Personal Data are kept in the secured records of Rockwell's Human Resources Team.

Data Retention and Your Rights

The Personal Data you provide will be retained by Rockwell for a period of ten (10 years from the end date of your assignment, or as long as necessary for a legitimate business purpose (the "Personal Data Retention Period"). While in custody of your Personal Data, Rockwell implements security measures to ensure protection and privacy of your Personal Data. Unless retention for a longer period is required for reasonable cause, the Personal Data shall, upon the lapse of the Personal Data Retention Period, be securely disposed of by Rockwell in accordance with law. You and your professional references are entitled to certain rights in relation to the Personal Data that may be collected from you and from your contacts. With the right to request, correct, and object to the processing, as well as the right to file a complaint before the National Privacy Commission in case of violation of your or your professional reference's rights as data subjects. You may consult Rockwell's Data Protection Officer (DPC) at [email protected] for any concerns regarding your Personal Data.