MandaTrack is Mandaluyong City's QR Code contact tracing solution.
For Support, email firstname.lastname@example.org
City Government of Mandaluyong
We, at the City Government of Madaluyong, are committed to protect and respect your personal data privacy and rights. We are not only complying but performing our obligations under Republic Act No. 10173 or the Data Privacy Act of 2012.
Collection of your personal data
Data minimization is the core of our collection policy. We only collect personal data that we need. We collect your following personal data using web forms found in the https://mandatrack.appcase.net when you register with our digital contact tracing solution developed for Mandaluyong City known as “MandaTrack”:
Upon successful registration, you will be issued a unique and encrypted MandaTrack QR Code containing your personal data. Your personal data will be scanned by the establishment before entering, and will be directly transmitted and stored in the Mandaluyong City Epidemiology and Surveillance Unit (CESU) database for the purpose of contact tracing with individuals who are positive of COVID-19. If necessary, we will immediately inform you if you happen to come in close contact with a COVID-19 positive for you to take the appropriate health and safety measures.
We do not use or let anyone use your personal data for market research and advertising, including our Service Provider. We will disclose or share your personal data to a third party only if you consent to it, unless we are under any legal obligation to do so or required by law. Only select and authorized city employees who have agreed to keep their confidentiality will process your personal data.
Storage and Retention
Upon successful registration, you will be given a unique and encrypted MandaTrack QR Code containing your personal information. All information gathered from the use of the QR Code will be automatically deleted in the database every thirty (30) days, except those belonging to COVID-19 positive registrants. All personal data collected by https://mandatrack.appcase.net are stored and retained in the Mandaluyong CESU database and Cloud Storage until the President has lifted the State of Public Health Emergency due to COVID-19. After the lifting thereof, they shall be permanently deleted. However, information of COVID-19 positive registrants shall be archived or stored by the Mandaluyong CESU for documentation only. The City Government of Mandaluyong neither do nor consent to the re-purposing of your personal data in the MandaTrack.
Personal data that are digitally processed by MandaTrack are encrypted using Advance Encryption Standard with a key size of 256 Bit (AES-256) and 2048 Bit (RSA-2048) to ensure data protection. MandaTrack is also using an Application Program Interface (API) imbedded and implemented on a separate site protected with an authentication and authorization method. Our Service Provider has been regularly monitoring website and Cloud Storage, and periodically conducting Vulnerability Assessment and Penetration Testing (VAPT) on them. Confidentiality and nondisclosure agreements are likewise executed by the Service Provider, contact tracers and those city employees involved in collecting and processing of personal data under the MandaTrack.
Accessing and correcting your personal information
Should you wish to access your personal data found in the official records or database of the City Government for the MandaTrack for the purpose of correcting, completing, deleting or blocking any, some or all of your personal data, you may do do by sending a written request in the prescribed form addressed to the Data Protection Officer (DPO) of Mandaluyong, Atty. Jeffrey P. Omadto, at City Legal Department, 4/F Executive Building, City Government Complex, Maysilo Circle, Plainview, Mandaluyong City, or send such request at email@example.com.
Filing of complaints and inquiries
Pursuant to Ordinance No. 814, S-2021 or the “MandaTrack Ordinance” and its Implementing Rules and Regulations (IRR), all complaints and inquiries relating to the MandaTrack and data privacy violations in connection thereto shall be addressed and filed, in writing, with the Data Privacy Committee with office address at Office of the Mayor, 4/F Executive Building, City Government Complex, Maysilo Circle, Plainview, Mandaluyong City, or through email at firstname.lastname@example.org.
For technical concerns, we have created the MandaTrack Support Team, and you may reach them at email@example.com.