1. WHICH PERSONAL DATA WE COLLECT
We may obtain the following types of your personal data (“Personal Data”), including Basic Personal Data and Sensitive Personal Data as prescribed under applicable laws and as defined in this Notice, as follows:
“Basic Personal Data” refers to personal data reflecting common personal details and background information, frequently used in transactions, including but not limited to:
- Data relating to identity, such as name, marital status, Citizen Identity Card/National Identity Card/passport number, employee identification number, corporate email address and nationality;
- Contact information, such as residential address, telephone number and email address;
- Individual’s digital account;
- Other Basic Personal Data as prescribed under applicable laws.
“Sensitive Personal Data” refers to personal data associated with individuals’ privacy rights that, if infringed on, directly affect legitimate your rights and benefits including but not limited to:
- Data and information relating to payment and banking, such as customer identification information maintained by credit institutions in accordance with applicable laws, account information and transaction information;
- Data relating to the monitoring of behaviours and activities when using telecommunications services, social networking services, online communication services and other services in cyberspace (where applicable);
- Other Sensitive Personal Data as prescribed under applicable laws.
2. WHY WE PROCESS YOUR PERSONAL DATA?
We process your Personal Data for activities carried out for the purpose of establishing, performing and maintaining the relationship between you and us (“Purpose”), including but not limited to the following circumstances:
- When you or the representatives of your organisation or company use or provide our products and services;
- When you access and use our platforms, applications, services, or our official communication channels;
- When we collect and/or combine your Personal Data from lawful public sources, our business partners, competent authorities, or third parties authorised by you or as otherwise permitted or required under applicable laws.
If you provide us with the Personal Data of other individuals, you are responsible for ensuring that you have obtained their consent in accordance with applicable laws and for explaining to them, and ensuring that they understand, how we will process their Personal Data.
3. TO WHOM WE SHARE YOUR PERSONAL DATA
In order to fulfill the Purpose described in this Notice, we may share your Personal Data with:
- Our affiliates and business partners, including but not limited to our product or service providers, brokers, consultants (e.g., advisors, partners, distributors, customers, and Personal Data Processors such as payroll service providers), including their employees, directors and personnel;
- Domestic and foreign law enforcement agencies and competent authorities;
- Our potential assignees, transferees or merger partners;
- Third parties to whom you have given your consent or with whom we are legally permitted or required to share your Personal Data;
- Other parties as required or permitted under applicable laws.
4. HOW WE TRANSFER YOUR PERSONAL DATA
In order to fulfill the Purpose described in this Notice and to the extent permitted by applicable laws, we may transfer your Personal Data to selected third parties, both within and outside Vietnam. For all Personal Data transfers, we implement appropriate safeguards to ensure that:
- All recipients are contractually obligated to maintain the confidentiality and security of your Personal Data in accordance with applicable laws;
- Transfers of Personal Data are conducted in accordance with applicable laws on data and Personal Data protection;
- Appropriate technical and organizational measures are in place to protect your Personal Data.
When transferring Personal Data outside Vietnam, we comply with all relevant legal requirements and may implement additional safeguards or other approved transfer mechanisms in accordance with applicable laws on data and Personal Data protection.
You may request information about the specific safeguards we implement for the transfer of your Personal Data by contacting us through the details provided in the “Contact Information” section of this Notice.
5. DATA SUBJECT RIGHTS AND OBLIGATIONS
To the extent permitted by applicable laws, you may exercise your rights by yourself or authorize another organization or individual in accordance with the Civil Code to exercise the following rights on your behalf:
- To be informed of the processing of your Personal Data;
- To give or refuse your consent, or request the withdrawal of your consent to the processing of your Personal Data;
- To access, review, rectify or request the rectification of your Personal Data;
- To request provision, deletion, restriction on the processing of your Personal Data, or object to the processing of your Personal Data;
- To file complaints, denunciations or lawsuits, and claim damages in accordance with applicable laws;
- To request competent authorities or organizations, agencies and individuals involved in the processing of your Personal Data to implement measures and solutions to protect your Personal Data in accordance with applicable laws.
If you wish to exercise your rights in relation to your Personal Data, you or your duly authorized representative may contact us through the contact details provided in the “Contact Information” section of this Notice. Please note that we may request certain Personal Data from you to verify your identity and ensure that your right of access or any other rights are exercised by the appropriate person. This helps prevent your Personal Data from being unlawfully disclosed to any third party. No fee is required to make such a request unless your request is clearly unfounded or violates the principles governing the exercise of rights. Depending on the circumstances, we may be unable to comply with your request or may transfer your request to other Personal Data Controllers for handling in accordance with applicable laws.
You should also be aware that exercising certain rights mentioned above may result in the provision or maintenance of part or all of our products and services being restricted, suspended, prevented or terminated. Accordingly, the exercise of such rights may be deemed as your decision to terminate, in whole or in part, your relationship with us, and in such event, we expressly reserve all of our legal rights and remedies.
In addition, you also have the following obligations with respect to your Personal Data:
- To protect your own Personal Data;
- To respect and protect the Personal Data of others;
- To provide your Personal Data fully and accurately as required under applicable laws, under contractual obligations, or when consenting to the processing of your Personal Data;
- To comply with applicable laws on Personal Data protection and participate in preventing and combating violations against Personal Data.
When exercising your rights and performing your obligations, you must ensure compliance with the principles prescribed under applicable laws, including:
- Exercising your rights and performing your obligations in accordance with applicable laws and complying with your contractual obligations;
- Exercising your rights and performing your obligations for the purpose of protecting your own lawful rights and interests;
- Not causing difficulties or obstructing our exercise of legal rights and performance of legal obligations;
- Not infringing upon the lawful rights and interests of the State, agencies, organizations or other individuals.
6. PERSONAL DATA SECURE AND STORAGE
We implement technical and organizational security measures to ensure the ongoing confidentiality, integrity, availability and resilience of our information systems and services. We also ensure that all our personnel are trained and aware of matters relating to information technology security and Personal Data protection.
To the extent permitted by law, we may store Personal Data in Vietnam or overseas, including on the cloud computing. We are committed to maintaining data protection standards in accordance with the applicable laws.
Please note that no security measure or data storage system can be guaranteed to be completely secure. In the event of a Personal Data breach, we will take the necessary response measures and promptly notify the competent authorities and affected individuals, where required or necessary, in accordance with applicable laws.
7. AMENDMENTS AND UPDATES
As part of our commitment to continuously enhancing our standards and capabilities, we reserve the right to modify, update or amend this Notice from time to time in order to reflect any changes to the way we process your Personal Data or changing legal requirements. These modifications and updates of the Notice will be published in our official websites and, where appropriate, notified to you by email address. In the event that any update or amendment affects the original Purpose, we will notify you and obtain your renewed consent (where required) before implementing such changes. Accordingly, we encourage you to review this Notice and any updates periodically to stay informed about how we process your Personal Data.
8. CONTACT INFORMATION
If you wish to exercise any of the rights described in this Notice, or if you have any questions regarding our processing of your Personal Data, please contact us. Our team is committed to responding to your privacy-related requests in a timely and effective manner.
You can reach us through any of the following methods:
DATA PROTECTIFY LTD., CO
- Head Office: L1, HSC Building, No. 162B Dien Bien Phu Street, Xuan Hoa Ward, Ho Chi Minh City.
- Business Location: HQ Building, No. 10 Street 33, An Khanh Ward, Ho Chi Minh City.
- Contact Form: Contact Data Protectify
- Email: contact.us@dataprotectify.vn
Privacy Notice (hereinafter referred to as the “Notice”), issued by Data Protectify Ltd., Co, forms an integral and inseparable part of the Service Provision Policy. Accordingly. This Notice applies to us in our capacity as a Personal Data Controller and/or Personal Data Processor and explains the categories of personal data we collect, the manner in which we process such personal data, the parties with whom we share personal data, and the retention periods applicable to such personal data, with a view to ensuring the confidentiality and privacy of such personal data.
This Notice governs the relationship between Data Protectify Ltd., Co (hereinafter collectively referred to as “Data Protectify”, “we”, or “our”) and our existing and prospective partners, as well as their relevant individuals, where personal data processing activities arise (hereinafter collectively referred to as “you” or “your”).
This Notice also applies to users and visitors who access our pages on various online platforms, including but not limited to:
When you interact with our pages on these platforms, please be aware that each platform has its own terms and conditions and privacy policy, which may also apply to you.