This Privacy Notice (hereinafter referred to as the “Notice”), established and issued by Data Protectify Company Limited, forms part of the Legal Notice, governing the relationship between Data Protectify Company Limited (hereinafter collectively referred to as “Data Protectify”, “we”, “our”, or “us”) and our customers, prospective customers and connected parties (hereinafter collectively referred to as “you”, “your”). We are committed to fully protect your Personal Data in compliance with Decree No. 13/2023/ND-CP dated 17 April 2023 on Personal Data Protection (hereinafter “PDPD”).
1. SCOPE OF APPLICATION
This Privacy Notice applies to all visitors and users of our platforms, including but not limited to:
- Website: https://dataprotectify.vn
- Social Media: When you interact with our social media channels, please note that these platforms have their own Terms and Conditions and Privacy Policies which also apply:
By accessing or using any of our platforms, you acknowledge that you have read and understood this Privacy Notice.
The Notice is applied for us, as a Personal Data controller and/ or Personal Data processor, and explains which Personal Data we collect, how we use Personal Data, who we share the Personal Data with and retention of the Personal Data to keep it confidential and privileged.
2. DEFINITION OF TERMS
Personal Data refers to electronic information in the form of symbols, letters, numbers, images, sounds, or equivalences associated with an individual or used to identify an individual. The personal data includes general personal data and sensitive personal data.
General Personal Data includes:
- Last name, middle name and first name, other names (if any);
- Data of birth;
- Gender;
- Place of birth, registered place of birth; place of permanent residence; place of temporary residence; current place of residence; hometown; contact address;
- Nationality;
- Personal Image;
- Phone number; ID Card number; personal identification number, passport number, driver’s license number, taxpayer identification number, social security number and health insurance card number;
- Marital status;
- Digital account information; personal data that reflects activities and activity history in cyberspace;
- Information associated with an individual or used to identify an individual.
Sensitive Personal Data refers to personal data in association with individual privacy which, when being infringed, will directly affect an individual’s legal rights and interests, including:
- Information on customers of credit institutions, foreign bank branches, payment services providers and other licensed institutions, including: customer identification as prescribed by law, accounts, deposits, deposited assets, transactions, organizations and individuals that are guarantors at credit institutions, bank branches, and payment service providers;
- Personal location identified via location services;
- Other specific personal data as prescribed by law that required special protection.
Data Subject refers to an individual to whom the data relates.
Personal Data Processing refers to one or multiple activities that impact on personal data, including collection, recording, analysis, confirmation, storage, rectification, disclosure, combination, access, traceability, retrieval, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction or other relevant activities.
Consent refers to an act that the data subject permits the processing of his/her personal data in a clear, voluntary and affirmative manner.
Personal Data Controller refers to an organization or individual that decides purposes and means of processing personal data.
Personal Data Processor refers to an organization or individual that processes data on behalf of the Personal Data Controller via a contract or agreement with the Personal Data Controller.
Third Party refers to an organization or individual other than the data subject, Personal Data Controller, Personal Data Processor, and Personal Data Controller-cum-Processor that is permitted to process personal data.
3. PRIVACY PRINCIPLES
To preserve the confidentiality of your Personal Data provided to us, we commit to implement the following principles:
- You will be entitled to receive information related to the processing of your Personal Data, unless otherwise provided for by law.
- Your Personal Data will be processed for the purposes that we informed you.
- Your Personal Data will be collected in accordance with scope and purposes of processing.
- Your Personal Data will be updated and revised appropriately for processing purposes.
- Your Personal Data will be protected and secured throughout the processing. To be specific, your Personal Data shall be protected from violations against regulations on protection of personal data and prevention of loss, destruction or damage caused by incidents and use of technical measures.
- Your Personal Data will be stored within a period that is appropriate for the processing purposes, unless otherwise provided for by law.
4. WHAT KIND OF PERSONAL DATA DO WE COLLECT?
Data Protectify may collect the following categories of your Personal Data:
- Identify Data: First name, last name, email address, address, telephone number, signature, proof of identity, etc.
- Professional Data: Company name, job title, professional qualifications, etc.
- Billing Data: Bank details, means of payment, invoices, etc.
- Consumption Data: History of services and products used, event logs, etc.
- Communication Data: History of exchanges or enquiries with Data Protectify, exercise your rights, etc.
- Connection Data: IP address, device type, location data, connection and event logs, etc.
We may collect and combine your Personal Data on a case-by-case basis, including but not limited to:
- When you or your employer, corporate representatives provide to us.
- When you visit our websites, use our Products, Services and applications.
- When we collect from a public source, credit scoring, debt collection activities, competent authorities and our business partners and/or other third parties.
If you provide us with others’ Personal Data, you must obtain their consent as required by applicable laws, explain to them and ensure that they understand how we will process their Personal Data.
5. HOW DO WE PROCESS YOUR PERSONAL DATA?
We may rely on the following lawful reasons to fulfil our different purposes when we process your Personal Data to operate our business and provide our products and services.
6. TRANSFERRING PERSONAL DATA
In order to fulfill the purposes described in this Notice, we may transfer your Personal Data to selected third parties, both within Vietnam and overseas.
For all data transfers, Data Protectify implements appropriate safeguards to ensure that:
- All recipients are contractually obligated to maintain the confidentiality and security of your Personal Data.
- Transfers are conducted in accordance with applicable data protection laws.
- Appropriate technical and organizational measures are in place to protect your information.
When transferring Personal Data across borders, we comply with all relevant legal requirements and may implement additional protection or other approved transfer mechanisms as required by PDPD and relevant laws.
You may request information about our specific data transfer safeguards by contacting us through the details provided in the “Contact Information” section of this Notice.
7. PERSONAL DATA SECURE AND STORAGE
Data Protectify implements technical and organizational security measures to guarantee the constant confidentiality, integrity, availability and resilience of its information systems and services. These measures meet the state of the art and are adopted of the type of data concerned. We ensure that all our staff are aware of IT security and data protection issues.
To the extent permitted by law, we may store Personal Data in Vietnam or overseas, including on the Cloud computing. We maintain data protection standards in accordance with the applicable laws.
8. DATA SUBJECT RIGHTS AND OBLIGATIONS
To the extent permitted by law, you may exercise your rights by contacting us via the contact details provided in this Notice.
- Right to be informed: You have the right to be informed of your Personal Data processing.
- Right to give consent: You have the right to give or not the consent to your Personal Data processing.
- Right to access: You have the right to obtain confirmation of whether we process your Personal Data, to receive a copy of your Personal Data held by us, and to obtain information about how and why we process your Personal Data.
- Right to withdraw consent: You have the right to withdraw your consent at any time, where we process your Personal Data using only your consent.
- Right to delete: You have the right to delete or request deletion of your Personal Data, unless otherwise provided for by law.
- Right to restrict processing: You have the right to obtain restriction on the processing of your Personal Data, unless otherwise provided for by law.
- Right to be provided Personal Data: You have the right to request us to provide your Personal Data, unless otherwise provided for by law.
- Right to object processing Personal Data: You have the right to object to processing your Personal Data in order to prevent or restrict the disclosure of Personal Data or the use of Personal Data for advertising and marketing purposes.
- Right to file complaints, denunciations and lawsuits: You have the right to file complaints, denunciations and lawsuits as prescribed by law.
- Right to claim damages: You have the right to claim damage as prescribed by law.
- Right to self-protection: You have the right to self-protection according to regulations in the Civil Code, other relevant laws, or request competent agencies and organizations to implement civil right protection.
If you would like to exercise your Data Subject Rights, you can contact us through the details provided in the “Contact Information” section of this Notice. We may need to request specific Personal Data from you to help us confirm your identity and ensure your right to access the Personal Data or to exercise any of your other rights. This helps us to ensure that Personal Data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful reasons.
You should be also mindful that exercising your rights above may render our Products and Services limited, restricted, suspended, canceled, prevented, or prohibited. As a result, exercising your rights above may also be considered as a termination by you of any contractual relationship which you may have with us, and our legal rights and remedies in such an event are expressly reserved.
You also have the following obligations with respect to Personal Data:
- Protect your own Personal Data, request relevant organizations and individuals to protect your Personal Data.
- Respect and protect others’ Personal Data.
- Fully and accurately provide your Personal Data when you consent to Personal Data processing.
- Participate in disseminations of Personal Data protection skills.
- Comply with regulations of law on protection of Personal Data and prevent violations against regulations on protection of Personal Data.
- Other obligations are regulated under the applicable laws and regulations.
9. AMENDMENTS AND UPDATES
Data Protectify reserve the right to modify, update or amend this Notice from time to time in order to reflect any changes to the way we process your Personal Data or changing legal requirements. These modifications and updates of the Notice will be published in our official websites and, where appropriate, notified to you by email address. In the event that the modification, update, or amendment will affect the purposes for which your Personal Data has originally been collected, Data Protectify will notify you about such changes and obtain your new consent (if applicable), prior to such changes becoming effective. Therefore, Data Protectify recommends that you regularly review the Privacy Notice and its updates to stay informed about how Data Protectify processes your Personal Data.
10. CONTACT INFORMATION
If you wish to exercise any of your rights as outlined in this Notice, or if you have any questions about how we process your Personal Data, we encourage you to contact us. Our dedicated team is committed to addressing your privacy concerns in a timely manner.
You can reach us through any of the following methods: