Personal data processing policy
This regulation on personal data processing (“regulation”) is published by Dien Quang Group Joint Stock Company (hereinafter referred to as “Dien Quang Group”) on the website www.dienquang.com of DIEN QUANG GROUP to inform and explain to customers, potential customers, individual partners, candidates, employees and any individual who has or will have Personal Data processed by DIEN QUANG GROUP.(“Data Subject”) understand clearly the type of Personal Data processed, the rights and obligations of the Data Subject, the purpose, manner and other contents related to the processing of Personal Data by DIEN QUANG GROUP. When the Data Subject agrees to the Regulations through any method as prescribed by DIEN QUANG GROUP from time to time, the content of the agreement and the Regulations will form a legally valid agreement between the Data Subject and DIEN QUANG GROUP regarding the processing of Personal Data.
Data Subjects need to carefully read and regularly check the Regulations published on the website www.dienquang.com of DIEN QUANG GROUP to update any changes to this document from time to time.
I. PERSONAL DATA
1. Personal data is information in the form of symbols, letters, numbers, images, sounds or similar forms in an electronic environment that is associated with a specific person or helps to identify a specific person. Personal data includes basic personal data and sensitive personal data.
Basic personal data includes:
a) Surname, middle name, birth name, other names (if any);
b) Date of birth; date of death or disappearance;
c) Gender;
d) Place of birth, place of birth registration, permanent residence, temporary residence, current residence, hometown, contact address;
d) Nationality;
e) Personal image;
g) Telephone number, identity card number, personal identification number, passport number, driver's license number, vehicle license plate number, personal tax code number, social insurance number, health insurance card number;
h) Marital status;
i) Information about family relationships (parents, children);
k) Information about individual digital accounts; personal data reflecting activities and history of activities in cyberspace;
l) Other information that is associated with a specific person or helps to identify a specific person that does not fall within the scope of Sensitive Personal Data.
Sensitive personal data is personal data associated with an individual's privacy that, when violated, will directly affect the individual's legitimate rights and interests, including:
a) Political views, religious views;
b) Health status and personal information recorded in medical records, excluding blood type information;
c) Information related to racial origin, ethnic origin;
d) Information on inherited or acquired genetic characteristics of an individual;
d) Information on individual physical attributes and biological characteristics;
e) Information about the individual's sexual life and sexual orientation;
g) Data on crimes and criminal acts collected and stored by law enforcement agencies;
h) Customer banking information, including: customer identification information as prescribed by law, account information, deposit information, deposit information, transaction information, information about organizations and individuals who are guarantors at credit institutions, bank branches, and payment intermediary service providers;
i) Data on the location of an individual determined through location services;
k) Other personal data that is specified by law as specific and requires necessary security measures.
2. Data subject is the individual about whom the personal data is reflected.
II. METHOD AND TIME OF PROCESSING PERSONAL DATA
Starting from the time the Data Subject provides Personal Data to DIEN QUANG GROUP and/or DIEN QUANG GROUP collects Personal Data, until the Data Subject and DIEN QUANG GROUP have another agreement or the law requires otherwise, DIEN QUANG GROUP processes Personal Data through one or more activities affecting Personal Data, such as: collecting, recording, analyzing, validating, storing, editing, publishing, combining, accessing, retrieving, withdrawing, encrypting, decrypting, copying, sharing, transmitting, providing, transferring, deleting, destroying Personal Data or other related actions.
DIEN QUANG GROUP (including data processors used by DIEN QUANG GROUP) may collect Personal Data through channels of interaction with Data Subjects such as:
DIEN QUANG GROUP meets the Data Subject directly;
DIEN QUANG GROUP communicates with the Data Subject by telephone, regardless of whether or not there is a recording feature;
The Data Subject accesses and/or uses any features of the DIEN QUANG GROUP website and its linked pages;
Data Subjects access, negotiate, exchange information, and order goods on Dien Quang Group's sales platforms, such as websites, software, and pages;
Data Subjects provide Personal Data in applications, documents sent to DIEN QUANG GROUP, whether in paper documents or data messages;
Data Subjects interact with DIEN QUANG GROUP via text messages, emails, participation in social networking sites, online platforms, application support platforms, management platforms or any other information channels or methods.
In addition, DIEN QUANG GROUP may collect Personal Data through many other sources such as:
Surveillance camera system, recording or any other means located at the headquarters, branches, service introduction points of DIEN QUANG GROUP;
Publicly available sources, authorized organizations, competent authorities;
Other third parties ensure that the Data Subject's consent is obtained and/or compliance with legal regulations;
Other sources where the collection of information is required or permitted by law.
DIEN QUANG GROUP processes Personal Data in accordance with the provisions of law, this Regulation and other agreements (if any) between the Data Subject and DIEN QUANG GROUP.
DIEN QUANG GROUP takes all reasonable and legal measures and methods to implement and maintain its commitment to protect, ensure the safety and security of Personal Data.
To the extent permitted by law, DIEN QUANG GROUP may store Personal Data at any location, including on cloud storage solutions. DIEN QUANG GROUP has the right (but is not obliged) to store Personal Data for the period necessary to fulfill the purposes of processing Personal Data stated in this Regulation, except in cases where the storage period of Personal Data is longer as prescribed by law, regulations of DIEN QUANG GROUP or by agreement between the Data Subject and DIEN QUANG GROUP.
In order to ensure the accuracy and completeness of Personal Data, DIEN QUANG GROUP proactively adjusts and updates Personal Data when errors or changes are detected or at the request of competent state agencies without notifying or receiving the consent of the Data Subject.
III. PURPOSE OF PROCESSING PERSONAL DATA
The purposes for which DIEN QUANG GROUP processes Personal Data depend on the relationship between DIEN QUANG GROUP and the Data Subject, including but not limited to:
i. Identify customers, collect, update, and verify customer identification information according to anti-money laundering laws; Check conditions and information of Data Subjects such as identifying personal information of Data Subjects to provide products and services to Data Subjects.
ii. Check and verify the work and study process, health status and any other requirements that the Data Subject must meet according to the recruitment and human resource management requirements of DIEN QUANG GROUP.
iii. Exercise any rights and obligations of DIEN QUANG GROUP and/or Data Subject according to the respective agreement between DIEN QUANG GROUP and Data Subject and/or legal regulations, including DIEN QUANG GROUP's right to collect debts;
iv. Resolve requests, complaints and disputes of Data Subjects;
v. Carry out research activities, provide, operate, process and manage products and services of DIEN QUANG GROUP, including research, evaluation and development of new products and services, and development of technology related to the operations of DIEN QUANG GROUP;
iv. Contact and exchange with Data Subjects about all contents related to products and services of DIEN QUANG GROUP, agreements, relationships between Data Subjects and DIEN QUANG GROUP and the content of the Regulations;
vii. Recruitment, recruitment brand promotion; arrangement, management, operation, labor supervision, rewards, handling of labor discipline violations and settlement of labor disputes;
viii. Marketing, customer care, including information, offering to Data Subjects new products, services, advertising information, promotions... of DIEN QUANG GROUP so that Data Subjects can have information and opportunities to use these products and services, carry out customer care activities and programs; compare and collect public information of Data Subjects on social networking sites;
ix. Provide Data Subjects with access, use and other support related to the website, DIEN QUANG GROUP Application, social networking sites, proposal and contract support platforms, management platforms or any other information channels or methods that DIEN QUANG GROUP uses to interact with Data Subjects; perform operations, management, analysis, evaluation and related improvements;
x. Prepare, send reports, provide to competent state agencies and other organizations permitted to operate Data Subject information according to law.
xi. Assess and manage risks; detect, investigate and prevent fraud, scams and criminal offences;
xii. Inspection, audit;
xiii. To establish, manage and maintain the cooperative relationship between DIEN QUANG GROUP and the Data Subject, to better understand the current and future investment and business cooperation needs of the Data Subject with DIEN QUANG GROUP;
xiv. Monitor, ensure, protect public security, safety, prevent and minimize threats to the life, health, property and interests of DIEN QUANG GROUP and of Data Subjects;
xv. Check and monitor the process of providing products and services to Data Subjects through professional measures such as contacting and exchanging information with customers and their family members (including (a) family members, relatives, and other blood relatives according to the law on marriage and family, and (b) other cases reasonably determined by DIEN QUANG GROUP according to the law and internal regulations of DIEN QUANG GROUP) even when customers do not provide information about these family members to DIEN QUANG GROUP but DIEN QUANG GROUP has a basis to determine based on the Personal Data of the Data Subject and/or Related Person that DIEN QUANG GROUP receives at any time through any legal source;
xiv. Exercise and protect any rights of DIEN QUANG GROUP according to the provisions of law;
xvii. Update, improve the accuracy and completeness of the Personal Data processed;
xix. Comply with the internal policies of DIEN QUANG GROUP and/or current legal regulations and/or requests of competent state agencies;
xx. For other reasonable purposes related to the purposes set out above and/or as required or permitted by law and/or with the consent of the Data Subject.
IV. ORGANIZATIONS AND INDIVIDUALS INVOLVED IN THE PURPOSE OF DATA PROCESSING
In order to carry out the purposes of processing Personal Data, DIEN QUANG GROUP may share Personal Data with relevant organizations and individuals, including but not limited to:
Partners/suppliers are brokers, insurers, data processing service providers, information technology services, auditing services, legal services, collection services/payment intermediary services, delivery services and other services related to, or to support the business operations and human resource management of DIEN QUANG GROUP;
Parties involved in the cooperative, employment, recruitment and labor management relationship between DIEN QUANG GROUP and the Data Subject as determined by DIEN QUANG GROUP;
Parties receiving transfers, assigns or successors of the rights and obligations of DIEN QUANG GROUP in the relationship between DIEN QUANG GROUP and the Data Subject;
Other third parties under other agreements between the Data Subject and DIEN QUANG GROUP ensure compliance with current legal regulations;
Individuals, competent authorities or third parties that DIEN QUANG GROUP is obliged or entitled to disclose according to the law or contract, agreement between DIEN QUANG GROUP and the third party.
V. RIGHTS AND OBLIGATIONS OF PERSONAL DATA SUBJECTS
Data Subjects have full rights in accordance with legal regulations, including:
1. Right to know: Data Subjects are informed about their Personal Data processing activities, unless otherwise provided by law. Through this Regulation, DIEN QUANG GROUP ensures to fully notify Data Subjects of the content related to DIEN QUANG GROUP's processing of Personal Data of Data Subjects in accordance with the law.
2. Right to consent: After reading and understanding all the contents of this Regulation, the Data Subject has the right to agree or disagree with DIEN QUANG GROUP to process the Data Subject's Personal Data, unless otherwise provided by law. In case of agreement, the Data Subject expresses his/her agreement to this Regulation through any method as prescribed by DIEN QUANG GROUP from time to time and in accordance with the law. The agreed content and this Regulation will form a legally valid agreement between the Data Subject and DIEN QUANG GROUP.
By agreeing to this Regulation, the Data Subject confirms that: At the time of expressing agreement to the Regulation, the Data Subject clearly understood (i) the type of Personal Data processed; (ii) the purpose of processing Personal Data; (iii) the organizations and individuals whose Personal Data is processed; (iv) the rights and obligations of the Data Subject. DIEN QUANG GROUP does not need to send any additional notices to the Data Subject when conducting one or more activities of processing the Data Subject's Personal Data in the future. In any case, the Data Subject's consent is applicable to all activities in the process of processing Personal Data of DIEN QUANG GROUP.
1. Right to access, correct, delete Personal Data, restrict, object to the processing of Personal Data: Data Subjects have the right to request DIEN QUANG GROUP to grant access to view, edit, delete their Personal Data, request DIEN QUANG GROUP to restrict processing or object to DIEN QUANG GROUP's processing of their Personal Data, unless otherwise provided by law. DIEN QUANG GROUP has the right to refuse the Data Subject's request or request the Data Subject to provide additional information and relevant grounds in certain cases in accordance with legal regulations. If accepting the Data Subject's request, DIEN QUANG GROUP will fulfill the request within the time limit prescribed by law. The procedure for requesting and handling the Data Subject's request is carried out in accordance with DIEN QUANG GROUP's regulations from time to time.
2. Right to withdraw consent: The Data Subject has the right to withdraw his/her consent, unless otherwise provided by law. The withdrawal of consent does not affect the lawfulness of the processing of Personal Data to which the Data Subject has given his/her consent prior to the withdrawal of consent. DIEN QUANG GROUP has the right to refuse the Data Subject's request to withdraw his/her consent in certain cases in accordance with the provisions of law. The procedure for withdrawing consent is carried out in accordance with DIEN QUANG GROUP's regulations from time to time.
When the Data Subject withdraws consent, DIEN QUANG GROUP has the full right to terminate the provision of DIEN QUANG GROUP's products and services to the Data Subject and/or terminate the relationship between DIEN QUANG GROUP and the Data Subject and shall not bear any responsibility to the Data Subject, unless otherwise provided by law.
2. Right to complain, denounce, sue, request compensation for damages, and self-defense: Data Subjects comply with legal regulations.
Data Subjects have the following obligations:
Provide complete and accurate Personal Data to DIEN QUANG GROUP;
Proactively exercise the right to request correction of Personal Data as soon as Personal Data is discovered to be inaccurate;
Take measures to protect Personal Data, limit damage and immediately contact DIEN QUANG GROUP when discovering or suspecting that Personal Data is being illegally accessed, used, disclosed, lost, interfered with or appropriated; (iv) Other obligations as prescribed by law.
VI. RELATED PERSONS
In case the Data Subject provides Personal Data of any other Data Subject to DIEN QUANG GROUP (“Related Person”), The Data Subject acts as the personal data controller/personal data controller and processor (depending on the agreement between the Data Subject and the Related Person), DIEN QUANG GROUP acts as the personal data processor. This Regulation is an agreement on the processing of the data of the Related Person between the Data Subject (personal data controller/personal data controller and processor) and DIEN QUANG GROUP (personal data processor).
Accordingly, the Data Subject commits and guarantees that DIEN QUANG GROUP has full rights to process the Personal Data of the Related Person as the Personal Data of the Data Subject himself.
In this case, the Data Subject acknowledges and agrees that:
The Data Subject always fully performs the responsibilities of the personal data controller/personal data controller and processor towards the Related Person as prescribed by law;
Before providing the Personal Data of the Related Person to DIEN QUANG GROUP, the Data Subject has informed each Related Person about the processing of their Personal Data and obtained the consent of each Related Person to allow the Data Subject to provide, allowing DIEN QUANG GROUP to process their Personal Data as the Data Subject's own Personal Data in accordance with the law and this Regulation, in particular agreeing to the purposes of processing Personal Data stated in Section III of the Regulation. The Data Subject is obliged to provide DIEN QUANG GROUP with evidence proving that the Data Subject has notified each Related Person about the processing of each Related Person's Personal Data and the consent of each Related Person at any time upon request of DIEN QUANG GROUP;
The Data Subject is obliged to notify the Related Person of this Regulation from time to time and shall be responsible if the Related Person has any related requests or complaints;
In case the Related Person withdraws the consent to allow DIEN QUANG GROUP to be the processor of personal data, the Data Subject must immediately notify DIEN QUANG GROUP within 24 hours (twenty-four hours) from the time the Related Person withdraws the consent so that DIEN QUANG GROUP can terminate the processing of the Related Person's Personal Data;
The Data Subject shall be responsible for all Personal Data of the Related Person and shall keep DIEN QUANG GROUP from any adverse effects from the processing of Personal Data of the Related Person. If the Data Subject violates the commitments in this Regulation and/or violates the law causing damage to DIEN QUANG GROUP, the Data Subject commits to compensate DIEN QUANG GROUP for damages according to the law.
VII. REPRESENTATIONS AND DISCLAIMERS
DIEN QUANG GROUP is the controller and processor of Personal Data or the processor of Personal Data (as the case may be) in accordance with this Regulation and the provisions of law.
In order to effectively protect, ensure the safety and security of Personal Data, in addition to the measures and methods implemented by DIEN QUANG GROUP, the cooperation of the Data Subject is a necessary requirement. DIEN QUANG GROUP recommends that Data Subjects proactively take actions to protect, ensure the safety and security of their own Personal Data and that of Related Persons, as requested by DIEN QUANG GROUP and/or as prescribed by law. DIEN QUANG GROUP is not responsible if Personal Data is disclosed, lost or illegally interfered with through no fault of DIEN QUANG GROUP.
DIEN QUANG GROUP does not guarantee the absolute accuracy of Personal Data or is responsible for any loss or damage resulting from inaccurate Personal Data.
DIEN QUANG GROUP is exempted from all related responsibilities if force majeure events occur that interrupt, delay, or affect DIEN QUANG GROUP's processing of Personal Data.
VIII. GENERAL PROVISIONS
Personal Data in this Regulation includes both Personal Data of Data Subjects and Related Persons.
The Regulations have legal value and are binding on the Data Subject and Related Persons. These Regulations are considered supplementary and do not affect other rights regarding collection, use, disclosure, and processing of data by DIEN QUANG GROUP. In case the Data Subject has agreed to let DIEN QUANG GROUP collect, process, provide, and disclose the Data Subject's information, including the information of Related Persons, before the date DIEN QUANG GROUP publishes these Regulations, the Data Subject's consent shall automatically apply to these Regulations without the need for further confirmation of the Data Subject's consent.
DIEN QUANG GROUP has the right to adjust and supplement these Regulations at any time and publish them on DIEN QUANG GROUP's website wwww.dienquang.com. The Data Subject's continued use of DIEN QUANG GROUP's products and services and/or maintaining relationships, interactions, and exchanges with DIEN QUANG GROUP is considered acceptance of the Regulations and all related amendments and supplements. The amended and supplemented Regulations are effective for the Data Subject and Related Persons from the date specified by DIEN QUANG GROUP in the Regulations.
