This Personal Data Protection Policy (the “Policy”) is issued by IIG Vietnam Joint Stock Company, including its subsidiaries and affiliated entities (collectively referred to as “IIG Vietnam”). This Policy outlines how IIG Vietnam processes and protects the personal data of Customers.

IIG Vietnam fully recognizes the importance of personal data protection and is committed to respecting privacy and autonomy of its customers. IIG Vietnam pledge to protect the customer’s personal data using robust security measures, ensuring transparency and full compliance with applicable laws and regulations on personal data protection.

1. Scope

This Policy applies to the collection and processing of personal data belonging to individuals who search for, interact with, or use IIG Vietnam’s products, services, websites, applications, or social media platforms. It also extends to any related persons as required by applicable law, including co-owners or co-users of products or services provided by IIG Vietnam (collectively referred to as the “Customer”).

This Policy is an integral part of the general terms and conditions and serves as an inseparable appendix to any service agreements or contracts established between the Customer and IIG Vietnam.

2. Types of Personal Data Collected by IIG Vietnam

The categories of personal data collected by IIG Vietnam fall within the scope of personal data as prescribed under the applicable laws of Vietnam. We only collect information that is strictly necessary for the purposes outlined in this Policy, depending on the specific products or services provided by IIG Vietnam or the nature of the Customer’s interaction with IIG Vietnam. This includes:

– Basic Personal Data: Full name, middle name, and birth name; any aliases; date of birth; gender; place of birth (including place of birth registration); permanent and temporary residence address; current address; hometown; contact information; nationality; phone number, personal images; and identification numbers (Citizen ID, Passport), driver’s license number and vehicle license plate number. It also includes marital status, family relationships (such as parents, children, spouse), and digital account information.

– Sensitive Personal Data: Data revealing racial or ethnic origin; political opinions, religious or philosophical beliefs; health-related data; biometric and genetic data; copies/images of identity cards (Citizen ID or ID); banking card information; and behavioral data tracked through the Customer’s use of telecommunications, social networks, online media services, and other services in cyberspace.

3. Methods of Personal Data Collection

– Directly from the Customer: through one or more of the following methods: via contracts/agreements; via IIG Vietnam’s websites, applications, or social media platforms; in person; by mail, telephone, online platforms, electronic communication, or other lawful means of information provision.

– CCTV Footage: Data from cameras at IIG Vietnam’s working areas, provided that the Customer has been duly informed in advance prior to any working engagement, cooperation, or transaction.

– From Third Parties: IIG Vietnam receives data from third parties provided that the following two conditions are met simultaneously:

(i) The third party and IIG Vietnam have entered into a written agreement regarding the provision and protection of personal data, in which the third party commits to having obtained the Customer’s consent to provide the personal data to IIG Vietnam; and

(ii) IIG Vietnam shall only use the Customer’s personal data for the purposes outlined in this Policy.

4. Purposes of Personal Data Processing

As the Personal data controller and processor, IIG Vietnam collects and processes the Customer’s personal data for the following purposes:

4.1 Provision of IIG Vietnam’s Products and Services

– To provide IIG Vietnam’s products and services to the Customer and/or individuals or organizations authorized to represent the Customer, including but not limited to: consultancy, usage guidance, responding to the Customer’s inquiries regarding IIG Vietnam’s products and services; notification, registration, exam administration, and delivery of results; handling complaints; after-sales services, post-test verification, customer care, promotional information, and offers, etc.

– To ensure the Customer’s rights and responsibilities when registering for, participating in exams, or using other products and services of IIG Vietnam and/or to support the development of IIG Vietnam, we may collaborate and provide data to partners, including test owners. In such cases, IIG Vietnam ensures that all such partners have signed personal data protection contracts or agreements in compliance with applicable laws.

4.2 Corporate Governance, Operational Management, and Business Development

IIG Vietnam may directly implement or engage the services of reputable partners (who have signed personal data protection agreements with IIG Vietnam), including but not limited to: statistical reporting; internal data analysis for research, development, management, measurement, and service delivery; deploying and using Google Analytics, advertising cookies, or similar tools to personalize products/services, develop new offerings, and improve existing products/services; ensuring security and public order, etc.

4.3 Marketing and Promotion of Products and Services

Consulting on and introducing products and services of IIG Vietnam and/or trusted partners who have signed cooperation and data confidentiality agreements with IIG Vietnam, provided that the Customer have registered to receive information via email, telephone, or other methods. If the Customer wish to opt out of receiving such notifications, please contact IIG Vietnam for guidance.

4.4 Compliance with Legal Obligations

For the exercise of IIG Vietnam’s rights, responsibilities, and obligations: in accordance with applicable laws from time to time and/or at the request of competent state authorities.

5. Data Retention Period

The Customer’s personal data shall be stored using high-security measures until the occurrence of one of the following events:

– Upon receipt of a valid written request from the Customer for the deletion or destruction of personal data, together with the Customer’s confirmation and acceptance of all risks and potential consequences arising from such deletion or destruction. An exception applies if the Customer has participated in any exam organized by IIG Vietnam and committed a violation during the testing process, leading to disciplinary actions under the Regulations of Handling Violation. In such cases, the Customer agrees that IIG Vietnam has the right to retain necessary information to ensure that disciplinary measures are strictly enforced, maintaining the transparency, quality, and fairness of the tests.

– As required under applicable laws and regulations and/or pursuant to decisions or requests of competent state authorities.

6. Rights and Obligations of the Customer in Relation to Personal Data

The Customer possesses all rights and obligations regarding personal data in accordance with current applicable laws. In the spirit of upholding the law, IIG Vietnam commits to making reasonable efforts to ensure the Customer’s rights as a personal data subject.

IIG Vietnam further notes that, in order to ensure accuracy and legality, and to prevent instances of exploiting legal regulations for fraudulent or other improper purposes, IIG Vietnam may require the Customer to provide additional documentation to verify and support the Customer’s request.

In the event that the Customer withdraws consent regarding this Policy or any of the purposes set out herein, the Customer is requested to contact IIG Vietnam in accordance with the methods set out in Section 7 for further assistance.

7. Contact Information

If the Customer has any questions, concerns, or requests for IIG Vietnam to exercise or fulfill the rights and obligations of the personal data subject in accordance with applicable laws, the Customer may contact IIG Vietnam Joint Stock Company through one of the following methods:

– In person at: 75 Giang Van Minh Street, Ngoc Ha Ward, Hanoi.

– Via Email: info@iigvietnam.edu.vn

– Via Hotline: 1900 636 929 (during office hours: 8:00 AM – 12:00 PM and 1:30 PM – 5:30 PM, Monday to Friday; Saturdays from 8:00 AM – 12:00 PM).

8. Updates and Amendments to the Policy

Any updates or amendments to this Policy will be posted on IIG Vietnam’s website and/or through other communication channels deemed appropriate by IIG Vietnam. IIG Vietnam recommends that the Customer regularly review this Policy to stay updated on any changes and remain informed about how IIG Vietnam is protecting Customer’s personal data. The Customer’s continued use of IIG Vietnam’s products, services, or applications shall be deemed as confirmation that the Customer has read and understood this Policy, along with any relevant updates and amendments.