SOJITZ TECH-INNOVATION COMPANY LIMITED
PRIVACY POLICY

1. PURPOSE AND SCOPE OF APPLICATION

This Privacy Policy (“Policy”) provides for how Sojitz Tech-Innovation Vietnam Co., Ltd. (“Company”) collects, uses, stores, shares, and protects personal data of individuals who interact with the Company through the website https://sojitz-ti.vn/, the Company’s communication channels, or in the course of establishing, maintaining, performing, and terminating relationships with the Company.

This Policy applies to data subjects related to the Company’s operations, including but not limited to:

  1. Visitors to the Company’s website;
  2. Individuals who contact the Company to obtain information, propose cooperation, or use the Company’s services;
  3. Customers, partners, suppliers and representatives of organizations and individuals who have relationships with the Company;
  4. Candidates participating in the Company’s recruitment process; and
  5. Other individuals whose personal data is collected and processed by the Company in accordance with the law.

The Company is committed to processing personal data in accordance with the provisions of Vietnamese law on personal data protection and to applying necessary measures to ensure the confidentiality and security of personal data being processed.

2. PERSONAL DATA COLLECTED AND METHODS OF COLLECTION

2.1. Personal data collected

Depending on each specific case and the corresponding processing purposes, the Company may collect and process the following categories of personal data, including but not limited to:

  1. Identification and contact information, such as full name, job title, organization name, email address, phone number, contact address, and other similar information;
  2. Information provided in the course of communication, contact or cooperation with the Company, including the content of requests, feedback, correspondence, documents, files, and other related information;
  3. Information provided by candidates during the recruitment process, including application documents, curriculum vitae, educational background, work experience, certificates, referees’ information, and other related information;
  4. Information related to the use of the Company’s website, including IP address, browser type, operating system, access device, access time, interaction history on the website, cookie data (if any), and other similar technical information;
  5. Information collected from other lawful sources, including information provided by the data subject, related organizations or individuals, recruitment platforms, professional social networks, the Company’s partners, or public sources as provided by law;
  6. Other personal data provided by the data subject or collected and processed by the Company
    in accordance with the law.

2.2. Methods of collecting personal data

The Company may collect personal data through methods including but not limited to:

  1. Directly from the data subject when the data subject accesses the website, contacts, communicates, submits forms, subscribes to receive information, or provides information to the Company;
  2. During the data subject’s participation in recruitment activities, including submitting application documents or sending a curriculum vitae (CV) to the Company’s email address as instructed in recruitment announcements or job postings;
  3. Through the use of the Company’s website, including the use of cookies (if any) and similar technologies;
  4. From relevant organizations and individuals, the Company’s partners, recruitment platforms, professional social networks, or public, lawful information sources in accordance with the law;
  5. Through other methods in compliance with the law.

3. PURPOSES OF PROCESSING PERSONAL DATA

The Company may process personal data for purposes including but not limited to:

  1. Managing, operating, maintaining, and improving the Company’s website;
  2. Receiving, handling, and responding to requests, questions, feedback, or cooperation proposals sent to the Company;
  3. Contacting, communicating with, and maintaining relationships with customers, partners, suppliers, and related individuals;
  4. Carrying out recruitment activities, assessing candidates’ profiles, arranging interviews, and contacting them during the recruitment process;
  5. Providing information on services, events, activities, or other information related to the Company’s operations in accordance with the law;
  6. Conducting analysis, statistics, and evaluation activities to improve the quality of the website, services, and user experience;
  7. Ensuring the safety and security of information technology systems and preventing, detecting, and handling violations of the law or acts that may affect the lawful rights and interests of the Company and related parties;
  8. Fulfilling obligations under the law, requests of competent state authorities, or for the purpose of protecting the lawful rights and interests of the Company; and
  9. Other legitimate purposes consistent with the Company’s operations and in accordance with the law.

In cases where personal data is processed for purposes other than those stated above, the Company will comply with the provisions of the law on personal data protection and other relevant legal regulations.

4. SHARING PERSONAL DATA

The Company may share personal data with the following organizations and individuals in order to serve the data processing purposes set out in this Policy:

  1. Departments and authorized personnel within the Company;
  2. Affiliated companies, companies within the Sojitz Group, and organizations and individuals related to the Company’s operations;
  3. Service providers, partners, or contractors that support the Company in operating the website, information technology systems, data storage, recruitment, communications, system maintenance, or providing other related services;
  4. Customers, partners, suppliers, or related organizations and individuals to the extent necessary to establish, perform, or maintain relationships with the Company;
  5. Competent state authorities or other organizations and individuals as required or permitted by law; and
  6. Other organizations and individuals when there is consent from the data subject or when the Company has an appropriate legal basis in accordance with the law.

The Company does not sell data subjects’ personal data to any third party.

5. CROSS-BORDER TRANSFER OF PERSONAL DATA

To the extent necessary to achieve the data processing purposes set out in this Policy, personal data may be stored, processed, or shared with organizations and individuals outside the territory of Vietnam, including but not limited to companies within the Sojitz Group, information technology service providers, cloud computing service providers, data storage service providers, or other service providers of the Company.

The Company will take necessary measures to ensure that the cross-border transfer of personal data is carried out in accordance with the provisions of Vietnamese law on personal data protection and will apply appropriate measures to ensure the confidentiality and security of personal data.

Where the law requires additional procedures, measures, or obligations relating to the cross-border transfer of personal data, the Company will comply with the current legal provisions.

6. RETENTION PERIOD FOR PERSONAL DATA

The Company retains personal data for the period necessary to fulfill the data processing purposes set out in this Policy, unless otherwise provided by law, longer retention is necessary to protect the lawful rights and interests of the Company, or the data subject requests otherwise in accordance with the law.

When personal data is no longer necessary for the above processing purposes, when the data subject requests deletion of personal data in accordance with the law, or when continued retention is no longer required or permitted by law, the Company will delete, destroy, or apply other appropriate measures to such personal data in accordance with the law.

7. RIGHTS OF DATA SUBJECTS

Data subjects have the rights provided by law on personal data protection, including but not limited to:

  1. Right to be informed;
  2. Right to consent;
  3. Right of access;
  4. Right to withdraw consent;
  5. Right to request correction, updating, or deletion of personal data;
  6. Right to restrict the processing of personal data;
  7. Right to request provision of personal data;
  8. Right to object to the processing of personal data;
  9. Right to complain, denounce, initiate lawsuits, and claim damages in accordance with the law;
  10. Other rights as provided by law.

Data subjects may exercise their rights by contacting the Company using the contact details set out in Article 10 of this Policy.
The Company will review and handle valid requests from data subjects in accordance with the provisions of the law on personal data protection and other relevant legal regulations.

8. MEASURES TO PROTECT PERSONAL DATA

The Company applies management, technical, and other necessary measures to protect personal data from unauthorized access, use, disclosure, modification, loss, or destruction, and to ensure that personal data is processed in accordance with the law.
The Company regularly reviews, updates, and improves its security measures in line with the characteristics of the Company’s operations and technological developments.
Although the Company applies appropriate measures to protect personal data, no system or method of data transmission can be absolutely secure.

9. AMENDMENTS TO THE POLICY

The Company reserves the right to amend, supplement, or update this Policy from time to time to ensure its consistency with the Company’s operations and legal regulations.
The latest version of the Policy will be posted on the Company’s website at https://sojitz-ti.vn/. The amendments, supplements, or updates to the Policy take effect from the time they are announced, unless otherwise provided by law.

10. CONTACT INFORMATION

If there are any questions, requests, complaints, or proposals related to the processing of personal data or the exercise of data subjects’ rights as prescribed by law, data subjects may contact the Company using the following details:

SOJITZ TECH-INNOVATION VIETNAM CO., LTD.

Head office address: Room 808, 8th Floor, Oriental Building, No. 324 Tay Son, Dong Da Ward, Hanoi City, Vietnam.
Telephone: 024 3556 3737
Email: info@sojitz-ti.vn
Website: https://sojitz-ti.vn/
The Company will review and respond to valid requests from data subjects in accordance with the provisions of the law on personal data protection and other relevant legal regulations.

11. EFFECTIVENESS

This Policy takes effect from the time it is posted on the Company’s website.
This Policy is applied and updated in accordance with the provisions of Vietnamese law on personal data protection and other relevant legal regulations from time to time.