During the process of accessing and/or using products, services, and features on Rong Viet’s website—including but not limited to the electronic trading system, securities price board, account opening application forms, recruitment applications, report subscription forms, and other follow-up modules—the Customer understands that Rong Viet may collect one or more of the following personal data (hereinafter referred to as "Personal Data"), including:
A. Basic Personal Data:
(i) Full name, middle name, birth name, alias (if any);
(ii) Date of birth, date of death or missing status;
(iii) Gender;
(iv) Place of birth, birth registration, permanent address, temporary residence, current residence, hometown, contact address;
(v) Nationality;
(vi) Personal photograph;
(vii) Phone number, ID number, personal identification number, passport number, personal tax code;
(viii) Marital status;
(ix) Family relationship information (parents, children);
(x) Personal account information; activity history on digital platforms;
(xi) Email address;
(xii) Investment experience, investment objectives, risk tolerance, transactions and trading behaviors related to Rong Viet’s products and services.
B. Sensitive Personal Data:
(i) Criminal records and offenses collected and stored by law enforcement authorities
(ii) Customer information from credit institutions, foreign bank branches, intermediary payment service providers, or other authorized entities, including: customer identification under law, account information, deposit information, asset information, transaction information, and information of guarantors.
Rong Viet collects and processes Personal Data for the following purposes:
a. To communicate with the Customer or the Customer’s authorized representative regarding the Customer’s services, transactions, and/or accounts.
b. To introduce and provide products, services, and information about Rong Viet’s promotional programs, special offers, and events to the Customer.
c. To personalize the Customer’s experience, enhance the performance, usability, and efficiency of Rong Viet’s digital platforms, as well as to measure the effectiveness of those platforms.
d. To conduct research and analysis aimed at enhancing the quality of services and the Customer’s overall experience.
e. To assist Rong Viet in understanding the Customer’s investment needs and product/service usage preferences, thereby enabling the provision of relevant information (such as analytical reports, investment recommendations), proposals, or advisory opinions regarding Rong Viet’s products and services.
f. To support Rong Viet’s business operations, system management, and risk governance in accordance with legal regulations.
g. To fulfill Rong Viet’s obligations to competent State authorities (including for the purpose of reporting or providing information upon request from such authorities).
Rong Viet collects the Customer’s Personal Data through one or more of the following primary methods:
a. From the Customer: Data is collected through direct interaction, communication, and service provision, or via other forms such as emails, phone calls, messages, opinion surveys, and/or any other means of communication between Rong Viet and the Customer where the Customer provides the information.
b. Via Rong Viet’s website or mobile application: When the Customer accesses the Website or uses any feature or sub-module of Rong Viet’s Website and/or when the Customer downloads or uses Rong Viet’s mobile application.
c. By means of automated data collection: Rong Viet may collect the Customer’s Personal Data and the data of related parties automatically recorded from the Customer’s connection to Rong Viet, such as through cookies, plug-ins, or any technology capable of tracking and automatically capturing Personal Data on such devices or electronic platforms.
d. From competent state authorities: Rong Viet may collect the Customer’s Personal Data from regulatory agencies such as the State Securities Commission, the Vietnam Securities Depository/Vietnam Securities Depository and Clearing Corporation, stock exchanges, or other competent authorities in Vietnam.
e. From other sources where the Customer has consented to the sharing/provision of Personal Data, or from sources where the collection is required or permitted by law.
4.1.Immediately after the Customer agrees to the establishment of agreements, terms, and conditions governing the relationship between the Customer and Rong Viet, including the contents of these Terms and Conditions on the Protection and Processing of Personal Data, Rong Viet shall begin collecting and processing the Customer’s Personal Data within the scope permitted by the Customer, except in cases where Customer consent is not required as specified in Section 6 below. The Customer understands that such consent applies to all activities within the personal data processing procedure and that the subsequent processing of the Customer’s Personal Data shall continue without the need for any further consent from the Customer.
4.2. Depending on the purpose of personal data processing and the type of data processed, Rong Viet reserves the right to determine the maximum retention period of the Customer’s Personal Data, provided that such retention period remains in compliance with statutory storage duration requirements.
4.3.In the event that the Customer requests to withdraw consent for Rong Viet to process their Personal Data or requests the deletion/destruction of such data, Rong Viet shall cease processing the Customer’s Personal Data. However, the Customer understands and agrees that Rong Viet’s inability to access the Customer’s Personal Data may affect the ability to provide certain services or products, based on Rong Viet’s assessment or pursuant to legal regulations. Therefore, Rong Viet may consider discontinuing the provision of services or products affected by such withdrawal of consent or data deletion/destruction request. The Customer understands that these actions shall be deemed a unilateral termination by the Customer of the use of services or products currently provided by Rong Viet under service provision contracts/agreements entered into between the parties. Accordingly, the Customer commits to bear full responsibility for any legal consequences that may arise and agrees to comply with any remedial measures that Rong Viet has the right to apply in accordance with the provisions of such contracts/agreements and/or as prescribed by law.
4.4. In the event that the Customer terminates the use of Rong Viet’s services, products, or information technology systems, the Customer acknowledges that Rong Viet still has the right to retain and continue to process and use the Personal Data within the scope permitted by law and in accordance with these Terms and Conditions on the Protection and Processing of Personal Data, unless the Customer withdraws their consent or requests deletion/destruction of the data.
Rong Viet commits not to sell, exchange, or lease the Customer’s Personal Data without the Customer’s consent, in accordance with applicable laws. However, for the purposes outlined in Section 2 of these Terms and Conditions on the Protection and Processing of Personal Data, the Customer agrees that Rong Viet may disclose the Customer’s Personal Data to one or more of the following parties:
a. Internal entities within the company: including the headquarters, branches, transaction offices, representative offices, departments, divisions, personnel, and subsidiaries of Rong Viet, in order to provide the Customer with better quality and more efficient products and services.
b. Government agencies and law enforcement authorities: when required or permitted by laws, rules, regulations, or legal processes, including but not limited to, reporting to government agencies or fulfilling any of Rong Viet’s legal obligations, such as providing information upon request by courts or competent authorities, or to other organizations such as the State Securities Commission of Vietnam, the Stock Exchanges, and the Vietnam Securities Depository.
c. Other third parties: The Customer acknowledges that for the purposes of system development, management, and administration, and for the purpose of providing and enhancing the quality of Rong Viet’s products and services, Rong Viet may disclose the Customer’s Personal Data—without requiring additional consent from the Customer—to third parties, regardless of whether such third parties are affiliated with Rong Viet or not. These third parties may provide supporting products and services related to the securities trading system and the Customer’s account transactions, as well as other products and services aligned with Rong Viet’s business development needs. However, Rong Viet commits to taking necessary and reasonable measures to remind and require such third parties who have access to or process the Customer’s Personal Data to maintain the confidentiality of the Customer’s Personal Data.
A. Rights of the Customer
- To be informed about the processing of their personal data, unless otherwise provided by law.
- To consent or refuse consent for the processing of their personal data, except in the following cases: (i) In emergencies where immediate data processing is required to protect the life or health of the Customer or others; (ii) Disclosure of personal data as required by law; (iii) Data processing by competent state authorities in cases of national defense emergencies, national security, social order and safety, major disasters, or dangerous epidemics; when there is a risk threatening national defense and security but not yet declared a state of emergency; prevention and control of riots, terrorism, crime, and legal violations as prescribed by law; (iv) For the performance of contractual obligations between the Customer and relevant authorities, organizations, or individuals in accordance with the law; and (v) To serve the activities of state authorities as stipulated by law.
- To access, view, amend, or request the amendment of their personal data, unless otherwise provided by law.
- To withdraw their consent by sending an email or written request to Rong Viet, unless otherwise provided by law.
- To delete or request the deletion of their personal data by sending a written or email request to Rong Viet, unless otherwise provided by law.
- To request a restriction on the processing of their personal data, unless otherwise provided by law.
- To request Rong Viet to provide them with their personal data in writing sent to Rong Viet’s head office, unless otherwise provided by law. The written request must be in Vietnamese and contain the following key information: (i) Full name, place of residence, address, ID card/citizen identification/passport number of the requester, fax number, telephone number, email address (if any); (ii) The specific personal data requested, specifying document name, records, materials; (iii) The preferred method of receiving the data; and (iv) The reason and purpose for requesting the personal data. Upon receipt of a valid request from the Customer, Rong Viet will inform the Customer of the time, method, and actual cost for providing the requested data.
- Other rights as prescribed by law.
B. Obligations of the Customer
- To protect their personal data and request that relevant organizations and individuals also protect their personal data.
- To respect and protect the personal data of others.
- To provide complete and accurate personal data when consenting to its processing. In the event of any changes or updates to personal data, the Customer is responsible for promptly notifying Rong Viet so that such changes can be updated in a timely manner. The Customer shall bear full responsibility for any delay in such notification. Furthermore, such delay shall exempt Rong Viet from any damages or risks incurred by the Customer or any related parties (if applicable).
- In cases where the Customer provides Rong Viet with the personal data of a third party (including but not limited to dependents, legally related individuals, spouses, children and/or parents and/or guardians, friends, references, beneficiaries, authorized persons, partners, emergency contacts, or any other individuals), the Customer affirms and takes responsibility that they have obtained the lawful consent of such third party for Rong Viet to process and use the data for the purposes stated in Section 2 of these Terms and Conditions on the Protection and Processing of Personal Data.
- For the purpose of protecting the Customer’s personal data, Rong Viet reserves the right to verify the Customer’s identity, and the Customer is obligated to provide information and documents proving that they are the data subject or are authorized by the data subject when submitting any request to Rong Viet, including but not limited to withdrawal of consent, data correction, deletion/destruction of data, or requests for access to their own personal data.
- Other obligations as prescribed by law.
7.1. Rong Viet shall make every effort and implement all measures deemed reasonably necessary to secure the Customer’s Personal Data. However, the Customer acknowledges that the sharing of personal data in electronic environments inherently carries certain risks that may exceed the protective capabilities of Rong Viet’s measures, including but not limited to the following:
a. The use and operation of electronic information systems via the Internet may not be absolutely secure, and the open nature of the Internet can potentially lead to the leakage of the Customer’s Personal Data.
b. The Customer’s Personal Data may be exposed or stolen due to unauthorized access by third parties.
c. The Customer’s Personal Data exchanged between Rong Viet and the Customer may not be fully secure or entirely intact throughout the transmission process over the Internet.
7.2. The Customer acknowledges and accepts the risks that may arise in connection with their Personal Data in situations beyond Rong Viet’s reasonable control. To minimize such risks—especially to prevent unauthorized access and use of the Customer’s Personal Data—Rong Viet’s information systems for storing and securing Personal Data will be protected by a secure network infrastructure, as reasonably determined by Rong Viet at any given time, in compliance with applicable laws.
7.3.To assist Rong Viet in safeguarding the Customer’s best interests, the Customer agrees to implement appropriate information security and protection measures on their own access devices, and to maintain absolute confidentiality of their Personal Data when using Rong Viet’s electronic information systems and/or other service channels.
7.4. In the event there are reasonable grounds or suspicions that the Customer’s Personal Data has been compromised or leaked, the Customer must immediately notify Rong Viet so that remedial measures can be taken. As soon as reasonably practicable after receiving such notice, Rong Viet will take the necessary and appropriate steps to prevent or mitigate any consequences to the Customer. Failure or delay by the Customer to notify Rong Viet of such a data breach or suspected breach shall serve as a valid basis for Rong Viet to disclaim any responsibility or liability for damages or losses relating to the Customer’s Personal Data.
7.5.With regard to any information that the Customer provides to third parties through websites, software, applications, or any other platforms of third parties displaying advertisements or links related to Rong Viet—regardless of whether there is any agreement or affiliation between Rong Viet and such third parties—the Customer understands and acknowledges that these Terms and Conditions on the Protection and Processing of Personal Data do not apply to the Customer’s Personal Data shared with such third parties, and that Rong Viet bears no obligation or responsibility with respect to any access, exchange, or provision of information between the Customer and those third parties.
Rong Viet reserves the right to amend, update, or adjust the contents of these Terms and Conditions on the Protection and Processing of Personal Data at any time without requiring any additional consent from the Customer, provided that such amendments and supplements are in accordance with relevant legal regulations. The Customer is responsible for regularly reviewing and updating themselves on any changes to these Terms and Conditions on the Protection and Processing of Personal Data.
To the extent permitted by applicable laws, the Customer’s continued use of Rong Viet’s services and products shall be deemed as acceptance of the updated contents of these Terms and Conditions on the Protection and Processing of Personal Data.