1. Definitions
1.1. DataX Joint Stock Company
"DataX Joint Stock Company" or "DataX" refers to an entity providing technology solutions, data governance platforms, and services related to data security, management, and regulatory compliance.
1.2. DataX Platform
"DataX Platform" refers to the technology platform developed by DataX to support businesses in data collection, analysis, management, monitoring, and compliance with personal data protection regulations, including Decree No. 13/2023/ND-CP and other applicable laws.
1.3. Customer
"Customer" means any individual or organization that accesses, registers for, uses, or intends to use DataX's products, services, platforms, or solutions.
1.4. Data Subject
"Data Subject" means any individual whose personal data is collected, processed, or stored by DataX. This may include Customers or individuals related to Customers.
1.5. Personal Data
"Personal Data" means any information in the form of symbols, text, numbers, images, audio, or similar formats in an electronic environment that is associated with or identifies a specific individual.
Personal Data includes:
- Basic Personal Data
- Sensitive Personal Data
1.6. Basic Personal Data
Includes, but is not limited to:
- Full name, date of birth
- Gender
- Nationality
- Contact address
- Phone number
- Email address
- Account/login information
- Platform transaction data
- Personal images
- Other information that may identify an individual
1.7. Sensitive Personal Data
Refers to highly-private data, including but not limited to:
- Health information
- Biometric data
- Financial or bank account information
- Personal identification data
- Location data
- Criminal records or legal history
- Other data classified as sensitive under applicable laws
1.8. Personal Data Processing
"Personal Data Processing" means one or more operations performed on Personal Data, including:
- Collection
- Recording
- Analysis
- Storage
- Access
- Transmission
- Modification
- Deletion or destruction
1.9. Data Controller
An entity or individual that determines the purposes and means of processing Personal Data.
1.10. Data Processor
An entity or individual that processes Personal Data on behalf of the Data Controller.
1.11. Third Party
Any entity or individual other than the Data Subject, Data Controller, or Data Processor that is permitted to participate in data processing activities in accordance with applicable laws.
2. Rights and Obligations of Data Subjects
2.1. Rights of Data Subjects
Data Subjects have the following rights:
- Right to be informed — To be notified of the type of Personal Data collected, purposes of processing, parties involved, and related rights and obligations.
- Right to consent — To consent to the processing of their Personal Data.
- Right of access — To access and request correction of their Personal Data.
- Right to withdraw consent — To withdraw consent for data processing at any time.
- Right to erasure — To request deletion of Personal Data in accordance with applicable laws.
- Right to restriction — To request restriction of data processing.
- Right to object — To object to processing for marketing or advertising purposes.
- Right to complain — To lodge complaints or initiate legal proceedings in case of unlawful data processing.
2.2. Obligations of Data Subjects
Data Subjects are responsible for:
- Providing accurate Personal Data when using services
- Respecting the personal data of others
- Complying with applicable data protection laws
3. Purposes of Personal Data Processing
DataX may process Personal Data for the following purposes:
- Service Provision — To provide, operate, and maintain DataX products and services
- Customer Support — To communicate, support, and handle customer requests
- Security and Maintenance — To manage IT systems, perform maintenance, and ensure data security
- Research and Development — To analyze data and improve products and services
- Marketing and Communications — To provide information about products, promotions, or events
- Legal Compliance — To fulfill compliance activities as required by law
4. Types of Personal Data Collected
DataX may collect:
- Personal identification information
- Contact information
- Transaction data
- Platform account information
- Device, browser, and service usage data
5. Methods of Data Collection
Personal Data may be collected through:
- DataX website: datax.com
- Service registration forms
- Service agreements
- Email, phone, or direct communication
- Automated data collection tools
- Cookies and similar tracking technologies
6. Data Processing Period
Start of processing: Processing begins when DataX receives Personal Data from the Data Subject.
End of processing: Processing ends when:
- The processing purpose is fulfilled
- A valid deletion request is received
- Required by applicable laws
Data may be retained beyond this period to comply with legal obligations.
7. Data Storage and Security
DataX implements appropriate safeguards to protect Personal Data, including:
- Technical measures
- Administrative measures
- Organizational controls
Systems are designed to prevent unauthorized access, loss, or data breaches. However, DataX cannot guarantee absolute security against risks inherent to the internet.
8. Data Sharing with Third Parties
DataX may share Personal Data with:
- Technology partners
- Service providers
- Competent government authorities
- Relevant organizations to deliver services
In case of cross-border data transfer, DataX will comply with applicable legal requirements.
9. Policy Updates
DataX may update this Policy as necessary to reflect:
- Changes to laws and regulations
- Service updates
- Business operations
Updates will be communicated via the website or official channels.
10. Contact
For any inquiries or complaints regarding Personal Data processing, please contact:
DATAX JOINT STOCK COMPANY
Website: datax.com
Email: info@datax.com
11. Dispute Resolution
Disputes related to Personal Data processing shall first be resolved through negotiation. If unresolved, disputes shall be submitted to the competent courts in Vietnam.