PERSONAL DATA PRIVACY POLICY
The Personal Data Privacy Policy of HUNG LONG REAL ESTATE DEVELOPMENT JOINT STOCK COMPANY (hereinafter
referred to as “Policy”) regulates how we collect, use, copy, disclose, store, or carry out
other processing activities of your personal data.
HUNG LONG REAL ESTATE DEVELOPMENT JOINT STOCK COMPANY is committed to protecting the privacy and security of
your personal data in accordance with this Policy and prevailing regulation laws. The Policy includes the
following contents:
1. DEFINE
Abbreviated words and phrases in the Policy shall have the following meanings unless otherwise specified in
this Policy:
1.1 "Data Subject" is understood the Customer;
1.2 "Company" means HUNG LONG REAL ESTATE DEVELOPMENT JOINT STOCK COMPANY, operating
under the Business Registration Certificate No. 0110716082 issued by the Department of Planning and
Investment of Ho Chi Minh City for the first time on May 15, 2024 and its subsequent amendments;
1.3 "Project" means the project (s) is (are) invested by the Company;
1.4 "Personal Data" means the personal data of the Data Subject, provided by the Data
Subject to the Company or known by the Company from the Data Subject during the interaction and
transaction with the Company;
1.5 "Signed Documents" means sales and purchase contract; other contracts, agreements,
and documents signed by the Customer and the Data Subject;
1.6 "Personal Data Processing" means one or more activities affecting Personal Data,
such as: collecting, recording, analyzing, confirming, storing, editing, publicizing, combining,
accessing, retrieving, recalling, encrypting, decrypting, copying, sharing, transmitting,
providing, transferring, deleting, destroying Personal Data or other related actions as prescribed by
law;
1.7 "Personal Data Controller and Processor" is an organization or individual who
simultaneously decides the purpose, means and directly processes Personal Data; in this case, the
Personal Data Controller and Processor is the Company;
1.8 "Personal Data Processor" means the party that performs the Processing of Personal
Data on behalf of the Personal Data Controller and Processor through a contract or agreement with the
Personal Data Controller and Processor;
1.9 "Permitted Purposes" means the purposes set out in Section 4 of this Policy;
1.10 Terms not defined in this Section shall be interpreted in accordance with the Signed Documents and
applicable laws.
2. PROCESSED PERSONAL DATA
From time to time and for the Permitted Purposes, the Personal Data Controller and Processor might collect
and process the following Personal Data of the Data Subject:
2.1 Basic personal data:
(i) Surname, middle name and given name; Date of birth; Gender; Nationality; ID card number/
Citizen identification number/ Passport number, Date of issue and place of issue; Personal
identification code; Visa information, Date of entry into Vietnam; Nationality; Personal tax
code;
(ii) Residential address, contact address;
(iii) Contact phone number; email address;
(iv) Marital status;
(v) Bank account information;
(vi) Photo, voice recording, audio recording of the Data Subject;
(vii) Survey responses and opinions of the Data Subject according to the Company's survey programs;
(viii) Other personal data of the Data Subject that the Company assesses as necessary to serve the
implementation of the Permitted Purposes as prescribed in this Policy;
(ix) Other personal data of the Data Subject that the Company needs to collect to ensure compliance
with legal regulations or/and at the request of competent state agencies;
(x) Other basic personal data that the Data Subject agrees to provide or has provided to the
Company.
2.2 Sensitive personal information:
The sensitive personal data in accordance with the laws of Data Subjects may be
collected and processed by the Company from time to time for the Permitted Purposes.
3. HOW TO COLLECT PERSONAL DATA
The Company may collect the Personal Data from any source, channel, or domain of the Company when the
customer first provides it or updates or supplements it to the Company from time to time, including but not
limited to:
3.1 When the Data Subject directly contacts the Company at the head office/representative office/branch
address or the Company's transaction locations; accesses, contacts, and interacts through the Company's
websites, applications, social networks, telephone switchboards, or through
other official contact/information channels of the Company;
3.2 When the Data Subject registers to participate or participates in the Company's programs, events,
and trade promotion programs;
3.3 When the customer purchases/leases the product of the Project, registers to use the Company's
services or uses the Company's services, registers to participate in/ participates in survey programs/
sales programs or other programs of the Company;
3.4 When the customer provides Personal Data to the Company through other forms.
3.5 Through other lawful sources and means.
4. PURPOSE OF PERSONAL DATA PROCESSING
The Company processes Personal Data for the following purposes:
4.1 In order to implement the obligations in accordance with the Signed Documents, includes:
(i) Identifying, authenticating and examining Data Subject information, recording Data Subject
information for transactions under the Signed Documents;
(ii) Notifying/maintaining contact with the Data Subject;
(iii) Consult and provide information, addressing questions, solving issues arising in relation to
transactions under the Signed Documents;
(iv) Payment or receipt of payments;
(v) Ensuring the operation of apartment buildings and urban areas according to the sales contract
signed with the Data Subject;
(vi) Carry out procedures for granting a Certificate of land use rights, ownership of housing and
other assets attached to land to the Data Subject;
(vii) Implementing the responsibilities in accordance with the Signed Documents.
4.2 Notify, implement the policies, programs/events, promotion programs, advertising, and other trade
promotion activities of the Company and/or of the units providing marketing consulting services,
advertising, surveys, sales brokerage units of the Project;
4.3 Consult and introduce the Project’s products/new projects of the Company and/or of trusted partners
that have signed cooperation and personal data confidentiality agreements with the Company;
provide/consult and support the financial solutions for the Data Subject;
4.4 Serving to meet the needs and enhance the experience of Customers; ensuring the quality of services
provided to Customer and implementation of transactions, contracts/agreements signed with the Customer
as well as for the requirements of administration, management, operation, and
business of the Company in accordance with the provisions of laws;
4.5 Statistics or data analysis to improve service quality, enhance customer experience, research and
analyze the market;
4.6 Resolve issues that arise related to the use of the Company's Website/Application, official
contact/information channels;
4.7 Manage, monitor and control the entire process of providing products and services of the Company
according to the Signed Documents, including verification, review, assessment, and resolution of related
complaints and disputes;
4.8 For legal compliance purposes, requirements of competent state agencies include but are not limited
to obligations to disclose information and report according to legal regulations on promotions, record
keeping, and auditing;
4.9 Storage, management, backup for incident recovery or for similar purposes;
4.10 Detection, prevention, investigation and handling of violations of Vietnamese law;
4.11 Other purposes agreed by the Data Subject on the basis of compliance with legal regulations or
required/permitted by law or competent authorities and for other purposes in accordance with this
Policy.
(The purposes stated in Article 4 of the Policy are collectively referred to as the "Permitted
Purposes")
5. HOW TO PROCESS PERSONAL DATA
From time to time and for each of the above purposes, the Company will perform one or more activities that
affect Personal Data such as: collecting, recording, analyzing, validating, storing, editing, publicizing,
combining, accessing, retrieving, encrypting, decrypting, copying, sharing,
transmitting, delivering, transferring, deleting, destroying Personal Data or other relevant actions.
Personal Data processing operations may be carried out by the Company in an automated or non-automated
manner, either by electronic means or manually or any other manner deemed appropriate by the Company.
The Company is committed to handling Personal Data under careful control and will take reasonable and
necessary measures to protect Customer Personal Data.
6. STARTING AND ENDING TIME OF DATA PROCESSING
The Company will initiate the Processing of Personal Data as soon as it receives Personal Data until the
Personal Data is deleted, or canceled in accordance with the provisions of laws.
7. ORGANIZATIONS AND INDIVIDUALS RELATED TO THE PURPOSE OF PERSONAL DATA PROCESSING
The Company has the right to transfer and share Personal Data of the Data Subject to the enterprises,
organizations that are service providers, operation management units, distributors, agencies for selling the
project products that the Customer is interested in learning about, transacting
with, as well as to related organizations, enterprises, units of the Company, investors, owners, brokers and
units, expert consultants, contractors providing services and goods to serve the implementation of
transactions and contracts signed or to be signed between these entities and the
Customer, implement legal procedures related to the project product as well as to serve and enhance the
Customer's experience related to the process of owning, using, living, trading and exploiting the Customer's
Project product as well as for the requirements of administration, management,
operation and business of these entities according to the provisions of law; and for other Permitted
Purposes under this Policy.
From time to time, the Company may be required to share Personal Data with competent state agencies as
prescribed by the laws.
8. RIGHT OF THE DATA SUBJECT
8.1 Right of the Data Subject
Unless otherwise provided by the law, the Data Subject has the following rights:
(i) Be aware of your Personal Data Processing activities;
(ii) Agree, disagree or withdraw consent to the processing of your Personal Data.
(iii) Access to view, edit or request to edit your Personal Data.
(iv) Delete or request the deletion of your Personal Data.
(v) Request to restrict or object to the processing of your Personal Data.
(vi) Request to be provided your own Personal Data.
(vii) Other rights as prescribed by the applicable law.
Kindly note that:
a) In some cases, the Data Subject's disagreement or withdrawal of consent to their Personal Data
Processing; the request to restrict or object to the Personal Data Processing; the deletion or request
to delete Personal Data may affect the Company's ability to provide or maintain the
provision to the Data Subjects of products, services, customer care services or the processing of the
Data Subject's complaints.
b) Upon receipt of a request from the Data Subject regarding the exercise of the right(s) relating to
Personal Data, the Company shall notify the Data Subject of the consequences that may occur when the
Data Subject's request is made.
c) Upon receipt of a request from the Data Subject to delete Personal Data, prior to the deletion of such
Personal Data (whether by your withdrawal of consent or request for the deletion of Personal Data), we
shall check whether there is any legitimate reason or responsibility or
liability to us or any member of our company group in connection with the fact that we have to back up,
continue to store or process your Personal Data for law-abiding purposes.
Data subjects may exercise their rights by contacting the Company in accordance with the information
provided in detail in Section (11.3) “Communications" of the Policy.
8.2 Obligations of Data Subjects
(i) Self-protection of Personal Data; requesting other relevant organizations and individuals to
protect their Personal Data.
(ii) Providing complete and accurate Personal Data when agreeing to allow Personal Data Processing.
(iii) Other obligations as prescribed by law.
9. UNWANTED CONSEQUENCES AND DAMAGES ARE POSSIBLE
The Company uses various information security technologies such as firewall systems, access control measures,
and encryption... to protect and prevent Personal Data from being accessed, used or shared. illegal.
However, in reality, the Company cannot completely eliminate security risks that
may occur during the processing of Personal Data in some cases such as: (i) system errors, hardware and
software errors during the processing of Personal Data that may cause loss of personal data of the Data
Subject, (ii)security vulnerabilities beyond the control of the Company, the system
being hacked causing data to be leaked or leaked, or due to objective reasons beyond the control of the
Company that may cause unexpected consequences and damages to the Data Subject.
The Company recommends that the Data Subject keep confidential information related to the account login
password, OTP code and not share this content with anyone else.
In case of an incident or security risk during the processing of Personal Data, the Company will notify the
Data Subject and notify the competent authority of any violation of the Personal Data protection regulations
in accordance with current law (if a violation is detected) and make efforts
to take remedial measures and prevent the consequences to a minimum.
The Data Subject confirms that he/she understands the risks and damages that may occur to his/her Personal
Data.
10. TRANSFER OF PERSONAL DATA ABROAD
Transfer of Personal Data abroad (if any) will be carried out following by the Law.
11. OTHER PROVISIONS
11.1 The Personal Data Subject confirms that, by accepting this Policy, the Personal Data Subject has
agreed to let the Company and the parties involved in the Data Processing process process their Personal
Data in accordance with the Policy. The Company has notified the Personal Data
Subject, has known and agreed to all the contents that need to be notified according to the law before
Personal Data is processed by the Company, organizations, individuals participating in the Personal Data
Processing process. The Personal Data Subject agrees that the Company,
organizations, individuals participating in the Personal Data Processing process do not need to notify
again before processing the Customer's Personal Data.
11.2 Amendments and Supplements to the Policy
The Company may amend and supplement the Policy at any time in accordance with current legal regulations
and publicly announce them at the Company's head office address and on webiste:
https://tnt-realestate.com.vn, or by other appropriate means (if any) without prior notice or consent
from the Data Subject. Unless otherwise specified on the effective date, such amendments and supplements
will be applied immediately upon announcement by the Company.
11.3 Contact Information
In case of any questions and/or requests related to this Policy or exercising rights to your Personal
Data, please send your request to the email address: services@tnt-realestate.com.vn; or contact us at
the following information:
HUNG LONG REAL ESTATE DEVELOPMENT JOINT STOCK COMPANY
Head office’s address: 2nd Floor, No. MG5-23, Vinhomes Dragon Bay Urban Area, Tran Quoc Nghien Street,
Hong Gai Ward, Quang Ninh Province, Vietnam
Contact number: 0911102075
Working hours: Monday to Friday - from 8:30 to 17:30 (except for Public Holidays and Tet).
