Chính sách về Quyền riêng tư

Vietnam Investors Service and Credit Rating Agency Joint Stock Company ("VIS Rating") respects and values your privacy. This Privacy Policy explains how we collect your Personal Data on those web sites of VIS Rating that post or link directly to this Privacy Policy (collectively, the "Site") and through offline means, how we use, disclose, and protect such data, and the choices you have concerning our use of such data.

Please carefully read and understand this Privacy Policy in its entirety. VIS Rating may from time to time update this Privacy Policy. Any changes to this Privacy Policy will become effective when we post or link to the revised Privacy Policy on the Site. Please review the "Last Updated" legend at the top of this page to determine when this Privacy Policy was most recently revised.

For the purposes of this Privacy Policy, "we", "us", and "our" means VIS Rating.

In some circumstances, you may have the option to decline to provide us with any Personal Data to visit the Site. However, if you choose to withhold requested information, you may not be able to visit all sections or use all features of the Site.

Collection of Personal Data

Personal data refers to electronic information in the form of symbols, letters, numbers, images, sounds, or equivalences associated with an individual or used to identify an individual, or otherwise defined by the applicable law ("Personal Data"). Personal data can be your name, date of birth, residential address, or phone number. We may need to collect and process Personal Data in order to provide requested information, products or services to you (including the Site) or because we are legally required to do so.

• VIS Rating requests Personal Data from you if the Site requires registration. The registration process requests that you provide Personal Data, such as your name, business email address, business address or country location, business phone number, and company affiliation, and agree to the User Agreement presented at the time of registration.
• VIS Rating may receive Personal Data from social media platforms. For example, if you elect to use your social media credentials to log-in to your Site account, certain Personal Data from your social media account will be shared with us.
• VIS Rating may collect Personal Data voluntarily provided by you, including in emails, online forms and registration forms, surveys, promotion participation, online chats, phone calls, and through other means.
• VIS Rating may request Personal Data from our customers to comply with applicable laws or request by competent authorities.
• On some of VIS Rating's Sites, you may be able to maintain "portfolios," where, if you are a registered user, you may have the option to list financial instruments in which you have a special interest.
• We may use third-party payment services to collect payments made through the Site if required.
• VIS Rating collects information through various other means, including searches online, participation at conferences and events, public sources, individual introductions, from employers that enroll their employees in our services.
• We may capture your image and/or footage through CCTV or record your oral conversations when you participate or speak in our events or are within VIS Rating's premises.

Use of Personal Data Collected

We use Personal Data transparently and in compliance with applicable law, for legitimate business purposes, including the following:

Fulfillment of Requests

VIS Rating may use Personal Data about you to deliver products and services to you, and to provide you with information about products and services you've ordered.

Marketing Communications

From time to time, in compliance with applicable laws, we may use Personal Data about you to inform you of products, programs, services and promotions that we believe may be of interest to you. If you would prefer that we not send electronic marketing messages to you, please see the "Your Choices" section below.

Other Business Purposes

We may also use Personal Data about you for other business purposes, such as data analysis, editorial and feedback purposes, providing customer support, customizing and improving the content and layout of the Site, completing business transactions, development and delivery of marketing materials, statistical analysis of user behavior, product development, conducting surveys and market research, and administering individual accounts.

Administrative Communications

VIS Rating reserves the right to use Personal Data to send to you important information regarding the Site, products, services, your account status, the User Agreement, this Privacy Policy, or any other policies relevant to your use of the Site. Because this information may be important, you may not opt-out of receiving such communications.

Compliance with law and regulation

We may use Personal Data as necessary to comply with applicable legal and regulatory requirements such as tax, audits, etc.

Cookies and Other Tracking Technologies

We use cookies and similar technologies (collectively, "Cookies") on our websites.

Essential Cookies

Essential Cookies are necessary for the Site to function and cannot be switched off without affecting the use of the Site. Essential Cookies are usually only set in response to specific actions you take on the Site, such as retaining search results or setting your Cookies preferences.

Functional Cookies

VIS Rating uses functional Cookies to understand how the Site is used and to customise and enhance the Internet experience of users. When you revisit the Site, we may recognise you by a functional Cookie and customise your experience.

Performance Cookies

We use performance Cookies to collect and/or track information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of the Site. We use performance Cookies to help us understand who uses the Site and to improve and market it.

Targeting Cookies

On certain pages, we use third-party advertising companies to serve advertisements regarding our products and services that may be of interest to you when you access and use the Site, based on information relating to your access to and use of the Site and other websites or online services.

Disclosure of Personal Data Collected

We may disclose Personal Data for the following purposes:

• Third-Party Service Providers. We may provide Personal Data to third-party service providers, who provide services to us, including data analysis, order fulfillment, payment processing, and marketing automation.
• Subsidiary Communications. VIS Rating may transfer Personal Data among our subsidiaries or shareholders to allow them to contact you regarding products, programs, services and promotions.
• Strategic Partners and Co-Branded Sites. From time to time, we may enter into a special relationship with another company to provide or promote joint products, services, applications, or features.
• Conferences and Events. When you attend a conference or event organized by VIS Rating, your name and contact information may be shared with other attendees and co-hosts.
• Assignment. We may disclose or transfer any and all Personal Data in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition.
• Law Enforcement; Emergencies; Compliance. We may use and disclose Personal Data about you to others as we believe to be appropriate in compliance with laws, rules, or regulations.

Your Choices

We give you choices regarding our use and disclosure of your Personal Data for marketing purposes.

• If you no longer want to receive marketing-related emails from us, you may stop by sending an e-mail to [email protected].
• If you would prefer that we do not share your Personal Data with our subsidiaries, shareholders or with unaffiliated third parties, you may cease this sharing by sending an e-mail to [email protected].

How You Can Access, Change or Suppress Your Personal Data

If the right is provided to you by applicable law and you would like to request to review, correct, update, suppress, delete or otherwise limit our use of your Personal Data, you may make a request by contacting us using the information provided in the "Contact Information" section below. We will respond to your request consistent with applicable law.

Security Measures

VIS Rating has established appropriate organizational and technical measures to protect Personal Data within our organization from loss, misuse, or unauthorized access, disclosure, alteration or destruction. VIS Rating requires applicable vendors that process Personal Data on its behalf to complete privacy and security assessments and be bound by contractual terms.

Retention Period

We will retain Personal Data about you for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position.

Cross Border Transfer of Personal Data

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers. We will ensure our necessary regulatory requirement when transferring your Personal Data outside Vietnam and ensure the relevant oversea service providers bound by proper confidentiality obligation.

Your Rights

You may have a number of legal rights in relation to your Personal Data under applicable local law including but not limited to the Civil Code No. 91/2015/QH13 of the National Assembly of Vietnam ("Civil Code") and Decree 13/2023/ND-CP on protection of personal data. These rights include:

• The right to be informed about how we process your Personal Data
• The right to give consent to the processing of your Personal Data
• The right to access your Personal Data in order to look at, rectify or request rectification
• The right to withdraw your consent at any time
• The right to delete or request deletion of your Personal Data
• The right to receive your Personal Data in a structured, commonly used and machine-readable format
• The right to obtain restriction on processing or object to our processing
• The right to file complaints, denunciations and lawsuits as prescribed by law
• The right to claim damage as prescribed by law when there are violations
• The right to self-protection according to regulations in the Civil Code

Contact Information for VIS Rating

If you choose to contact VIS Rating via e-mail about this Privacy Policy, please mark the subject heading of your e-mail "Privacy Inquiry."