Legal
PDPD notice
Effective
This notice describes how Corpshore Vietnam processes personal data under Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP), which took effect on 1 July 2023 and is overseen by the Ministry of Public Security. It supplements our privacy policy for data subjects in Vietnam.
Scope
This notice applies to the processing of personal data of individuals in Vietnam by Corpshore Vietnam, whether collected through this website, through our services, or in the course of an engagement where Corpshore Vietnam acts as a data controller or processor.
Categories of data
Consistent with PDPD, we distinguish basic personal data, such as name, contact details and professional information, from sensitive personal data, which may include information revealing health, biometric or other categories the decree treats as sensitive. We collect sensitive personal data only where necessary, with a valid lawful basis and appropriate safeguards.
Lawful basis and consent
We process personal data on a lawful basis under PDPD, which in most cases is your consent, the performance of a contract, or compliance with a legal obligation. Where we rely on consent, it is informed and specific, and you may withdraw it at any time. Withdrawing consent does not affect processing carried out before withdrawal.
Data subject rights
Under PDPD you have the right to know how your personal data is processed, to access and obtain a copy, to correct inaccurate data, to withdraw consent, to delete data, to restrict or object to processing, and to complain to the competent authority. We operate a documented request process in Vietnamese and English and will respond within the timeframes the decree requires.
Cross-border transfer
Transferring Vietnamese personal data outside Vietnam is subject to PDPD, including the requirement to conduct a transfer impact assessment and to maintain the assessment dossier. Where we transfer such data, for example to the Corpshore group in Canada, we complete the required assessment and apply appropriate safeguards.
Data Protection Officer
Corpshore Vietnam maintains a Data Protection Officer point of contact responsible for personal data protection matters and for handling data subject requests. The named DPO contact is provided on request and in engagement documentation, and will be published here on finalization of the registered entity contact details.
Security and breach response
We protect personal data with technical and organizational measures proportionate to the risk, and we maintain a breach response process that includes assessment, containment, notification to affected data subjects and the competent authority where required, and remediation.
Contact
To exercise your rights under PDPD or to raise a concern, contact Corpshore Vietnam through the contact page or our Data Protection Officer. You also have the right to lodge a complaint with the Ministry of Public Security.