Under the DPA and its implementing rules and regulations, you are entitled to the following rights as a data subject:

a. Right to be informed – You have the right to be informed of the following:

i. The fact of collection and processing of personal data pertaining to you;

ii. Description and categories of personal data being collected and processed;

iii. Purpose for the collection, and processing, including the purposes for data sharing or automated processing;

vi. Lawful basis of the collection and processing, when the data subject has not given consent;

v. Scope and method of personal data processing;

vi. Identities of intended recipients of personal data;

vii. Methods and logic used for automated processing, if any;

viii. Identity and contact details of the personal data controller (other than the Company) or its representative;

xv. Retention period; and

x. Rights of a data subject.

This information is set out in this notice.

b. Right to object – You have the right to indicate your refusal to the collection and processing of your personal data, including processing for direct marketing, automated processing, or profiling. You also have the right to be informed and to withhold your consent to further processing in case there are any changes or amendments to information given to you concerning the processing of your personal data. Once you have withheld consent, further processing of your personal data will no longer be allowed, subject to certain exceptions under the law.

c. Right to access – Upon request in writing, you should be given access to the following:

i. Contents of your personal data that were processed;

ii. Sources from which your personal data were obtained;

iii. Identities and addresses of recipients of your personal data;

iv. Manner by which your personal data were processed;

v. Purposes for granting access to the recipients of your personal data;

vi. Information on automated processing, in case the data was used as the sole basis for any decision that significantly affects or will significantly affect you as a data subject;

vii. Date when your personal data was last accessed or modified;

viii. The designation, identity, and address of the controller other than the Company, if any.

d. Right to rectification – You have the right to dispute any inaccuracy or error in your personal data and may request the controller to immediately correct any such inaccuracy or error. Upon reasonable request, and after the correction has been made, the controller should then inform any recipient of your personal data of its inaccuracy and the subsequent rectification that was made.

e. Right to erasure or blocking – In the absence of any other legal ground or overriding legitimate interest for the lawful processing of personal data, or when there is substantial proof that personal data is incomplete, outdated, false, or has been unlawfully obtained, you may request the controller to suspend, withdraw, or order the blocking, removal, or destruction of personal data from its filing system. The controller may also notify those who have previously received your processed personal data.

f. Right to damages – You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, taking into account any violation of your rights and freedoms as a data subject.

g. Right to data portability – In case personal data was processed through electronic means and in a structured and commonly used format, you have the right to obtain a copy of your personal data in such electronic or structured format for your further use, subject to the guidelines of the National Privacy Commission (NPC) with regard to the exercise of such right.

h. Transmissibility of rights of the data subject – In case of death, incapacity or incapability, your lawful heirs and assigns may invoke your rights as a data subject in your place and stead.

If you want to exercise these rights, or have any questions relating to the processing of your personal information, you can contact us info@e-guardian.vn