
PRIVACY NOTICE
This Privacy Notice (hereinafter referred to as the “Notice”) is established and issued by Dear Our Community Company Limited (hereinafter referred to as “DOC,” “we,” “our,” or “us”), for the purpose of providing transparency on how we collect and process Personal Data of all individuals and organizations that interact with DOC in any capacity, as well as other relevant parties (hereinafter referred to as “you” or “your”). We are committed to fully protect your Personal Data in compliance with the applicable data and personal data protection laws.
1. SCOPE OF APPLICATION
This Privacy Notice governs the relationship between DOC, as a Personal Data Controller and/or Personal Data Processor, and individuals that access, interact with DOC during the organization and operation of our programs, platforms, and services.
This Notice applies to, but is not limited to:
-
Accessing, interacting with DOC’s official website and social media platforms (including but not limited to: Facebook, LinkedIn, Instagram, TikTok, and YouTube);
-
Providing information forms for the purpose of registering for programs, courses, events, surveys, or requesting information or support from DOC;
-
Participating in recruitment activities, professional collaborations, media engagements, or other forms of information exchange with DOC.
By accessing, registering for, or participating in any of our platforms, programs, or activities, you acknowledge that you have read and understood this Notice.
2. DEFINITION OF TERMS
-
Personal Data refers to digital data or other forms of information that identify or help identify a specific individual, including Basic Personal Data and Sensitive Personal Data.
-
Basic Personal Data refers to Personal Data that reflects general identity and background information, commonly used in transactions and social interactions, including but not limited to:
-
Identity information, such as full name, marital status, citizen identification/passport/national ID number, nationality, religion, date and place of birth, gender, national insurance number, and personal image;
-
Contact information, such as: permanent address, phone number, and email address;
-
Dependent information, such as individuals in the first line of inheritance (biological parents, spouse, biological or adopted children), and the following details of such dependents: full name, date and place of birth, gender, citizen identification/passport/national ID number, phone number, permanent address, email address, and emergency contact details;
-
Employment information, such as job position, job title, employee classification, management level, employment contract, work address, department, managing personnel (name and employee ID), education background, and employment history;
-
Driver’s license number, vehicle license plate number, personal tax identification number, social insurance number, and health insurance card number;
-
Bank account information and personal data reflecting activity or activity history in cyberspace (if any);
-
Other types of Basic Personal Data as prescribed by law.
-
Sensitive Personal Data refers to Personal Data closely associated with the privacy of individuals, the breach of which may directly impact lawful rights and interests of agencies, organizations, or individuals, including but not limited to:
-
Location data of an individual identified through geolocation services;
-
Health and medical data;
-
Judicial records and criminal data;
-
Data on racial or ethnic origin;
-
Data concerning sex life and sexual orientation, where such data is voluntarily provided to DOC;
-
Payment and banking data, such as customer identification information as defined under applicable laws on credit institutions, account information, and transaction details;
-
Biometric data;
-
Geolocation data determined via positioning services;
-
Other types of Sensitive Personal Data as prescribed by law.
-
-
Personal Data is the individual to whom the Personal Data reflects.
-
Personal Data Processing refers to any operation performed on Personal Data, including one or more of the following activities: collection, analysis, aggregation, encryption, decryption, modification, deletion, destruction, de-identification, provision, disclosure, transfer of Personal Data, and other activities that affect Personal Data.
-
Consent refers to the act by which the Personal Data Subject consents to the processing of their Personal Data, unless otherwise provided by law.
-
Personal Data Controller is an agency, organization, or individual that determines the purposes and means of processing Personal Data.
-
Personal Data Processor is an agency, organization, or individual that processes Personal Data on behalf of the Personal Data Controller or the Personal Data Controller-cum-Processor, based on a contract.
-
Personal Data Controller-cum-Processor refers to an agency, organization, or individual that determines the purposes and means and directly processes Personal Data.
-
Third Party refers to any organization or individual other than the Personal Data Subject, the Personal Data Controller, the Personal Data Controller-cum-Processor, and the Personal Data Processor, that participates in the processing of Personal Data in accordance with the law.
3. PRIVACY PRINCIPLES
We are committed to protecting your Personal Data in accordance with the following principles:
-
All Personal Data processing activities are carried out in strict accordance with the Constitution, Personal Data Protection Law, and all relevant legal instruments.
-
We collect and process your Personal Data only within the scope necessary and for specific, clearly defined purposes of which you have been informed.
-
Your Personal Data will be updated and corrected as necessary to ensure it remains accurate and relevant to the processing purpose.
-
Your Personal Data will be retained for a period appropriate to the processing purpose, unless otherwise required by law.
-
We implement a combination of institutional, technical, and human measures - including but not limited to internal policies, security technologies, and staff training to safeguard your Personal Data.
-
We proactively prevent and are prepared to respond to any data breaches in accordance with applicable laws.
4. WHAT KIND OF PERSONAL DATA DO WE COLLECT?
DOC may collect the following categories of your Personal Data, including but not limited to:
-
Identify Data: Full name, nationality, date of birth, email address, residential address, phone number, signature, personal tax identification number, identity documents, personal images (including but not limited to photographs, videos, or images collected from DOC’s events, classes, or programs).
-
Professional Data: Company name, job title, educational background, professional qualifications.
-
Billing Data: Bank account information, payment methods, payment documents, invoices.
-
Engagement Data: History of participation in DOC’s programs and other activities, interaction results or feedback related to the attended programs or other activities.
-
Communication Data: History of communications or requests submitted to DOC, history of exercising your rights, history of interactions on the online member forum.
-
Connection Data: IP address, type of device used to access DOC’s website or training platform, connection and event logs.
We may collect and combine your Personal Data on a case-by-case basis, including but not limited to:
-
When you or your organization/business representative provide it to us;
-
When you access and use our official platforms, services, or communication channels;
-
When we collect it from our in-person or online events and programs;
-
When we collect it from lawful public sources, professional partners, co-organizing entities, competent authorities, or third parties authorized by you or as permitted by law.
If you provide us with others’ Personal Data, you must obtain their consent as required by applicable laws, explain to them and ensure that they understand how we will process their Personal Data.
5. HOW DO WE PROCESS YOUR PERSONAL DATA?
We may process your Personal Data based on the following legal grounds; for the purpose of carrying out legitimate objectives related to DOC’s functional operations, administration, and compliance with legal obligations.
Mục Đích | Loại dữ liệu cá nhân | Cơ sở pháp lý | Thời gian lưu trữ | Các bên nhận dữ liệu |
---|---|---|---|---|
Quản lý hoạt động giải quyết tranh chấp | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp - Dữ liệu cần thiết cho mục đích tạo lập bằng chứng | - Lợi ích hợp pháp | - Thời hạn theo biện pháp khắc phục hậu quả pháp lý | - Cơ quan Nhà nước có thẩm quyền - Đơn vị cung cấp dịch vụ pháp lý |
Quản lý vi phạm dữ liệu | - Dữ liệu nhận dạng - Dữ liệu liên quan đến hành vi vi phạm | - Nghĩa vụ pháp lý | - Khoảng thời gian thích hợp kể từ khi kết thúc hành vi vi phạm | - Đối tác của chúng tôi trong quản lý bảo mật - Cơ quan Nhà nước có thẩm quyền |
Phản hồi các yêu cầu về bảo vệ dữ liệu và bất kỳ khiếu nại nào liên quan đến việc bảo vệ Dữ liệu cá nhân | - Dữ liệu nhận dạng - Dữ liệu liên quan đến khiếu nại | - Nghĩa vụ pháp lý | - Khoảng thời gian thích hợp kể từ khi hoàn tất việc giải quyết phản hồi, khiếu nại | - Cơ quan Nhà nước có thẩm quyền |
Cải thiện dịch vụ và bảo đảm vận hành hệ thống | - Dữ liệu nhận dạng - Dữ liệu kết nối | - Sự đồng ý | - Theo yêu cầu xóa của chủ thể dữ liệu | - Đơn vị hỗ trợ vận hành hệ thống |
Quản lý tài chính – kế toán | - Dữ liệu nhận dạng - Dữ liệu thanh toán | - Sự đồng ý - Thực hiện nghĩa vụ theo hợp đồng | - Theo yêu cầu xóa của chủ thể dữ liệu | - Đối tác tổ chức chương trình và nhà tài trợ (nếu có) |
Quản lý nhân sự | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp - Dữ liệu thanh toán | - Sự đồng ý - Thực hiện nghĩa vụ theo hợp đồng | - Theo yêu cầu xóa của chủ thể dữ liệu | - Đối tác của chúng tôi trong quá trình cung cấp dịch vụ liên quan - Cơ quan nhà nước có thẩm quyền |
Thực hiện các hoạt động hợp tác | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp | - Sự đồng ý
| - Theo yêu cầu xóa của chủ thể dữ liệu | - Đối tác tổ chức chương trình, hỗ trợ truyền thông và nhà tài trợ của chúng tôi |
Tuyển dụng nhân sự | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp | - Sự đồng ý | - Theo yêu cầu xóa của chủ thể dữ liệu | N/A |
Truyền thông và quảng bá | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp | - Sự đồng ý | - Theo yêu cầu xóa của chủ thể dữ liệu | - Đối tác tổ chức chương trình, hỗ trợ truyền thông và nhà tài trợ của chúng tôi - Đơn vị in ấn (nếu có) |
Tổ chức và vận hành các chương trình, sự kiện, khóa học, dự án | - Dữ liệu nhận dạng - Dữ liệu nghề nghiệp - Dữ liệu thanh toán - Dữ liệu hoạt động - Dữ liệu giao tiếp | - Sự đồng ý | - Theo yêu cầu xóa của chủ thể dữ liệu | - Đối tác tổ chức chương trình, hỗ trợ truyền thông và nhà tài trợ của chúng tôi |
6. TRANSFERRING PERSONAL DATA
In order to fulfill the purposes described in this Notice, we may transfer your Personal Data to selected third parties, both within Vietnam and overseas.
For all data transfers, DOC implements appropriate safeguards to ensure that:
-
All recipients are contractually obligated to maintain the confidentiality and security of your Personal Data.
-
Transfers are conducted in accordance with applicable data protection laws.
-
Appropriate technical and organizational measures are in place to protect your information.
When transferring Personal Data across borders, we comply with all relevant legal requirements and may implement additional protection or other approved transfer mechanisms as required by applicable laws.
You may request information about our specific data transfer safeguards by contacting us through the details provided in the “Contact Information” section of this Notice.
7. PERSONAL DATA SECURE AND STORAGE
DOC implements technical and organizational security measures to guarantee constant confidentiality, integrity, availability and resilience of its information systems and services. These measures meet the state of the art and are adopted of the type of data concerned. We ensure that all our staff are aware of IT security and data protection issues.
To the extent permitted by law, we may store Personal Data in Vietnam or overseas, including on the Cloud computing. We maintain data protection standards in accordance with the applicable laws.
8. DATA SUBJECT RIGHTS AND OBLIGATIONS
To the extent permitted by law, you may exercise your rights by contacting us via the contact details provided in this Notice.
-
To be informed about the processing of their personal data;
-
To give or withhold consent, and to request the withdrawal of consent for the processing of their personal data;
-
To access, correct, or request the correction of their personal data;
-
To request the provision, deletion, or restriction of processing of their personal data; to submit objections to the processing of their personal data;
-
To lodge complaints, denunciations, initiate lawsuits, and claim compensation in accordance with the law;
-
To request competent authorities or relevant organizations and individuals involved in the processing of personal data to take measures to protect their personal data as prescribed by law.
If you would like to exercise your Data Subject Rights, you can contact us through the details provided in the “Contact Information” section of this Notice. We may need to request specific Personal Data from you to help us confirm your identity and ensure your right to access the Personal Data or to exercise any of your other rights. This helps us to ensure that Personal Data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful reasons.
You should be also mindful that exercising your rights above may result in the restriction, suspension, prevention, or termination of part or all of our programs, courses, events, and other services. As a result, exercising your rights above may also be considered as a termination by you of any contractual relationship which you may have with us, and our legal rights and remedies in such an event are expressly reserved.
In addition, you also have the following obligations regarding your Personal Data:
-
To protect your own Personal Data.
-
To respect and safeguard the Personal Data of others.
-
To provide complete and accurate Personal Data in accordance with the law, contractual obligations, or when consenting to the processing of your Personal Data.
-
To comply with personal data protection laws and participate in the prevention and combat of violations against Personal Data.
When exercising your rights and fulfilling your obligations, you must strictly adhere to the principles set out under applicable laws, including:
-
Exercising your rights and obligations in accordance with the law and fulfilling your contractual duties. The exercise of your rights and obligations must aim to protect your own legitimate rights and interests.
-
Not obstructing or interfering with DOC’s lawful rights and obligations.
-
Not infringing upon the lawful rights and interests of the State, agencies, organizations, or other individuals.
9. AMENDMENTS AND UPDATES
DOC reserves the right to modify, update or amend this Notice from time to time in order to reflect any changes to the way we process your Personal Data or changing legal requirements. These modifications and updates of the Notice will be published in our official websites and, where appropriate, notified to you by email address. In the event that the modification, update, or amendment will affect the purposes for which your Personal Data has originally been collected, DOC will notify you about such changes and obtain your new consent (if applicable), prior to such changes becoming effective. Therefore, DOC recommends that you regularly review Privacy Notice and its updates to stay informed about how DOC processes your Personal Data.
10. CONTACT INFORMATION
If you wish to exercise any of your rights as outlined in this Notice, or if you have any questions about how we process your Personal Data, we encourage you to contact us. Our dedicated team is committed to addressing your privacy concerns in a timely manner.
You can reach us through any of the following methods:
Dear Our Community Company Limited
-
Recipient: Vo Ngoc Tuyen
-
Address: 92A Nguyen Huu Canh Street, Thanh My Tay Ward, Binh Thanh District, Ho Chi Minh City
-
Phone number: 0774 934 111
-
Email: hello@dearourcommunity.com