Information Security Policy for WorkPermitVietnam.com
Inbound Vietnam International Travel Company Limited, operating the website
1. Inbound Vietnam's Commitment to Protecting Personal Information
Understanding the importance of protecting personal information, Inbound Vietnam is committed to complying with security regulations prescribed by Vietnamese law and the laws of relevant countries. We implement appropriate measures to ensure the data you provide is kept confidential and protected.
The Information Privacy Policy published on this website explains why and how Inbound Vietnam collects, records, establishes, structures, stores, adjusts or modifies, restores, searches, uses, saves, discloses, aligns or combines, limits, deletes or destroys personal information you provide during the purchase or use of our services, website access, and use of the Inbound Vietnam platform on the phone, or when interacting with Inbound Vietnam. This Privacy Policy also instructs you on how to exercise your rights in relation to your personal data.
In some cases, Inbound Vietnam acts as a joint controller of personal data with other companies, such as when providing consulting services in cooperation with legal advisors, translation services, or financial institutions. For these activities, Inbound Vietnam and its partners are jointly responsible for the processing of your personal data. Inbound Vietnam and its partners have determined the responsibilities of each party in complying with information security obligations when processing personal data related to these activities.
Accordingly, whenever you wish to exercise your rights regarding your personal data such as the right to access, rectify, erase, restrict, object, data portability or withdraw consent, or when you have any questions or complaints about the processing of your personal data, you can contact Inbound Vietnam or Inbound Vietnam's partners. Inbound Vietnam and our partners will support each other to ensure you can exercise your rights, answer your questions and resolve your complaints.
Specifically, Inbound Vietnam adheres to the following principles:
Your personal data is processed legally, fairly, and transparently.
Your personal data is collected for a specific, clear, lawful purpose and will not be processed beyond the stated purposes.
Your personal data is stored in a reasonable, appropriate, and to the extent necessary for the purposes of processing.
Your personal data is accurate, up-to-date, and inaccurate data relevant to the processing purposes will be promptly deleted or corrected.
Inbound Vietnam applies appropriate technical and organizational measures to ensure the security of personal data to an appropriate extent, including measures to protect against unauthorized or illegal access to personal data and unintended destruction, loss, or damage.
In addition, Inbound Vietnam ensures that subcontractors (service providers, other suppliers, etc.) comply with the same level of personal data protection in contracts signed with Inbound Vietnam.
2. Purpose of Collecting Personal Data
The personal data you provide is used to serve your interests when using Inbound Vietnam's consulting services, including promotions, website access, and mobile applications, or when you call or exchange with Inbound Vietnam. Therefore, Inbound Vietnam collects and processes your personal data for the following main purposes:
Execute contracts to provide appropriate services to customers: To manage and implement service contracts, Inbound Vietnam processes information including full name, passport number, and other necessary details to provide immigration and work permit-related services. Inbound Vietnam only collects and processes this information after receiving your consent and only uses it for the purpose of providing appropriate service and customer care according to the contract.
Fulfill accounting and financial obligations: Inbound Vietnam collects, stores, and uses your data for internal business purposes such as record keeping and compliance with legal and tax obligations. Inbound Vietnam stores this data for a period of 10 years as prescribed by law.
Customer care: Inbound Vietnam uses your personal data for the following purposes:
Receive contributions, suggestions, and complaints from customers.
Contact to resolve requests from customers.
Carry out evaluation, analysis, development, and improvement of services in accordance with customer preferences.
Provide interfaces, content, website design, and mobile applications of Inbound Vietnam that are suitable for customer behavior.
Conduct customer satisfaction surveys to better understand customer needs.
Resolve customer complaints.
Direct marketing: Inbound Vietnam only sends the above direct marketing communications with your prior consent (opt-in). You can opt out of the use of your personal data for the above direct marketing purposes by clicking on the unsubscribe link in the email or contacting Inbound Vietnam directly.
3. Scope of Use of Personal Information
When you use services accessible on the website or mobile application, Inbound Vietnam may collect and process the following types of personal information:
Basic data: Name, passport number, and other information: Name, gender, date of birth, passport number or other information such as date of issue and place of issuance of passport, nationality, language. Contact information and personal account or registration information: Contact information such as phone number, mailing address, email address, mobile phone number, personal email address. Payment information: Credit or debit card information such as cardholder name, card number, expiration date, authentication code. Information about service applications and engagements: Information related to service bookings, application details, and submission dates. Information collected when you use Inbound Vietnam's website, phone applications, and other media: Personal information is automatically collected when you use Inbound Vietnam's website, such as IP address, cookies, login code. Exchange between Inbound Vietnam and you: Exchange, communication options (unsubscribe from newsletter, select information related to booking), register to ask questions, participate in surveys, research, make a complaint or exchange over the phone. Information related to social networks: Depending on the settings of the social networks you use, Inbound Vietnam may receive information from your social network providers. For example, when you register for Inbound Vietnam's services using your social network account, Inbound Vietnam may receive your background information on social networks including contact information, interests, and lists of your friends.
Personal information of children: Inbound Vietnam collects personal information from children after receiving consent or permission from parents or guardians in accordance with current laws on personal data protection. Parents, legal representatives, and/or guardians of the child can request to see, edit the child's personal information or amend or withdraw consent at our offices or on the Inbound Vietnam website.
4. Personal Data Storage Period
Inbound Vietnam will store personal data provided by you on Inbound Vietnam's internal system during the provision of services or until the purpose of collection is fulfilled, or until compliance with the obligations allowed by law and disputes are resolved, or until you request to cancel the information provided.
5. Methods of Collecting Personal Data
Inbound Vietnam collects personal information according to the Information Privacy Policy through the website, using one or more Inbound Vietnam applications on the phone, interacting with Inbound Vietnam via social networks, when you register to receive electronic newsletters, register to attend events and contests with prizes. In addition, Inbound Vietnam may receive your personal data from Inbound Vietnam's other partners and service providers (legal advisors, translation services, financial institutions, etc.).
6. Technical Measures to Protect Personal Data
To ensure the safety of personal information from the risks of loss, theft, leakage, counterfeiting, or any other damage, Inbound Vietnam employees use technical, management, and physical measures as follows:
6.1. Important personal information is stored and managed under password protection within limited access.
6.2. Understanding the risks of cyber attacks, the possibility and severity of the damage they can cause to personal rights and freedoms, Inbound Vietnam commits to:
Protect customer personal information from leakage or damage caused by cyber attacks or computer viruses.
Control suspended access systems and unauthorized access from outside.
Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including pseudonymization and encryption of personal data.
Ensure current security, integrity, availability, and recovery of information processing systems and services.
Restore availability and access to personal data in a timely manner in the event of a physical or technical incident.
Ensure a process of regularly checking and evaluating the effectiveness of technical and organizational measures to ensure security for information processing.
Build a specialized department dedicated to protecting personal information.
7. Communicate with Customers and Notify Local Authorities When Personal Data is Breached
As soon as your personal data is discovered to be violated, Inbound Vietnam will notify you and the competent authority, describing the nature of the data breach including the following information:
The name and contact details of the data protection officer or of any contact point where you may request further information.
Describe possible consequences from the violation.
A description of the measures the data controller has implemented or proposes to implement to address the breach, including measures to mitigate possible adverse effects to the extent necessary.
Inbound Vietnam may be exempted from the responsibility to notify you as prescribed above when one of the following conditions is met:
Inbound Vietnam has applied appropriate technical and organizational measures in response to data breaches, especially breaches that make personal data inaccessible, e.g., encryption.
Notification requires disproportionate technical effort. In this case, Inbound Vietnam will make announcements in the media or use similar measures so that you are still effectively informed.
