Welcome to Ban Vien Corporation ("we," "us," "our," or "Ban Vien").
We are committed to respecting and protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you interact with our websites, products, and services.

At Ban Vien Corporation, our Corporate Data Protection Policy, along with supporting privacy statements, procedures, guidelines, and templates, establishes strict requirements for handling personal data related to customers, business partners, employees, and other individuals. These frameworks are designed to comply with Vietnam’s PDPD13, other national regulations, and global standards for data protection, ensuring adherence to both domestic and international legal principles.

Our policies and procedures define a global standard for data privacy and security across all Ban Vien Corporation entities, including affiliated legal bodies and partners. We regulate how information is shared internally and externally to maintain the highest level of data integrity.

Ban Vien has embedded core data protection principles — including transparency, data minimization, and data security — into our corporate governance. These principles guide every aspect of how we manage personal data in support of responsible and ethical business practices.

To ensure the standardized collection, processing, transfer, and use of personal data — and to promote the lawful, fair, and transparent handling of such data — Ban Vien Corporation has established a comprehensive data protection framework. This includes our Personal Data Protection Management Policy, Data Protection Handbook, Privacy Policy, and Information Security Policies.

Ban Vien is committed to upholding the following core principles of data protection:

• Lawfulness, fairness, and transparency: Personal data is processed in a lawful, fair, and transparent manner, in full compliance with applicable regulations.
• Purpose limitation: Personal data is collected for specific, explicit, and legitimate purposes, and not further processed in ways that are incompatible with those purposes.
• Data minimization: The data collected is adequate, relevant, and limited to what is necessary in relation to the intended purposes.
• Accuracy and updates: Personal data is kept accurate and up to date. Reasonable measures are taken to ensure that any inaccurate data is rectified or deleted without delay.
• Data security: Appropriate technical and organizational measures are implemented to ensure the confidentiality, integrity, and availability of personal data. This includes protection against unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.

In addition, Ban Vien requires all subcontractors, service providers, and suppliers to adhere to the same high standards of personal data protection through contractual obligations.

We are fully committed to complying with all applicable laws and regulations governing personal data protection — particularly in relation to data subjects’ rights and cross-border data transfers — and will continue to evolve our practices to reflect changes in legal requirements and industry best practices.

Ban Vien Corporation is among the top 3 IT outsourcing service providers in Vietnam. We are certified with CMMI Level 3, ISO 27001:2022, and ASPICE Level 3. Our core industries include Automotive, EdTech, Fintech, Retail Logistics, and Smart IoT. Client satisfaction is our highest priority. Inspired by our clients' business goals, we strive for excellence to support their journey to success — this is the mindset that drives us.

You can assess or visit our website at any time without informing us who you are or providing us any personal information. However, we may collect information at our websites in two ways:

We do not attempt to personally identify you based on this data. Instead, we collect such information to support the following purposes:

• Facilitate efficient website traffic routing
• Diagnose server issues and ensure website functionality
• Analyze how users interact with our website and services
• Continuously improve and optimize user experience

If you choose not to provide your personal information that is mandatory to process your request, we may not be able to provide the corresponding service.

We process your personal data to provide the information you request, handle online job applications, and support other purposes which will either be clearly communicated at the point of collection or reasonably evident based on the context. For example, we may use your data:

• To fulfill your specific requests regarding our products and services
• To contact you with the intention of exploring or developing a business relationship
• To respond to your inquiries or suggestions and provide relevant information based on your needs
• To reach out for marketing-related purposes, such as conducting customer satisfaction surveys
• To provide updates and information about Ban Vien Corporation
• To comply with applicable legal and regulatory requirements

We do not share your personal information with third parties without obtaining your prior consent. Any use or disclosure of your personal data beyond the original purpose for which it was collected will only occur after we have obtained your explicit permission.

However, we may share your personal data under the following circumstances:

• Within Ban Vien Corporation and affiliated entities.
• With authorized business partners, service providers, agents, or contractors who assist us in data processing, storage, service delivery, or transaction fulfillment. In such cases, these third parties are contractually bound to maintain confidentiality and comply with data protection obligations equivalent to ours.
• With law enforcement agencies or regulatory authorities, as required by applicable law or legal process.

Our websites and online services are not intended for, nor directed to, children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child may have submitted personal information to us, please contact us using the details provided in this Privacy Statement.

As a general principle, Ban Vien Corporation considers that:

• A child aged 16 years or older is typically capable of providing informed consent for the processing of their personal data.
• For children under the age of 16, parental or legal guardian consent is required.
• Any communication regarding such data will be directed to the parent or legal guardian.
• We must verify the identity of the parent or guardian and confirm their authority and responsibility to act in the best interests of the child.

Parents or guardians are responsible for explaining the data collection process and this privacy policy to the child. Where required by law (such as under Vietnam’s PDPD13), it is the responsibility of the parent, guardian, or legally authorized agent to obtain the child’s consent in a legally valid manner.

When personal data is requested on behalf of a child under 16:

• If submitted by a parent: We will require valid proof of identity and residential address of the parent, identity of the child, and the child’s birth certificate.
• If submitted by a legal guardian: We will require valid proof of the guardian’s identity and address, identity of the child, the child’s birth certificate, and official documentation proving legal guardianship.
• If submitted by an authorized agent (e.g., solicitor): We will require proof of the agent’s identity and address, identity of the data subject, and written authorization confirming the data subject’s consent to act on their behalf.

Like many websites, when you access our websites, we use cookies—small data files stored on your device—to enhance your experience and gather usage data.

A cookie allows us to recognize your device and helps facilitate your access to the website, track usage behavior, and customize content based on your preferences. These cookies may be:

• Session cookies: which expire once you close your browser
• Persistent cookies: which remain on your device until deleted or expired

We may use information collected via cookies for the following purposes (where permitted by applicable law):

• To understand how users interact with our websites
• To improve website functionality, navigation, and user experience
• To personalize content and offers based on user profiles and browsing behavior
• To deliver relevant advertising and assess the effectiveness of marketing campaigns

We take reasonable steps to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no data transmission or storage system can be guaranteed to be 100% secure.

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

• Right to be informed – you have the right to request information what kind of your personal data are collect, use, processed, for what purpose, from which source, lawful basis of processing
• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten/erasure – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to judicial review: if We refuse your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined below.
• Right to self-protection: The data subject has the right to self-protection according to regulations in the Civil Code, other relevant laws and this Decree, or request competent agencies and organizations to implement civil right protection methods according to regulations in Article 11 of the Civil Code.

We may use information collected via cookies for the following purposes (where permitted by applicable law):

• To understand how users interact with our websites
• To improve website functionality, navigation, and user experience
• To personalize content and offers based on user profiles and browsing behavior
• To deliver relevant advertising and assess the effectiveness of marketing campaigns

Ban Vien reserves the right to change this Privacy Policy at any time and for any reason. Any such changes will be posted in this Privacy Policy. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this Website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Our website may contain links to third-party websites and services that are not controlled by us. We are not responsible for the privacy practices of these third parties.

If you wish to make a complaint about how your personal data is being processed by Ban Vien Corp or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority and Ban Vien Corp’s data protection representatives Data Protection Officer.

The Data Protection Policy, privacy statement, procedures, guidelines, and templates are based on internationally accepted data privacy principles. These documents do not replace national or international data protection laws, but rather supplement them.

In the event of a conflict between this Policy and applicable national laws—or if national laws impose stricter requirements—the national laws shall prevail. In the absence of corresponding local legislation, the principles outlined in this Policy shall apply.

If there is reason to believe that any legal obligation conflicts with the responsibilities outlined in this Data Protection Policy, privacy statement, procedures, or guidelines, such matters must be reported to the Data Protection Officer (DPO).

Responsibilities

• The Data Protection Officer (DPO) is responsible for ensuring the accuracy of the privacy statement and making it publicly available—such as on the company website—so that data subjects are aware of their rights before Ban Vien Corporation begins collecting or processing their data.
• The DPO ensures that this Privacy Statement is accessible to all data subjects in a timely and transparent manner.
• All employees or staff of Ban Vien Corporation who interact with data subjects are responsible for drawing their attention to this statement and obtaining their consent before collecting or processing personal data.

Data Controller

• Name: Ban Vien Corporation
• Email: dpo@banvien.com.vn
• Address: Ban Vien Tower, 54-56-58 Street No. 2, Quarter 5, Van Phuc 1 Residential Area, Hiep Binh Ward, Ho Chi Minh City, Vietnam

Data Protection Officer (DPO)

• Name: Mr. Do Xuan Huy
• Email: dpo@banvien.com.vn
• Address: Ban Vien Tower, 54-56-58 Street No. 2, Quarter 5, Van Phuc 1 Residential Area, Hiep Binh Ward, Ho Chi Minh City, Vietnam

This Privacy Policy takes effect as of 15 January 2025 and supersedes all previous versions.

Ban Vien Corporation ensures full and consistent implementation of personal data protection, and the appointed Data Protection Officer shall act in accordance with the commitments set forth in this Policy.

We reserve the right to amend or supplement this Privacy Policy as necessary. Any changes will be registered with the competent authorities and published on our website and mobile applications immediately after approval.