Privacy policy

Privacy Policy

We fully recognize the importance of protecting personal information. We believe that properly handling personal information is part of our social responsibility and declare that we strive to protect personal information in accordance with the following principles (hereinafter “this Privacy Policy”). The definitions of terms other than those defined separately in this Privacy Policy shall be in accordance with the definitions in the Decree 13/2023/NĐ-CP on protection of personal data and its updated/ revised regulations time to time (hereinafter Personal Information Protection Laws”).

            i. Our Company Profile
            Please refer to “About us” > “Company Profile” on our corporate website.

            ii. Compliance with Laws and Regulations
            We will strictly comply with Personal Information Protection Laws, guidelines, industry self-regulation rules, and internal rules, etc. when carrying out operations in which personal information is handled.

            iii. Acquisition of Personal Information
            We will acquire personal information by fair and legitimate means. In addition, unless permitted by Personal Information Protection Laws, we will not acquire any special care-required personal information without the prior consent of the individual to whom such personal information pertains.

            iv. Use of Personal Information
                (1) We will use personal information only for the purposes of use officially announced in advance or within the scope of use informed at the time of acquisition and to the extent necessary to carry out business.
               (2) We will not use personal information in a manner that may encourage or induce illegal or unlawful activities.
               (3) In the case where we share personal data with a third party, or entrust the handling of personal data to a third party, we will examine such third party rigorously, and perform proper supervision to ensure that such third party keeps the personal information confidential.

            v. Provision of Personal Data to Third Parties
            Except as provided by Personal Information Protection Laws, we will not provide personal data to any third party without the prior consent of the individual to whom such personal data pertains.

            vi. Provision of Personal Data to Third Parties in Foreign Countries
            When we disclose or provide personal data to a third party located in a foreign country, we will comply with the rules of Personal Information Protection Laws, and in principle, we will obtain the consent of the individual in question after providing the information required by Personal Information Protection Laws in advance.

            vii. Safety Management Measures for Personal Information

               (1) We will work to store and manage personal information in an accurate and up-to-date manner, and will take the necessary safety control measures to prevent unauthorized access or leakage of personal information.

               (2) We will take the following specific security management measures.

                     I. Formulation of a Basic Policy and Maintenance of Discipline Regarding the Handling of Personal Data
                     In order to ensure the proper handling of personal data, we will establish a basic policy that includes compliance with Personal Information Protection Laws and the creation of a point of contact for related questions and concerns.
                     II. Organizational Safety Management Measures
                     In addition to appointing a manager responsible for handling personal data, we will clarify the employees involved with handling personal data as well as the scope of the data, and we will establish a system for reporting and contacting the manager if evidence or indications of violations of Personal Information Protection Laws or internal rules is detected. In addition to regular self-inspections regarding the handling of personal data, we will undergo audits conducted by outside departments and third parties.
                     III. Human Security Management Measures
                     We will provide training to employees regarding precautions when handling of personal data. Articles concerning the confidentiality of personal data are included in the employee regulations.
                     IV. Physical Safety Management Measures
                     In regions where personal data is handled, We place restrictions on employee access and on equipment that can be brought into the office. We will also implement measures to prevent unauthorized persons from viewing personal data. We will take measures to prevent the theft or loss of equipment, electronic media, and documents, etc., and takes measures to ensure that personal data is not easily revealed when such devices or electronic media are transported, including within our premises.
                     V. Technical Safety Control Measures
                     We will implement access restrictions in order to limit the scope of employee access to the personal information database, and of the database itself. We have implemented a system to protect information systems that handle personal data from unauthorized outside access or harmful software.
                     VI. Understanding the External Environment
                     We have outsourced the storage of information, including some personal data, to a cloud services provider. The personal data is stored in Singapore under the management of the said provider. We are implementing safety management measures based on our understanding of the personal information protection system in Singapore.

            viii. Disclosure, Correction, Suspension of Use, and Deletion of Personal Information
            We will promptly respond to requests from the owners of personal information for disclosure, correction, suspension of use, and deletion, etc. of their own personal data as well as to complaints and inquiries, in an appropriate manner and to a reasonable extent in accordance with Personal Information Protection Laws. Please contact the Personal Information Inquiry Desk listed separately.

            ix. Compliance Program for the Protection of Personal Information
            To execute this Privacy Policy, we have formulated a compliance program for the protection of personal information (which includes this Privacy Policy, Personal Information Protection Regulations and other regulations and rules) and keep our employees and other interested parties fully informed of this program, and execute and maintain this program, as well as strive to properly manage personal information through ongoing review and improvement.

Purposes of Use of Personal Information
SAI GON PAPER CORPORATION (“the Company”) will use the personal information that it acquires for the following purposes. If you have any questions, please contact the “Personal Information Protection Helpdesk.”

     1. Personal Information of Business Partners
     • Negotiations, communications, consultations, order acceptance and placement, settlement or other processing relating to business transactions
     • Receipt of goods or services, etc. relating to business transactions
     • Appropriate and smooth performance of other operations of the Company
     2. Personal Information of Shareholders
     • Exercise of rights and performance of duties as shareholders pursuant to the Law on Enterprise and other laws and regulations
     • Provision of privileges to, and performance of other measures with regard to, shareholders in the capacity of shareholders
     • Management of shareholders, such as preparation of shareholder data based on the standards specified by laws and regulations
     • Appropriate and smooth performance of other operations of the Company
     3. Personal Information of Job Applicants Acquired during Hiring Activities
     • Provision of information and communications relating to hiring by the Company, screening of job applicants and hiring decisions
     • Provision of documents and communications for hiring procedures after a provisional decision is made
     • Other labor management and smooth performance of the operations of the Company
     4. Personal Information of the Company’s Officers, Employees, Former Employees and their Family Members
     • Work-related communications, exchanges of information, and compliance with rights and duties relating to labor laws and regulations, tax laws and regulations and social welfare laws and regulations, including human resource policies (including transfers, evaluations, and career development such as education), payment of wages, attendance management, benefits and so on
     • Performance of various procedures specified by internal regulations
     • Notification and reporting to government offices, their auxiliary organizations or other organizations to which the Company belongs
     • Provision of social welfare benefit services, referrals concerning various types of group insurance and related procedures
     • Distribution of internal publications and so on
     • Communications during emergencies
     • Other labor management and smooth performance of the operations of the Company

Personal Information Protection Help Desks
Contact the department below for any questions on how to handle personal information. Please understand that depending on the information requested, you may be asked to confirm your identity.
• SAI GON PAPER CORPORATION – Corporate Planning Department – General Manager
• (84-28) 6288 4333
• contact@saigonpaper.com
• The Nexus Office, 2nd Floor, 3A – 3B Ton Duc Thang Street, Ben Nghe Ward, District 1, HCMC, Vietnam