PERSONAL DATA PRIVACY POLICY
Welcome to the Certiva platform at certiva.org operated by the Vietnam Digital Copyright Authentication and Certification Center and affiliated entities such as the Vietnam Creative and Copyright Association (VCCA), hereinafter collectively referred to as VCCA.
VCCA seriously fulfills its responsibilities regarding information security in accordance with regulations on the protection of personal information confidentiality under Vietnamese law and commits to respecting the privacy and concerns of all users regarding our website and mobile applications. Users means persons who register accounts with us to use the services provided on the platform.
We recognize the importance of the personal data that Users have entrusted to us and believe that we have the responsibility to manage, protect and process Users' personal data appropriately. This privacy policy is designed to help Users understand how we collect, use, disclose and/or process personal data that Users have provided to us and/or that we maintain about Users, and to help Users make decisions before providing us with any personal data.
By using the website, registering as a member, purchasing services and communicating with VCCA staff, Users voluntarily agree to allow VCCA to collect, store and use personal data provided by Users (in accordance with Decree 13/2023/ND-CP, Personal Data Protection Law 2025 and guidance documents) to support and care for Users in using VCCA's products and services under the following Terms and conditions for personal data protection:
1. General provisions on personal data provided by Users:
Users understand, acknowledge and agree that VCCA is permitted to collect, store, and use information that Users have, are and will declare and provide to VCCA in the process of using the website, registering as members, purchasing services and communicating with VCCA staff (collectively referred to as "using services"), including:
1.1. "Basic personal data" includes:
a) Full name, middle name and birth name, other names (if any);
b) Date, month, year of birth; date, month, year of death or disappearance;
c) Gender;
d) Place of birth, place of birth registration, place of permanent residence, place of temporary residence, current residence, hometown, contact address;
e) Nationality;
f) Personal images;
g) Phone number, identity card number, personal identification number, passport number, driver's license number, vehicle license plate number, personal tax code number, social insurance number, health insurance card number;
h) Marital status;
i) Information about family relationships (parents, children);
j) Information about personal accounts; personal data reflecting activities, activity history in cyberspace;
k) Other information associated with a specific person or helping to identify a specific person that does not fall under the case of sensitive personal data.
1.2. "Sensitive personal data" is personal data associated with an individual's privacy that, when violated, will directly affect the individual's legitimate rights and interests, including:
a) Political views, religious views;
b) Health status and private life recorded in medical records, excluding blood group information;
c) Information related to racial origin, ethnic origin;
d) Information about inherited or acquired genetic characteristics of individuals;
e) Information about physical attributes, unique biological characteristics of individuals;
f) Information about sexual life, sexual orientation of individuals;
g) Data on crimes, criminal acts collected and stored by law enforcement agencies;
h) Customer information of credit institutions, foreign bank branches, payment intermediary service providers, other permitted organizations, including: customer identification information as prescribed by law, account information, deposit information, deposited asset information, transaction information, information about organizations and individuals as guarantors at credit institutions, bank branches, payment intermediary service providers;
i) Data on individual location determined through positioning services;
j) Other personal data prescribed by law as specific and requiring necessary security measures.
1.3. In addition, if Users provide information, situations, legal difficulties and information related to works, we have the right to collect, store and use this information to provide legal support to Users.
1.4. In cases where Users provide personal data of a third party to VCCA, Users warrant, guarantee and take responsibility that Users have obtained the lawful consent of that third party for the processing and information about VCCA being the controller of personal information for the purposes stated in these Terms and conditions for personal data protection.
2. Purposes of personal data processing:
a) Verify identity, accuracy, completeness of information provided by Users;
b) Provide products and services by VCCA or entities affiliated with VCCA to Users; care for and support Users in the process of using services;
c) Protect the legitimate interests of VCCA and Users;
d) Comply with relevant legal regulations and rules, regulations, guidelines, directives or requirements issued by competent State agencies;
e) Receive and resolve difficulties regarding products and services, legal issues for Users;
f) To issue invoices and documents as prescribed by law;
g) For any other purposes required or permitted by any law, regulation, guideline and/or competent State agencies.
3. Organizations and individuals authorized to process personal data
Users agree that the collection, management and use of personal information provided by Users is carried out by (i) VCCA; (ii) other organizations and individuals cooperating/affiliated with VCCA to use this information to provide services and support Users in the process of using VCCA's services.
4. Methods of personal data processing
Users agree that Users' personal information will be collected, stored and used by any method according to VCCA's policies and/or decisions from time to time, including but not limited to: collection, recording, verification, storage, editing, combination, access, retrieval, recovery, encryption, decryption, copying, sharing, transmission, provision, transfer, use of cyberspace, devices, electronic means or other forms to transfer personal information domestically and/or abroad, deletion, destruction and other related actions.
5. Start and end time of personal data processing
5.1. VCCA begins to collect, store and use Users' personal information from when Users provide and share data to VCCA until:
a. Receiving a written request for termination from competent State agencies; or
b. Users have written requests to withdraw their consent to process their data as prescribed by law. However, in this case, VCCA is allowed to store necessary information of Users to fulfill contracts that the parties have signed; to comply with legal regulations and provide information when State agencies request.
5.2. Users' withdrawal of consent in this case does not affect the legality of activities of collecting, storing and using personal information provided by Users to VCCA previously.
6. Rights and obligations of Users
6.1. Users have the right to: provide; access; edit; delete personal information; withdraw consent regarding allowing VCCA to process personal data; restrict or object to the collection, storage and use of their personal information except where otherwise prescribed by law; other rights as prescribed by law.
6.2. Users have the obligation to: provide complete and accurate personal information as required by VCCA when using services; other obligations as prescribed by law.
7. Other commitments regarding personal data processing
a) VCCA will protect personal information provided by Users in accordance with Vietnamese law; fully comply with these Terms and conditions for personal data protection and other contracts, agreements and documents established with Users.
b) VCCA collects, stores and uses personal information provided by Users for specific, clear, lawful purposes, within the scope of the purposes stated in these Regulations on personal data processing protection and in accordance with Vietnamese law.
c) In the process of collecting, storing and using Users' personal information, VCCA and related parties will apply necessary and appropriate technical, security and safety measures within their capabilities to protect Users' personal data.
d) However, Users understand and acknowledge that no technical system or security and safety measures are absolutely safe. Online transactions, users' cyberspace usage behaviors and various forms of collecting, storing and using Users' personal information always contain potential risks, including but not limited to information leakage and dissemination due to cyber attacks. VCCA and related parties will be exempt from liability in the above risk events if they have applied all reasonable measures within their capabilities to prevent and limit damage to Users' personal data.
8. Effectiveness
This consent is an integral part of documents and contracts concluded and/or confirmed by Users with VCCA.