ULAW HCMC values the privacy of user who provide information to company. This privacy policy aims to give the user information on how ULAW HCMC collects and processes their data including any data that they may provide through ULAW HCMC application.

People under 18 years old will not be considered as ULAW HCMC users. The use of ULAW HCMC Application would be considered misuse of ULAW HCMC service and ULAW HCMC is not responsible for any consequence of such access.

This policy applies to both information supplied to ULAW HCMC either by an individual or by legal third parties. ULAW HCMC may use data supplied for any of the purposes as set out in this policy, or as otherwise disclosed at the point of collection.

In particular, ULAW HCMC will make sure that all data shall be processed in compliance with the following principles:

• Lawfulness, fairness and transparency: To process lawfully, fairly and in a way that is transparent to the data subject
• Purposes limitation: To collect or create for specified, explicit and lawful purposes and not be further processed in a manner that is not complied with the purposes under this policy
• Data minimization: To collect data in the manner of adequate, relevant and limited to what is necessary for ULAW HCMC’s purposes
• Accuracy: To reasonably maintain data is accurate and updated
• Storage limitation: To retain the data no longer than the necessity of ULAW HCMC’s purposes, except in the circumstances established by law
• Integrity and confidentiality: To keep data safe from any unauthorized access, processing, accidental or deliberate loss or destruction

• For all users, ULAW HCMC will collect, use, store and transfer the following kinds of information when you, your colleagues or others access the Application:
  • Account Information includes first name, last name & middle name, birthday, gender and email address
  • Professional Profile Information includes displayed name or similar identifier, title, headline, and experiences
  • Contact Information includes address, email address, and phone number
  • Device Information includes:
    • Device attributes: information such as the operating system, hardware and software version, battery level, signal strength, available storage space, browser type, app and file names and types, and plugins
    • Data from device settings: information you allow us to receive through device settings you turn on, such as access to your GPS location, camera or photo, your address book
    • Network and connections: information such as the name of your mobile operator, language, time zone, mobile phone number, IP address
    • Cookie data: data from cookies stored on your device. Learn more about how we use cookies in the ULAW HCMC Cookie Policy
  • Other information includes images, files that users share on the application from the user's Google account through posting messages, announcements, messages
  • Your usage. We collect information about how you use our Application, such as the types of content you view or engage with; the features you use; the actions you take; the people you interact with; and the time, frequency and duration of your activities. For example, we log when you're using and have last used our Application, and what posts, videos and other content you viewed on our Application
• For all organizations, we will collect, use and store introduction about your organizations, including but not limited to, identity information, tax code, trade name; your products and services (if any); and any other data you submitted to the Application. You can control privacy of these data by using functions that ULAW HCMC provides

• Under certain circumstances users have the following rights:
  • Request access to data (commonly known as a "data subject access request"). This enables user to receive a copy of data ULAW HCMC holds and to check that ULAW HCMC is lawfully processing it
  • Request correction of data that ULAW HCMC holds. This enables user to correct any incomplete or inaccurate data ULAW HCMC holds about user
  • Request erasure of data. This enables user to lawfully request ULAW HCMC to delete or remove user's data where there is no good reason for ULAW HCMC continuing to process it

The user also has the right to ask ULAW HCMC to delete or remove data where user has the right to object to processing (see below), where ULAW HCMC may have misused user's information or where ULAW HCMC is required to erase the to comply with local law.

However, that ULAW HCMC may not always be able to comply with the request of erasure for specific legal reasons which will be notified to the user, if applicable, at the time of the request.

• Object to processing of data where ULAW HCMC is relying on a legitimate interest (or those of a third party) and there is something about the particular situation which makes the user want to object to processing on this ground as the user feels it impacts on his / her fundamental rights and freedoms

The user also has the right to object where ULAW HCMC is processing data for direct marketing purposes. In some cases, ULAW HCMC has compelling legitimate grounds to process the information that override the agreement with the user.

• Request restriction of processing of data. This enables user to ask ULAW HCMC to suspend the processing of user's data in the following scenarios:
  • If user wants ULAW HCMC to establish the data's accuracy
  • Where data usage is misused but user does not want to erase it
  • Where user needs to hold the data even if ULAW HCMC no longer requires it as the user needs to establish, exercise or defend legal claims
  • User has objected to ULAW HCMC usage his / her data but ULAW HCMC needs to verify whether ULAW HCMC has overriding legitimate grounds to use it
• Request the transfer of data to user or to a third party. ULAW HCMC will provide to the user, or the third party, the user's data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which user initially provided consent for ULAW HCMC to use or where ULAW HCMC used the information to perform a contract with the user
• Withdraw consent at any time where ULAW HCMC is relying on consent to process user's data. However, this will not affect the lawfulness of any processing carried out before the user withdraws his / her consent. In this case, ULAW HCMC may not be able to provide certain features to user. ULAW HCMC will advise user at the time user withdraws his / her consent
• If user wish to exercise any of the rights set out above, please contact ULAW HCMC via email at hcsv@hcmulaw.edu.vn
• No fee usually required: User will not have to pay a fee to access data (or to exercise any of the other rights). However, ULAW HCMC may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, ULAW HCMC may refuse to comply with the request in these circumstances
• What ULAW HCMC may need from user: ULAW HCMC may need to request specific information from user to identity and ensure user's right to access data (or to exercise any of user rights). This is a security measure to ensure that data is not disclosed to any person who has no right to access it. ULAW HCMC may also contact you to ask you for further information in relation to your request to speed up our response
• Time limit to respond: ULAW HCMC tries to respond to all legitimate requests within one month. Occasionally it may take longer than a month to process the requests. In this case, ULAW HCMC will notify user about the processing time

• Information and content you provide. We collect the content, communications and other information you provide when you use our Application, including but not limited to, when you sign up for an account, create or share content, and message or communicate with others
• Automated technologies or interactions. As user interacts with ULAW HCMC Application, it may automatically collect data about the user's equipment, browsing actions and patterns...
• Third parties or publicly available sources. ULAW HCMC may receive data from various third parties and public sources that have legal permission to share the information. They are listed below but not limited to
  • Analytic providers [such as Google based outside the EU]. For more information on Google's use of the personal information, please see Types of Cookies Used by Google
  • Google Sign-in and Google Drive Services: By accepting and granting ULAW HCMC permission to the user's Google account, ULAW HCMC will store the images and files shared by the users on the application

• ULAW HCMC will only use data for lawful purposes. Commonly, ULAW HCMC will use data in the following circumstances:
  • Where it is necessary to perform contract between ULAW HCMC and user
  • Where it is necessary for ULAW HCMC legitimate interests (or those of a third party), user's interests and fundamental rights do not override those interests
  • Where it is necessary to comply with any legals or regulatory obligations
• The possible ways, which ULAW HCMC plans to use data, have set out below:
  • Providing Services: In this regard, ULAW HCMC may collect, process, and disclose data for the purpose of:
    • Verifying your identity
    • Enhancing the security and safety of the Application for your organization and other users, such as by investigating suspicious activity or violation of applicable terms or policies
    • Personalizing your experience and your organization as part of our offering of the service
    • Linking on the Application on different devices operated by the same individual to improve the entire operation
    • Carrying out data and system analysis, including research to improve the service of Application
    • Developing new features or enhancements
    • Identifying and fixing bugs
  • Maintaining records of any and all students, alumni and staff of third-party suppliers
  • Conducting marketing, profiling, and business development activities as well as market research and statistical analysis and customer survey regarding ULAW HCMC services
  • For accounting, employment, and internal management purposes of ULAW HCMC

ULAW HCMC may have to share data with the legal parties below for the purposes set out in the section 5 above:

• Third-party service providers: We may disclose and transfer your data to our partners and to service providers engaged by us to assist us to provide services to you or who otherwise process data for purposes or notified to you when we collect your data. This includes, but not limited to:
  • IT service providers
  • Payment processors
  • Third party partners for the purposes of hosting events
• Umbrella / group companies: The data may be provided to ULAW HCMC subsidiaries or affiliated companies for the purpose of processing data on behalf of ULAW HCMC to provide products / services. These parties are required to process such data based on ULAW HCMC's instructions and in accordance with this privacy policy. They do not have any independent right to share such data
• Compliance with laws and legal proceedings: When we believe it is necessary to comply with applicable laws or to exercise, establish or defend our legal rights or protect your vital interests or those of any other person, we may also disclose and transfer your data to our professional advisers, law enforcement agencies, insurers, government and regulatory and other organizations, or as otherwise required or permitted by applicable laws. When ULAW HCMC believes that it is necessary to share data in order to investigate, prevent or take actions against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of ULAW HCMC terms of use, or as otherwise required by law

ULAW HCMC will be entitled to disclose data to any third parties, and / or transferred either internally or outside of Vietnam, for the purposes as listed in the section 6 above of this policy when the consent thereof has been obtained in advance.

ULAW HCMC would like to make sure that data is stored and transferred in a way which is secure. Thus, ULAW HCMC will only transfer data to third-parties where they comply with the data protection legislation and the means of transfer safeguards.

We employ commercially reasonable security methods to prevent data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed, prevent unauthorized access to the Application, to maintain data accuracy and to ensure the correct use of the information we hold.

ULAW HCMC also has put in place procedures to deal with any suspected data breach and will notify user and any applicable regulator of a breach where ULAW HCMC are legally required to do so.

For registered users, some of your information can be viewed and edited through your account, which is protected by a password. We recommend that you do not divulge your password to anyone. While we try to protect the information we hold for you, we cannot guarantee the security of any information you transmit to us and you do so at your own risk.

ULAW HCMC keeps all information to comply with legal obligations, resolve disputes, or enforce agreements.

• ULAW HCMC keeps your profile permanently until you request to close it. The easiest way to close your ULAW HCMC account is by going to the account closure page. After that, your information generally will be hidden, however we still keep it in ULAW HCMC's database so you can re-open someday
• Data about feedback, vendor rating & review, transaction information will not be ever removed from ULAW HCMC's system
• In all cases listed above, ULAW HCMC may retain data longer. In this case, ULAW HCMC will notify user about the change of data retention

We may update this Privacy Policy from time to time in response to changing legal, technical or features developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

Any changes to this Privacy Policy will be communicated by us posting an amended Privacy Policy on the Application. Once posted on the Application, the new Privacy Policy will be effective immediately. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy.

If a user has any questions regarding this privacy policy, including any requests to exercise the user's legal rights, the user can contact ULAW HCMC using the following information:

• Full name of legal entity: Ho Chi Minh City University of Law
• Email address: hcsv@hcmulaw.edu.vn
• Address: 02 Nguyen Tat Thanh Street, 12 Ward, District 4, Ho Chi Minh City, Vietnam