LLC VIETNAM HIKVISION TECHNOLOGY COMPANY LIMITED
(hereinafter referred to as "the Company")
(This policy is formulated in accordance with Law on Civil Cryptography,Vietnam’s Personal Data Protection Law (PDPL) effective from 1 January, 2026 and other relevant regulations)
1. Purpose and Scope
1.1 The Company, its employees and personnel are obligated to maintain the confidentiality of information received in the course of their work. This Policy documents the confidentiality and non-disclosure obligations of the Company and all its employees and personnel. Employees and personnel, in the course of their employment, may come into possession of information belonging to the Company or third parties disclosed to the Company. Such information, if disclosed without authorization, could jeopardize the interests of the Company and third parties. All personnel and employees are obliged to maintain strict confidentiality and use such information only for lawful and appropriate purposes. This Policy is further specified in the Non-Disclosure Agreement, employment contracts, and other applicable internal rules and procedures.
1.2 The Company commits to adhering to PDPL’s core principles: lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.
2. Data Types and Classification
2.1 Confidential Information
"Confidential Information" refers to (i) any oral, written, graphic, or machine-readable information disclosed by customers, service providers, or individuals to the Company during its operations or business activities, including but not limited to information related to the disclosing party's patents, patent applications, research and development, product plans, products, developments, inventions, processes, designs, drawings, engineering, formulae, market information, business plans, third-party agreements, services, customer data, marketing activities, or financial data, whether or not such information is explicitly marked as "confidential"; (ii) all analytical reports, compilations, research results, and other records and documents generated by the Company’s review or analysis of the aforementioned information; and (iii) product-related information, information related to any transaction, the fact that negotiations regarding such transactions are (or, if terminated, were) taking place, and the content of such discussions.
2.2 Personal Data
As defined in Article 3 of PDPL:
- Basic Personal Data: Name, date of birth, ID number, contact details, etc.;
- Sensitive Personal Data: Political views, health information, biometric data, etc. (explicit consent required under Article 10 of PDPL);
- Special Attention: Employee information, customer data, and business partner representative information all fall under personal data protection.
3. Policy on Personal Data
3.1 The Company processes personal data only under the following circumstances:
- Explicit consent from the data subject;
- Performance of a mandatory obligation;
- Protection of vital public interests such as public safety and public health;
- Legitimate business needs as permitted by applicable laws.
3.2. Protection of Data Subject Rights
The Company ensures data subjects have the following rights:
- Right to be informed: Purpose and scope of data processing;
- Right to access, rectify, and erase data;
- Right to restrict processing;
- Right to data portability;
- Right to withdraw consent.
3.3 The Company, as an importer, is committed to ensuring supply chain compliance. Even if the products do not involve the processing of personal data, the overall operations must adhere to data protection standards to prevent misuse of encryption technology or the occurrence of information leakage incidents.
3.4 Prior to importing civil cryptography products or services, the Sales Department is responsible for obtaining the relevant import license, maintaining its validity, handling renewals in a timely manner, properly retaining documentation, and conducting periodic reviews to ensure products continuously comply with technical and cryptographic safety standards.
4. Policy on Confidential Information
We expect all employees and relevant personnel to handle confidential information professionally. Everyone is obliged not to access or attempt to access any information for which they are not authorized. The confidentiality system is established primarily for two purposes: First, to protect the sensitive or confidential information of the Company and our clients from unauthorized disclosure or misuse; Second, to ensure the secure sharing of information and knowledge within the Company, confidentiality is a necessary foundation for building trust and ensuring smooth collaboration. To minimize security risks, the Company adheres to the "need-to-know" principle, meaning only necessary personnel are permitted access to confidential information. In the event of an actual or suspected information breach, the Company reserves the right to inspect relevant work devices and operation logs in accordance with laws and regulations to investigate the cause and implement remedial measures.
Our commitment:
- Keep confidential and do not disclose all confidential information;
- Use confidential information solely for the purpose of conducting jobs for the Company.
5. Policy Review Mechanism
The Company will periodically review this Policy to ensure compliance with the latest legal requirements and business needs.