Privacy Policy

10/01/2024 4:02

PERSONAL DATA PROTECTION POLICY

Last updated: Day 09 Month 09 Year 2026

Article 1: General Introduction to Tapack

Tan Tien Packaging Joint Stock Company (hereinafter referred to as “Tapack” or “We”) has undergone 50 years of development, affirming its position in the packaging industry. With the goal of becoming a leading manufacturer in Vietnam, we do not stop there but also expand our vision to Southeast Asia, Asia, and other neighboring countries. By continuously investing and making every effort to deliver world-class products and services, we strive to make a strong and lasting impression in the market.

Article 2: Purpose of this Policy

Tapack recognizes that personal data is an important asset that must be respected and protected throughout the process of collection, storage, use, sharing, transfer, and other forms of processing. Accordingly, this Personal Data Protection Policy (“Policy”) is issued to:

a) Provide transparent information on how Tapack collects, stores, uses, shares, transfers, and carries out other activities involving the processing of personal data in accordance with applicable personal data protection laws.

b) Help Data Subjects understand the types of personal data collected by Tapack, the purposes and legal bases for processing, retention periods, scope of use, and the parties with whom such data may be shared.

c) Inform Data Subjects of their rights and the methods by which they may exercise such rights in accordance with applicable laws.

Article 3: Tapack’s Commitment to Personal Data Protection

We respect the privacy rights of our customers, employees, applicants, partners, suppliers, and related organizations/individuals (all of whom are Personal Data Subjects and hereinafter referred to as “You”); and we are committed to processing personal data lawfully, transparently, and responsibly in accordance with Vietnamese law.

Tapack commits to:

a) Collect and process Your personal data only for specific and lawful purposes and within the scope stated in this Policy.

b) Apply necessary technical, managerial, and organizational measures to ensure the safety and security of Your personal data and prevent unauthorized access, use, disclosure, alteration, or destruction.

c) Share or transfer Your personal data to third parties only in the cases specified in this Policy, as permitted by law, or with Your consent.

d) Respect and facilitate the full exercise of Your rights as a Data Subject in accordance with applicable laws.

e) Notify You and the competent state authorities of personal data breaches in accordance with applicable laws, while taking necessary measures to remedy the breach, minimize damage, and prevent its recurrence.

f) Regularly review and update this Personal Data Protection Policy to ensure compliance with applicable laws and Tapack’s actual operations.

g) Perform other obligations as required by personal data protection laws.

In addition, Tapack ensures that its partners, service providers, and third parties involved in processing personal data on behalf of or in cooperation with Tapack shall apply personal data protection measures equivalent to the standards applied by Tapack and comply with applicable personal data protection laws and the obligations stipulated in contracts and agreements entered into with Tapack.

Article 4: Definitions

  1. Personal Data means digital data or information in another form that identifies or helps identify a specific individual, including basic personal data and sensitive personal data.
  2. Data Processing means any activity that affects personal data, including one or more of the following activities: collection, analysis, aggregation, encryption, decryption, modification, deletion, destruction, de-identification, provision, disclosure, transfer of personal data, and other activities affecting personal data.
  3. User means any prospective customer, customer, service provider, partner, subcontractor, applicant, and, generally, any person who has contact or dealings with Us.
  4. Personal Data Controller and Processor means an agency, organization, or individual that determines the purposes and means of processing and directly processes personal data. Tapack acts as the Personal Data Controller and Processor of Your personal data.

Article 5: Legal Bases for Personal Data Processing

Tapack processes personal data on one or more of the following legal bases in accordance with applicable laws:

a) Your valid consent, except where consent is not required by law.

b) Where necessary for entering into or performing a contract, or for taking lawful actions at Your request.

c) Where the processing is necessary to protect the legitimate rights and interests of Tapack and/or You in accordance with applicable laws.

Where personal data processing is carried out on the basis of Your consent, Tapack will obtain such consent in a form appropriate to applicable laws, including but not limited to:

a) Written documents, forms, or electronic documents;

b) Ticking a box indicating consent or providing confirmation on Tapack’s Website;

c) Confirmation via email, text message, or other electronic means;

d) Technical settings or other actions that clearly demonstrate Your consent in accordance with applicable laws.

You have the right to withdraw Your consent at any time in accordance with this Policy and applicable laws. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to the withdrawal.

If You refuse to provide, or provide incomplete or inaccurate, personal data that is necessary, Tapack may not have sufficient grounds to provide certain products, conduct transactions, carry out recruitment activities, manage employment relationships, or perform other obligations at Your request or as required by law.

Article 6: Collection and Processing of Personal Data

To help You understand how Tapack collects and processes personal data, the following section describes data processing activities in specific contexts. The information is summarized in the table below to help You easily identify the types of personal data collected, the purposes of processing, when the data is collected, and the methods of collection.

Type of Personal DataPurpose of ProcessingTime of CollectionMethod of Collection
Basic personal data:
– Full name;
– Email address;
– Phone number;
– Other information voluntarily and proactively provided by You.
Responding to Your questions and requests; providing advice on Tapack’s products or activities.When You complete and submit the Contact Form on the Website, or contact Tapack via email, telephone, or other communication channels.Through the Contact Form on the Website, email, telephone, or other communication methods.
Basic personal data:
– Full name;
– Email address;
– Phone number;
– Transaction/contract/service provision information (bank account number, transaction history, personal identification number, etc.);
– Other information voluntarily and proactively provided by You.
Establishing, entering into, and performing contracts; verifying information; making payments; fulfilling accounting, tax, and other legal obligations as required by law.When You request a quotation, place an order, enter into or perform a contract, make a payment transaction, or during the course of discussions, cooperation, and provision of products or services between the parties.Directly from You or through contracts, purchase orders, quotations, forms, emails, telephone calls, websites, meetings, or documents provided by You.
Basic personal data:
– Full name;
– Date, month, and year of birth;
– Email address;
– Place of birth, place of birth registration, permanent residence address, temporary residence address, current residence, hometown, contact address;
– Nationality;
– Personal images;
– Phone number;
– Other information contained in Your curriculum vitae or voluntarily and proactively provided by You.Sensitive personal data:
– Health status;
– Biometric data;
– …
Recruitment, applicant assessment, entering into employment contracts, management of personnel records, and exercising the rights and fulfilling the obligations of Tapack and employees in accordance with applicable laws.When You submit an application, participate in the recruitment process, enter into an employment contract, and throughout Your employment with Tapack.Directly from You or through CVs, application documents, recruitment forms on the Website, interviews, emails, telephone calls, or recruitment platforms.

 

Article 7: Sharing and Transfer of Personal Data

1. Sharing Data with Third Parties

Tapack only shares Your personal data to the extent necessary to fulfill the processing purposes that have been notified to You or as required by law. Personal data may be shared with:

a) Tapack’s departments, units, and authorized employees;

b) Suppliers of goods and services and Tapack’s business partners supporting its business operations (such as information technology service providers, data storage providers, software providers, banks, transportation and delivery service providers, etc.);

c) Competent state authorities as required by law.

Tapack requires parties receiving personal data to comply with personal data protection regulations and implement appropriate security measures.

2. Transfer of Personal Data Overseas

Where personal data is transferred overseas, Tapack will comply with Vietnamese law and implement necessary measures to ensure the safety and security of personal data.

Article 8: Storage Location of Personal Data

Your personal data is stored by Tapack in information technology systems, databases, and records located in Vietnam, or in storage systems operated by service providers engaged by Tapack, in accordance with applicable laws.

Article 9: Retention Period of Personal Data

Tapack retains Your personal data for as long as necessary to fulfill the purposes for which the data was collected and processed, or until You request deletion of the data (where permitted by law), or for the period required by law.

Upon expiration of the retention period or when the processing purpose has been fulfilled, Tapack will delete or destroy the personal data in accordance with applicable laws, unless continued retention is required by law.

Article 10: Your Rights

Under applicable personal data protection laws, You have the following rights:

a) The right to be informed of the processing of Your personal data;

b) The right to consent or refuse consent, and to withdraw consent to the processing of Your personal data in accordance with applicable laws;

c) The right to access, review, correct, or request correction of Your personal data;

d) The right to request the provision, deletion, or restriction of processing of Your personal data, or to object to the processing of Your personal data in cases prescribed by law;

dd) The right to complain, report, initiate legal proceedings, or request compensation for damages in accordance with applicable laws when Your lawful rights and interests are infringed;

e) The right to request relevant agencies, organizations, or individuals to take measures to protect Your personal data in accordance with applicable laws;

g) Other rights as provided under personal data protection laws.

The exercise of the above rights may be restricted or refused where otherwise provided by law.

Exercise of Your Rights

To exercise Your rights relating to personal data, You may submit a request to Tapack through the following contact details:

Tan Tien Packaging Joint Stock Company (Tapack)
Head Office: Lot II4-II5-II10-II11, Group 4, Industrial Group II, Tan Binh Industrial Park, Street No. 13, Tay Thanh Ward, Ho Chi Minh City, Vietnam.
Email: tantieninfo@tapack.com.vn
Telephone: (84.28) 3816 0777
Website: tapack.com

When submitting a request, You are requested to provide the necessary information for Tapack to verify Your identity and process the request in accordance with applicable laws.

Article 11: Effective Date

This Personal Data Protection Policy shall take effect from the date of its publication and supersede any previous versions (if any).

Tapack reserves the right to amend, supplement, or update this Personal Data Protection Policy from time to time as necessary to comply with applicable laws or reflect the Company’s operations. The updated version will be published on Tapack’s Website at tapack.com and shall take effect from the time of publication, unless otherwise provided.