PERSONAL DATA PROTECTION POLICY

AEON Vietnam Co., Ltd (“AEON Vietnam”) with registered office at 30 Tan Thang Street, Son Ky Ward, Tan Phu District, Ho Chi Minh City always attaches great importance to compliance with the provisions of the law in general and the law on the protection of Personal Data (“Personal Data”) in particular when collecting, recording, analyzing, confirming, storing, editing, etc. for Personal Data (hereinafter collectively referred to as “Processing of Personal Data”).

Therefore, AEON Vietnam develops and notifies Personal Data Protection Policy (“Policy”) to all data subjects (“Data Subjects”) who:

– Access, contact through websites, applications (Website/App) or other official communication/information channels of AEON Vietnam;

– Participate in promotion, advertising, marketing events and other forms of trade promotion of AEON Vietnam;

– Purchase goods through the Website/App, Shopping Malls, Stores or other official sales channels of AEON Vietnam;

– Provide Personal Data to AEON Vietnam through other means.

The Data Subjects should carefully read this Policy including the revised and amended versions of the Policy before providing Personal Data to AEON Vietnam. The Data Subjects’ (1) access, contact through websites, applications (Website/App) or other official communication/information channels of AEON Vietnam; (2) participation in promotion, advertising, marketing events and other forms of trade promotion of AEON Vietnam; (3) purchase goods through Websites/Apps, Shopping Malls, Stores or other official sales channels of AEON Vietnam; (4) providing Personal Data to AEON Vietnam through other means is an acknowledgement of having read, understood, and apprehended the full content of this Policy and give consent, agree to allow AEON Vietnam to process Personal Data in accordance with the entire content of this Policy, including the revised and amended versions of the Policy updated and published on the Website/App, communication/information/sales channels and other hosting platforms from time to time of AEON Vietnam and in accordance with relevant laws. If the Data Subject does not agree with any part of this Policy, please do not access, participate in or provide/send Personal Data to AEON Vietnam.

1. Type of Personal Data

When the Data Subjects (1) access, contact through websites, applications (Website/App) or other official contact/information channels of AEON Vietnam; (2) participate in promotion, advertising, marketing events and other forms of trade promotion of AEON Vietnam; (3) purchase goods through the Website/App, Shopping Malls, Stores or other official sales channels of AEON Vietnam; (4) provide Personal Data to AEON Vietnam through other means, from time to time, AEON Vietnam will collect and process Personal Data including but not limited to:

– Last name, middle name and first name;

– Date of birth;

– Address;

– Mobile phone number;

– Email address;

– Contact information and consignee’s address, etc.

2. Purpose of Processing Personal Data

In line with business objectives, AEON Vietnam processes Personal Data for other appropriate purposes including but not limited to the following:

(a) Identify, authenticate and verify customer information;

(b) Maintain contact with customers, assisting customers in shopping and answering customers’ questions related to AEON Vietnam’s goods/services;

(c) Quickly and promptly notify customers of sales promotion programs, incentive programs, advertising information and/or information of other trade promotion activities;

(d) Solve problems related to the use of Website/Application of AEON Vietnam’s official communication/information channels;

(e) Market survey, research and developing new products, statistics and analysis of customer information, consumption habits to support the operation and business of AEON Vietnam and its affiliated companies and other companies under AEON Group;

(f) Store, manage, backup for disaster recovery or other similar purposes;

(g) Investigate accidents, resolute disputes, complaints and other activities in order to comply with obligations under Vietnamese law;

(h) Detect, prevent, investigate and handle activities that violate policies and regulations of AEON Vietnam and/or violate Vietnamese laws;

(i) Comply with the provisions of law, the requirements of the competent authorities including but not limited to the obligation to disclose information, report in accordance with the provisions of the law on promotion, stored information, audit;

(j) Share, transmit, provide Personal Data to other third parties (for the purposes mentioned above and other appropriate purposes), including but not limited to affiliated companies, other companies under AEON Group; partners, agencies, suppliers of goods/services, contractors, consultants of AEON Vietnam, etc. or at the request of competent authorities.

AEON commits not to sell Personal Data in any form, unless otherwise provided for by law or by competent authorities.

3. Method of Processing Personal Data

From time to time and for each of the above purposes, AEON Vietnam will perform one or more activities affecting Personal Data, such as: collect, record, analyze, confirm, store, rectify, disclose, combine, access, trace, retrieve, encrypt, decrypt, copy, share, transmit, provide, transfer, delete, destruct or other relevant activities.

Personal Data Processing activities may be performed by AEON Vietnam in an automatic or non-automatic manner, by electronic devices or by manual means or by any other means as AEON Vietnam deemed appropriate.

AEON Vietnam thoroughly applies protection and security measures throughout the process of Personal Data Processing. To be specific, Personal Data shall be protected from violations against regulations on the protection of personal data and prevention of loss, destruction or damage caused by incidents and the use of technical measures. However, please note that AEON Vietnam cannot eliminate the security risks associated with the Processing of Personal Data.

4. Starting and ending time of Data processing

AEON Vietnam will commence the Processing of Personal Data as soon as when receives the Personal Data until the Personal Data is deleted, destroyed in accordance with the provisions of law and/or regulations and decision of AEON Vietnam from time to time.

5. Personal Data Processing Organizations and other organizations and individuals related to the Purpose of Personal Data Processing

AEON Vietnam and other third parties, including but not limited to: affiliated companies, other companies under AEON Group, partners, agencies, suppliers, contractors, consultants of AEON Vietnam etc. will perform the Processing of Personal Data in connection with the Purpose of Personal Data Processing.

AEON Vietnam will take all measures to require these third parties to commit to complying with Personal Data protection requirements at least in accordance with this Policy and as required by law.

6. Rights and obligations of Data Subjects

6.1. Rights of Data Subjects:

a. Right to be informed: Data subjects have the right to be informed of his/her Personal Data Processing, unless otherwise provided for by law.

b. Right to give consent: Data subject may or may not give consent to the processing of his/her Personal Data, except as required by law.

c. Right to withdraw consent: Data Subjects have the right to withdraw his/her consent, unless otherwise provided for by law.

d. Right of access: Data Subjects may view, revise or request revise of his/her Personal Data, unless otherwise provided by law.

e. Right to delete personal data:Data Subjects have the right to delete or request deletion of his/her Personal Data, unless otherwise provided for by law.

f. Right to restrict data processing: Data Subjects are required to restrict the Processing of his/her Personal Data, unless otherwise provided by law;

g. Right to provide data: Data Subjects are required to provide him/her with his/her Personal Data, unless otherwise provided by law.

h. Right to object to data processing:Data Subjects have the right to object to the Processing of Personal Data, unless otherwise provided by law;

i. Right to complain, denounce, sue: Data Subjects have the right to complain, denounce or initiate a lawsuit in accordance with law.

j. Right to claim damages: Data Subjects have the right to claim damages in accordance with law when a violation of his/her Personal Data protection regulations occurs, unless otherwise agreed by parties or otherwise provided by law.

k. Right to self-protection: Data Subjects have the right to self-protection in accordance with relevant laws, or to request competent agencies and organizations to implement methods to protect civil rights in accordance with relevant laws.

6.2. Obligations of Data Subjects

a. Protect his/her own Personal Data; request other relevant organizations and individuals to protect his/her Personal Data.

b. Respect and protect the Personal Data of others.

c. Fully and accurately provide his/her Personal Data when he/she consents to the Processing of Personal Data.

d. Participate in propaganda and dissemination of Personal Data protection skills.

e. Comply with the provisions of law on the protection of Personal Data and participate in the prevention and combat of violations of regulations on the protection of Personal Data.

7. Other regulations:

AEON Vietnam, from time to time, reserves the right to amend, adjust the content of this Policy and such modifications will take effect immediately at the time of posting on the Website/App or related channels other official information/system of AEON Vietnam. If the Data Subject does not agree with any part of such modified contents, please cease accessing, participating in, submitting Personal Data to AEON Vietnam and/or exercising its rights Data Subject in accordance with this Policy and in accordance with relevant laws.