Privacy Policy

Privacy Policy Data Protection Statement

We welcome your interest in our Global E-commerce Association Vietnam (VGEA). Data protection is one of our top priorities. You can access our websites without providing any personal information. However, if you wish to use specific services through our website, the collection and processing of personal data may become necessary. We will typically request your consent before doing so, unless there is another legal basis for processing your personal data.

The processing of personal data, such as your name, address, email address, or phone number, will comply with the General Data Protection Regulation (GDPR) and specific data protection regulations applicable to E-commerce. With this statement, we aim to inform you about the purpose and scope of the collection, use, and processing of personal data. Additionally, this statement will also inform you about your rights regarding your personal data.

We have implemented necessary security measures to protect personal data processed through our website. However, we are aware that transmitting data over the internet can have security vulnerabilities; thus, we cannot guarantee absolute protection. This is why you have the freedom to transfer personal data to us through other means, such as phone calls.

1. Definitions Our data protection statement at the Global E-commerce Association Vietnam is based on the regulations approved and applicable by the government of Vietnam. Our data protection statement must be clear and understandable to both the public and our members.

2. Name and Address Global E-commerce Association Vietnam complies with general data protection regulations (GDPR), other data protection laws applicable in Vietnam, and other regulations related to data protection. Our contact information is as follows:

Name: Global E-commerce Association Vietnam (VGEA) Address: DMC Tower Building, 535 Kim Ma, Ba Dinh, Hanoi, Vietnam Phone: +84-916-591-936 Email: [email protected] Website:

3. Collecting Data and Aggregate Information All users can access the Global E-commerce Association Vietnam website without providing any personal information. We do not collect or store any personal data related to this. To enhance the quality of our services, the Global E-commerce Association Vietnam website collects anonymous information for statistical purposes, and this process does not lead to any inferences about the personal data of users.

When using this anonymous information and data, we do not draw any conclusions about specific individuals. Instead, this information is used for the following purposes: (1) to accurately provide the content of our website, (2) to optimize our website’s content, (3) to ensure the stability of our IT systems and website technology, and (4) to provide necessary information to law enforcement agencies for investigating cyberattacks. Therefore, we analyze the data collected anonymously for data protection and security purposes. Anonymous data from server log files is stored separately from any personal data that data subjects may provide.

4. Subscribing to Our Newsletter On the VGEA website, users are offered the opportunity to subscribe to our newsletter. The input fields used for this purpose will determine which personal data will be collected along with the time the newsletter is requested from the controller.

VGEA sends newsletters about the latest e-commerce news to subscribers and our members every two weeks. To receive the newsletter, data subjects must meet two conditions: (1) provide a valid email address and (2) subscribe to the newsletter. A confirmation email will be sent to the email address registered for the first time, following a double opt-in procedure to verify that the owner of the email address has the right to receive the newsletter.

During the newsletter registration process, we also store the date and time of registration. The collection of this information is meant to understand future potential misuse of data subjects’ email addresses and to protect the legal rights of the data controller.

Personal information collected during the newsletter registration will be used solely for sending our newsletter. We may contact subscribers via email when necessary for newsletter-related activities or registration, such as changes in newsletter content or technical adjustments. We will not disclose personal data collected from the newsletter service to third parties.

Newsletter subscribers can unsubscribe at any time. The consent to store personal data for sending the newsletter can be revoked at any time. To revoke consent, you can use the corresponding link provided in each newsletter or contact us via email at [email protected].

5. Newsletter Tracking The newsletters of the Global E-commerce Association Vietnam contain tracking links, also known as super tracking links, to perform statistical analysis of the effectiveness of online marketing campaigns. Based on these super tracking links, VGEA can determine whether emails have been opened and which links in the email have been accessed by anonymous viewers. We do not collect any personal information during this process.

Data collected through the super tracking links in newsletters is stored and analyzed by VGEA to improve the newsletter sending process and adjust its content in the future to better suit subscribers’ preferences, without disclosing personal information.

6. Contact Possibilities via the Website The Global E-commerce Association Vietnam website provides information for users to contact us quickly through email or directly through contact forms. The contact information includes our email address. When users contact us via email or contact forms, the personal data they provide will be automatically stored. This personal data is provided voluntarily by data subjects and is stored by the data controller for processing or contacting the data subject. There is no transfer of this personal data to third parties.

7. Regular Erasure and Blocking of Personal Data The data controller will process and store the personal data of data subjects for the period necessary to achieve the storage purpose or as required by laws or regulations of Vietnam that the data controller must comply with.

If the storage purpose no longer applies or if the storage period has expired due to legal provisions of competent authorities in Vietnam, personal data will be regularly blocked or deleted at the request of the law.

8. Rights of the Data Subject Right to Confirmation Every data subject has the privilege, as stipulated by Vietnamese legislators, to require confirmation from the data controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right, they may contact the Global E-commerce Association Vietnam at any time.

9. Right to Access Every data subject has the right to obtain free-of-charge information from the data controller about their personal data stored at any time, including a copy of this information, as granted by Vietnamese legislators. This applies to the data subject as long as their personal data is stored. Furthermore, Vietnamese law provides data subjects the right to access the following information:

  • The purpose of processing.
  • The types of personal data related.
  • Recipients or categories of recipients to whom personal data have been or will be disclosed, particularly recipients in third countries or international organizations. In this case, the data subject will be informed of the appropriate safeguards related to the transfer.
  • The envisaged period for which personal data will be stored or, if not possible, the criteria used to determine that period.
  • The existence of the right to request rectification, erasure, or restriction of processing of personal data or to object to such processing.
  • The right to lodge a complaint with a supervisory authority.
  • Where personal data is not collected from the data subject, any available information as to their source.
  • The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

If a data subject wishes to exercise this right, they may contact the Global E-commerce Association Vietnam at any time.

10. Right to Rectification Every data subject has the right to request the data controller to correct any inaccuracies in their personal data without undue delay, as granted by Vietnamese legislators. Considering the purpose of processing, data subjects have the right to complete incomplete personal data, including by providing a supplementary statement.

If a data subject wishes to exercise this right, they may contact the Global E-commerce Association Vietnam at any time.

11. Right to Erasure Every data subject has the right, as granted by Vietnamese legislators, to request the data controller to erase personal data concerning them without undue delay. The data controller will have the obligation to erase personal data without undue delay when one of the following reasons applies, as long as processing is not necessary:

  • Personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • The data subject withdraws consent based on the processing according to point (a) of Article 6(1) or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
  • Personal data has been unlawfully processed.
  • Personal data must be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.
  • Personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If one of the reasons above applies, and a data subject wishes to request the erasure of personal data stored by VGEA, they may contact VGEA at any time. VGEA will promptly ensure that the erasure request is complied with immediately.

In the case where the data controller has made personal data public and is obliged under Article 17(1) to erase personal data, the data controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform other data controllers processing the personal data that the data subject has requested erasure of any links to, or copy or replication of, those personal data. VGEA will arrange the necessary measures in individual cases.