User Data Deletion
User Data Deletion Policy
Personal data protection is not only a legal requirement, but also the foundation of trust in the digital business environment.
1. Why this Policy exists
Purpose of issuance
This Policy is issued to clearly define how INDUSVINA receives, verifies and processes requests for user data deletion on its website, internal systems and related digital platforms.
Core value
INDUSVINA aims to build a transparent, secure and legally compliant business environment that respects each user's right to control personal data.
2. Legal basis and referenced standards
Vietnamese laws
- The 2013 Constitution of Vietnam regarding the right to privacy, personal secrets and family secrets.
- The 2015 Civil Code regarding personal rights, private life and personal secrets.
- The 2018 Cybersecurity Law regarding information security and cybersecurity.
- Decree No. 13/2023/ND-CP on personal data protection, effective from 01 July 2023.
International standards
- The EU GDPR, effective from 25 May 2018.
- Article 17 of the GDPR on the Right to Erasure.
- OECD Privacy Guidelines and APEC Privacy Framework in international data governance.
3. Scope of application
This Policy applies to personal data collected, stored or processed by INDUSVINA within the scope of its lawful business operations.
Website
Contact forms, quotation requests, access information and interaction data.
Email & CRM
Communication information, customer care history and contact records.
Recruitment
Candidate profiles, email, phone number and application documents.
API platforms
Google, Facebook, LinkedIn, Zalo OA, YouTube, TikTok or other platforms when lawfully connected.
Internal systems
Data used for administration, operation, security and compliance control.
Digital services
Applications, tools and online services managed by INDUSVINA.
4. User rights
INDUSVINA respects users’ right to control personal data in accordance with applicable laws and the company’s scope of responsibility.
Users have the right to
- Request access to data being retained.
- Request correction of inaccurate information.
- Request restriction of processing where appropriate.
- Withdraw consent where permitted by law.
Right to request deletion
- Request deletion of data under INDUSVINA’s management.
- Request deactivation of authentication information no longer in use.
- Submit complaints if data is believed to be processed improperly.
- Receive a response on the processing result according to a valid procedure.
5. Data that may be requested for deletion
Personal information
Full name, email, phone number and contact address.
Transaction information
Quotation request content, communication history and contact records.
Recruitment records
CVs, application documents and recruitment communications.
Website data
Cookies and device identification data within the website scope.
Connection data
Access Token, Refresh Token, account ID or page ID when a lawful API integration exists.
Other data
Other data that may be deleted upon a valid request as permitted by law.
6. Data deletion request process
Step 1: Submit request
The user submits a request via email, website form or an official method announced by INDUSVINA.
Step 2: Identity verification
INDUSVINA may verify email, phone number, transaction information or lawful representative authority.
Step 3: Scope assessment
The company assesses which data may be deleted and which data must be retained under law or contract.
Step 4: Processing
Delete, deactivate, anonymize or revoke access within the systems managed by INDUSVINA.
Step 5: Result notification
INDUSVINA responds with the processing result or the reason why the request cannot be fully processed.
Step 6: Compliance record
The processing history may be recorded as necessary for inspection, reconciliation and compliance evidence.
7. Cases where data cannot be deleted immediately
Not all data can be deleted immediately upon request. Some data may need to be retained due to legal obligations, contractual obligations or protection of legitimate rights and interests.
| Data group | Reason for possible retention |
|---|---|
| Contracts, documents and transactions | For accounting, tax, audit obligations or evidence of rights and obligations between parties. |
| Dispute-related data | For complaints, denunciations, dispute resolution or requests from competent authorities. |
| System logs | For cybersecurity, fraud prevention, incident investigation and system integrity protection. |
| Backup data | May exist in backups and be deleted or overwritten according to the system management cycle. |
8. Data on third-party platforms
In certain cases, users may connect third-party accounts or services to INDUSVINA’s systems.
Platforms that may be involved
- Google Business, Google OAuth, YouTube.
- Facebook Fanpage, Meta API.
- LinkedIn, Zalo OA, TikTok.
- Microsoft, Cloud or other digital platforms.
Scope of responsibility
INDUSVINA only processes data within its own system scope. Data stored directly on third-party platforms is subject to the policies and management mechanisms of each respective platform.
9. Limitation of liability
INDUSVINA is committed to processing personal data with the highest responsibility within its legal authority and obligations.
- INDUSVINA is not responsible for technical incidents caused by third-party service providers beyond reasonable control.
- INDUSVINA is not responsible for data that users voluntarily disclose on other platforms.
- This Policy does not exclude data retention obligations under law, contract or requests from competent authorities.
- INDUSVINA does not commit to deleting data outside its systems or lawful administrative control.
10. INDUSVINA’s commitments
Transparent governance
Collect and process data on a lawful basis, with clear purposes, proper scope and accountability.
Security protection
Apply appropriate technical and management measures to limit unauthorized access, loss or disclosure of data.
Respect for user rights
Receive and process valid requests in an objective, cooperative and legally compliant manner.
Continuous improvement
Regularly review policies, procedures and systems to align with laws, technology and business requirements.
11. Modern data governance trends
In the digital environment, businesses must not only store data securely but also manage data throughout its lifecycle: collection – use – security – retention – deletion.
- Privacy by Design: embedding data protection into system design from the beginning.
- Data Governance: assigning permissions, controlling and recording data processing activities.
- AI Governance: responsible data governance when applying AI and automation.
- Zero Trust: never trust by default; always verify access rights.
- Compliance: maintaining compliance in operations, cooperation and system development.
FAQ – Frequently Asked Questions about User Data Deletion
1. Who has the right to request data deletion?
Users whose data is processed by INDUSVINA, lawful representatives or duly authorized persons may submit data deletion requests.
2. How can a data deletion request be submitted?
Users may submit requests via info@indusvina.com or through an official website form if provided.
3. Will data be deleted immediately?
Not in all cases. INDUSVINA needs to verify identity, assess the data scope and review retention obligations under law or contract.
4. Will data on Google, Facebook, LinkedIn or Zalo be deleted?
INDUSVINA processes data within its own systems. Data stored directly on third-party platforms is subject to each platform’s policies and management tools.
5. Why does INDUSVINA retain records of deletion requests?
Processing records may be retained to the extent necessary for inspection, reconciliation, system security and proof of legal compliance.
Connect with INDUSVINA
INDUSVINA receives personal data-related requests with transparency, good faith, responsibility and legal compliance.
0979 823 639
info@indusvina.com
www.indusvina.com
Ho Chi Minh City, Vietnam
