G-Group Technology Corporation (hereinafter "G-Group", "we", "our", or "us") is committed to protecting your privacy and personal information when you access or use our website at g-group.vn, along with its subdomains, applications, and related services (collectively, the "Website").
This Privacy Policy explains how we collect, use, store, share, and safeguard your personal information, and clarifies your rights with respect to your personal data. We comply with Decree No. 13/2023/ND-CP dated 17 April 2023 of the Government of Vietnam on Personal Data Protection and other applicable Vietnamese laws. For users in the European Union, we also reference the principles of the General Data Protection Regulation (GDPR).
By continuing to use the Website, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree, please discontinue using the Website.
1. Data Controller
The data controller ("Controller") for personal information collected through the Website is G-Group Technology Corporation.
- Head office: G-Group Tower, 5 Nguyen Thi Due Street, Yen Hoa Ward, Cau Giay District, Hanoi.
- Southern regional office: 89–91–93 Nguyen Co Thach Street, Sala Urban Area, An Loi Dong Ward, Thu Duc City, Ho Chi Minh City.
- Hotline: +84 24 73066222.
- Privacy contact email: privacy@g-group.vn.
For services provided directly by member companies within the G-Group ecosystem (Tima, Gpay, G98, VSEC, G-Innovations, Gapo Work, GTV, G-Solution, BEAT Network, and others), the relevant member company may act as the data controller. In such cases, the member company's own privacy policy applies alongside this Policy.
2. Scope
This Policy applies to:
- All visitors to the Website, whether or not they create an account.
- Individuals who submit contact forms, job applications, newsletter sign-ups, or otherwise interact with the Website.
- Parties who email, call, or otherwise reach us through the official channels published on the Website.
This Policy does not apply to third-party websites, products, or services linked from our Website. We are not responsible for the privacy practices of any third party, and we encourage you to review their policies carefully before providing any information.
3. Personal Information We Collect
We collect the following categories of personal information, depending on your activity on the Website:
3.1. Information you provide directly:
- Full name, job title, company or organization name.
- Email address, phone number, contact address.
- Message content, inquiries, or questions submitted via contact forms.
- Job application information: CV, education history, work experience, skills, cover letter, photograph (if included in CV), reference details.
- Information you voluntarily share when corresponding with us via email or other channels.
3.2. Information collected automatically when you visit the Website:
- IP address, Internet service provider, city- or country-level location inferred from IP.
- Device information: device type, operating system, browser, screen resolution, system language.
- Interaction data: pages viewed, time on page, referrer URLs, date and time of access.
- Cookie and similar tracking technology data (see Section 10).
3.3. Information from third parties:
- Anonymized statistical data from Google Analytics or other analytics tools.
- Information you make public or agree to share on social platforms (LinkedIn, Facebook, YouTube) when interacting with our official channels.
- Authentication signals from third-party security services (e.g., Cloudflare Turnstile) to prevent malicious automation.
We do not knowingly collect sensitive data (religious beliefs, political views, health information, sexual orientation, genetic data, biometric data) unless you have given explicit consent or it is required by law.
4. Purposes of Processing
We process your personal information for the following purposes:
- Respond to requests, questions, and partnership inquiries submitted through the Website.
- Review and assess job applications; coordinate interviews; manage the recruitment process.
- Operate, provide, and improve the Website and related services.
- Analyze content performance and user behavior to enhance the user experience.
- Prevent fraud, unauthorized access, and system abuse; ensure information security.
- Send newsletters, announcements, and partnership updates when you have opted in.
- Comply with legal obligations and requests from competent authorities.
- Other purposes specifically consented to at the time of collection.
5. Legal Basis for Processing
Depending on the purpose, we process personal data on one or more of the following legal bases:
- Your consent, expressed through a specific action (e.g., submitting a form, accepting the cookie banner).
- Performance of a contract or agreement with you, or steps taken at your request prior to entering a contract.
- Compliance with applicable laws binding on G-Group.
- Legitimate interests of G-Group (e.g., securing our systems, preventing fraud, aggregate analytics), provided such interests do not adversely affect your rights.
- Protection of vital interests of the data subject or another natural person in emergencies.
Where the legal basis is consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
7. International Data Transfers
Some service providers we use (including Cloudflare and Google) may process data on servers located outside Vietnam. We carry out cross-border data transfers in accordance with Decree 13/2023/ND-CP, including:
- Preparing and maintaining a Transfer Impact Assessment for personal data sent abroad.
- Executing standard contractual clauses or equivalent safeguards with receiving parties.
- Fulfilling notification obligations with the Ministry of Public Security where required.
You may request information about the safeguards we apply to international transfers by contacting us as described in Section 16.
8. Retention
We retain personal data only for as long as necessary to fulfill the purposes of processing or as required by law:
- Contact-form inquiries: up to 24 months after the most recent interaction.
- Unsuccessful job applications: up to 12 months after submission, unless you consent to a longer retention period so we may consider you for future roles.
- System access logs: up to 12 months for security purposes, after which they are anonymized or deleted.
- Aggregate anonymized analytics: may be retained indefinitely as it no longer identifies any individual.
- Data related to accounting, tax, or legal dispute obligations: retained for the duration required by law.
Upon expiry of the retention period, data is securely deleted or anonymized.
9. Your Rights
Under Vietnamese law and applicable international standards, you have the following rights with respect to your personal data:
- Right to be informed about the processing of your personal data.
- Right to access and correct your personal information.
- Right to consent and to withdraw consent previously given.
- Right to receive your data in a structured, commonly used format (data portability).
- Right to object to or restrict processing in the circumstances provided by law.
- Right to request deletion of your data when it is no longer necessary, you have withdrawn consent, or processing is unlawful.
- Right to lodge complaints or legal claims.
- Right to compensation for damages caused by violations.
- Right to self-protection and to seek protection from competent authorities.
To exercise these rights, please email privacy@g-group.vn with information to verify your identity. We aim to respond within 72 business hours and to complete requests within the timeframe required by law. In certain cases we may request additional information to verify your identity before acting.
11. Security
We apply reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction, including:
- Encryption of data in transit using HTTPS/TLS.
- Internal access controls based on least privilege and multi-factor authentication.
- 24/7 security monitoring, incident detection and response, and audit logging.
- Regular vulnerability assessments and timely patching.
- Binding confidentiality obligations with service providers.
- Security awareness training for personnel handling data.
Despite our best efforts, no system is absolutely secure. In the event of a personal data breach likely to affect your rights, we will notify you and the relevant authority as required by law.
12. Children
The Website is not directed to, and we do not knowingly collect data from, individuals under 16 years of age. If you are a parent or guardian and believe that a child has provided personal information to us, please contact privacy@g-group.vn so we may delete it.
For specific programs or services aimed at children, we will implement parental or guardian consent mechanisms as required by law.
13. Third-Party Links
The Website may contain links to third-party websites, platforms, or services (e.g., member company websites, social media, partners). Access to such links is outside the scope of this Privacy Policy.
We encourage you to review each third party's privacy policy before providing any personal information. G-Group is not responsible for the content, policies, or privacy practices of any third party.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or security standards. Any new version will be posted on the Website with its updated date.
For material changes that may significantly affect your rights or obligations, we will notify you by email (where available) or through a prominent notice on the Website before the change takes effect. Your continued use of the Website after the effective date constitutes acceptance of the updated Policy.
15. Complaints
If you believe our processing of your personal data does not comply with the law or this Policy, please send a complaint to privacy@g-group.vn. We will review and respond within the timeframe required by law.
If the matter is not resolved, you may complain to the Ministry of Public Security (Department of Cybersecurity and High-Tech Crime Prevention and Combat) or pursue claims through civil litigation.
16. Contact
For any questions, requests, or concerns regarding this Privacy Policy, please contact:
- Email: privacy@g-group.vn
- Hotline: +84 24 73066222
- Address: G-Group Tower, 5 Nguyen Thi Due Street, Yen Hoa Ward, Cau Giay District, Hanoi.
We commit to responding within 72 business hours of receiving a valid request.