Privacy and Information Sharing Policy (“Policy”) of AEON VIETNAM MEMBER Membership Program and or KIDS CLUB Membership Program (AEON KIDS CLUB) (hereinafter collectively referred to as “Program”; customers registering to participate in either or both of the above Programs are collectively referred to as “Member Customers”), in principle, complying with the Personal Data Protection Policy of AEON Vietnam Company Limited (“ Company”), published on the Company’s official websites/Applications and/or information channels, and specifically specified as follows.
Customers need to carefully read this Policy, including any amended and supplemented versions of the Policy, before participating in the Program. Participation in and continued use of the benefits of the Program is confirmation of having read, understood, fully understood the contents of this Policy and voluntarily and agreed to allow the Company to process Personal Data according to the entire content of this Policy, including amended and supplemented versions of the Policy updated and published on the website/AEON Vietnam mobile application/KIDS CLUB mobile application of Programme.
If Customer does not agree with any part of this Policy, please do not access, participate or provide/send Personal Data to the Company through the website/AEON Vietnam mobile application/Application Mobile KIDS CLUB’s Program.
Article 1. Collection and use of member customer information
1. Information collected
When member customers register to open an account and/or make transactions at AEON Vietnam Application/ KIDS CLUB mobile application, from time to time, the Company will collect necessary information for account registration. account and/or conduct transactions (“Member Information”), so that the Company can identify and/or verify information of Member Customers to ensure consumer rights.
This Member Information includes:
a. Personal Information is any information sufficient to accurately identify an individual, including at least one of the following: full name, date of birth, gender, nationality, identification number ID card, citizen identification number, passport number, phone number, email address, permanent and temporary residence address, contact address, office address, title, etc. and other information Other information includes: status, marital status, number of children and age, date of birth of children, occupation, hobbies, income, etc.
b. Transaction Information is information arising from or related to the shopping process, using the Member Account, performing transactions on applications and other channels of the Program.
2. Purpose of collecting and using Member Customer Information
a. To provide Member Customers with incentives of the Program and manage the Program;
b. Perform necessary services or services that contribute to supporting the provision and administration of the Program;
c. Identify, authenticate and check member customer information;
d. Communicate and support communication between Member Customers and the Company, and process valid requests from Member Customers;
e. Deploy marketing and communication campaigns to member customers to improve Program effectiveness. Send to Member Customers notices, advertising information, promotions, and documents related to the Program, products and/or services within the Program by methods consistent with regulations under the law;
f. Market surveys, research and development of new products, statistics and analysis of member customer information, consumer behavior and use of detailed transaction information related to the Program to support operations. operations and business of the Company and its Partner Companies;
g. Detect, prevent or investigate any illegal activities, misconduct or omissions related to the use of services within the framework of the Program such as: fraud, sabotage of member customers’ accounts , falsifying the identity of Member Customers, fraud, or any other activity arising from the relationship between the Company and Member Customers within the framework of the Program; Other legitimate purposes consistent with the goals of the frequent flyer program (if any);
h. Storage, management, backup for incident recovery or other similar purposes;
i. Accident investigation, dispute resolution, complaints and other activities to comply with obligations under Vietnamese law;
j. Comply with legal regulations and requirements of competent state agencies including but not limited to obligations to disclose information and report according to legal regulations on promotions, record keeping, and auditing ;
k. Using cookies or similar technologies to collect information such as: access history, Member’s choices when accessing and using features of the AEON Vietnam mobile application and/or KIDS CLUB mobile application… aims to increase experience and help the Company understand the needs and preferences of member customers so that they can provide better services.
l. For purposes of using Member Information of Member Customers not mentioned above, the Company will notify Member Customers before use, except for purposes of achieving the goals of the Program. Submit, bring better benefits to Member Customers and cases permitted by law.
3. Scope of processing Member Information:
AEON Vietnam may share, transmit, and give Member Information to other third parties (for the implementation of the above purposes and other appropriate purposes), including but not limited to: affiliated companies. association, other companies belonging to the AEON Group; partners, agents, goods/service suppliers, contractors, consultants of AEON Vietnam, etc. or at the request of competent state units and agencies.
4. Processing method for Member Information:
- From time to time and depending on each of the above purposes, AEON Vietnam will perform one or more activities affecting Member Information, such as: collecting, recording, analyzing, confirming, storing, editing edit, disclose, combine, access, retrieve, retrieve, encrypt, decrypt, copy, share, transmit, make available, transfer, delete, destroy data of Member Information or otherwise other related movements.
- Processing activities of Member Information may be carried out by AEON Vietnam in an automatic or non-automated manner, by electronic means or manual means or by any other means that AEON Vietnam Nam considers it appropriate according to regulations of the Law.
- AEON Vietnam thoroughly applies protection and security measures in the process of processing Member Information within the scope of its capabilities, including protection against violations of regulations on protection Member Information and preventing loss, destruction or damage due to incidents, using technical measures and limiting unwanted consequences and damages that may occur. However, AEON Vietnam cannot completely eliminate security risks related to the Processing of Personal Data from force majeure causes such as hackers, viruses, malware, and system problems, technical infrastructure or arising due to the fault of another party causing loss, destruction or damage to Member Customers and related parties, etc.
5. Storage period, storage start time and processing end time:
a. Information will be stored and used for the purposes stated in Article 1.1 of this Appendix 2 from the date a Member Customer joins the Program until the date it is deleted or eliminated according to legislation and/or regulations or decisions of the Company from time to time.
b. When membership is resigned or eliminated, the Company will notify through the linked mobile applications or in writing to the Partner Companies who are involved in the operation and management of information. However, how the Partner Companies will handle the information when membership is resigned or eliminated will be subject to the policies of the respective Partner Companies. However, information processing when a member customer cancels or withdraws their membership of AEON Vietnam and its Partners will apply according to the policies of each AEON Vietnam and its respective Partners.
6. Measures to protect information and ensure the security of customer Member Information:
In principle, data subject information will be protected, AEON will not arbitrarily disclose it to third parties unless agreed by the customer and/or required by law. In addition, technically, in cases where customers create user accounts and provide personal information, AEON will apply the following measures:
- Each customer has an account to access the application based on the phone number and password when the customer registers and after logging in, it will be encrypted into an access token. Specify password complexity.
- OTP feature to confirm customers.
- The database has its own access password placed on Microsoft Azure Cloud and is applied with measures such as FireWall, IP WhiteList and other methods guaranteed by Microsoft Azure Cloud.
- Customer information management system is built on the cloud platform of SAP Company, security standards according to international standards.
- The transmission line between connection points is a private line or a VPN encrypted line
- Assign specific departments and individuals to be in charge at connection points to access Member Information
For internal actors: Develop a strict internal management policy on protecting Member Information, periodically check access permissions and extracted data.
Article 2. Providing Member Information
The Member Customer hereby agrees to the following terms of Providing Member Information:
1. Receiving parties:
a. The Company (AEON VIETNAM Co., Ltd.)
b. ACS VIETNAM Trading Co., Ltd. (Tax code: 0305732706) – please look up and refer to information of ACS Vietnam Trading Company Limited at website: https://dangkylanhdoanh.gov.vn/
c. The Company’s service providers are involved in providing services and administering the Program.
d. The Company’s Partner Companies who have agreements on the distribution and confidentiality of information, other companies in which the Company’s owner (AEON Co., Ltd.) holds capital directly or indirectly, including companies established after the time the Member Customer agrees to this Privacy Protection and Information Distribution Policy and the Terms and Conditions.
e. Services providers who are involved in information processing activities.
f. Competent authorities and units.
2. Use purpose of the receiving parties:
According to the agreement between the Company and the receiving parties, comply with the provisions stipulated in this Appendix.
3. Type of information provided:
According to the agreement between the Company and the receiving parties, comply with the provisions stipulated in this Appendix.
4. Term of storage and use of information of the receiving parties:
According to the agreement between the Company and the receiving parties, comply with the provisions stipulated in this Appendix
Article 3. Rights and obligations of Member Customers regarding the protection of Member Information
1. Obligations of information protection of Member Customers
a. Each Member Customer understands, commits, and warrants to be the sole and legal owner of their Member Account, responsible for self-preservation of their physical card (if any) and the confidentiality of their Member Account information. The physical card (if any) is used only by the Member Customer themselves and may not be lent, transferred, authorized to others to use, or pledged as collateral without the prior consent of the Company. The Company shall not be liable for any damage caused by circumstances in which a Member Customer violates the provisions of this Article or when they are careless in the maintenance of their physical card and Member Account.
b. If the Member Account or the physical card (if any) of a Member Customer is stolen, damaged or lost, that Member Customer has responsibility for notifying the Company immediately. Upon receipt of the notification, the Company will take necessary measures, such as verifying, checking, changing the use status of that Member Account. The Company shall not be liable for any damage that occurs before the relevant Customer Member fulfils their notification obligation as provided for in this Article or during the Company’s implementation of the necessary abovementioned measures.
c. All Member Customers must not interfere with the system or change the data structure of the Mobile Application in any way. The Company strictly prohibits the distribution, dissemination or promotion of any activities aimed at interfering, destroying, or infiltrating the data of the Mobile Application system. In case of violation, that Member Customer will be deprived of all benefits arising from the use of the Mobile Application and may be sued in accordance with the law.
2. Rights of information protection of Member Customers
a. Right to know, consent, provide, access, modify, withdraw consent:
- Member customers have the right to know about the processing of their member data unless otherwise provided by law.
- Member customers can agree or disagree to allow the processing of their member information, except in cases prescribed by law.
- Member customers are required to provide themselves with their membership information data, unless otherwise provided by law.
- Member customers can access, modify and delete certain Personal Information from the Mobile Application and/or Members have the right to request AEON Vietnam to amend or update Personal Information by submit a request via text, call center, email or other interactive channels of the Program.
- Member customers have the right to choose to stop receiving marketing emails from the Program by unchecking “I want to receive news” on the Mobile Application.
- Member customers have the right to choose to stop receiving notifications on the Mobile Application by customizing permissions in the access device according to iOS or Android rules.
b. Right to restrict and object to data processing: In case AEON Vietnam collects and uses Personal Information for other purposes than stated in this Privacy Policy without the consent of member customers That member customer has the right to request AEON Vietnam to limit or stop using such Personal Information until AEON Vietnam has a legitimate reason to continue using it, except as required by the Customer. competent state agency.
c. Right to data deletion:
- Member customers can, at any time, request data deletion by canceling their acceptance of the Terms and Conditions and withdrawing their membership directly through the Mobile Application, in writing, call center, email or other interactive channels of the Program.
- After receiving a request to withdraw membership, AEON Vietnam will authenticate, check and take necessary measures to withdraw membership according to that member’s request, or refuse the withdrawal request. membership if you notice signs of violations, fraud or taking advantage of the Program for personal purposes.
- When withdrawing membership, all Rewards Points and Electronic Rewards Coupons owned by this Member Customer will be invalidated.
- From the moment of receiving a valid data deletion request from member customers, AEON Vietnam will stop recording Transaction Information, and delete Personal Information in accordance with the provisions of law and/or or regulations and decisions from time to time by AEON Vietnam.
d. Right to complain, denounce and sue: Member customers have the right to complain, denounce or sue according to the provisions of law.
e. Right to request compensation for damages: Member customers have the right to request compensation for damages according to the provisions of law when there is a violation of
regulations on protecting their Member Information, unless the parties have agreed other agreements or other provisions of law.
f. Right to self-protection: Member customers have the right to self-protect according to relevant laws or request competent agencies and organizations to implement methods to protect civil rights according to the provisions of law. relate to.
Article 4. Commitment of protection of Member Information
1. Member Information on AEON Vietnam mobile application and/or KIDS CLUB mobile application is committed to be processed with confidentiality by the Company in accordance with the Company’s Personal Data Protection policy. The collection and use of Member Information is only made with the consent of that Member Customer, except for the cases specified in Article 1 of the Policy or other cases prescribed by law.
2. If the information server is attacked by a hacker leading to the loss of Member Information data, the Company will be responsible for notifying the incident to the competent authorities for timely investigating and handling, as well as notifying related members.
3. All online transaction information of Member Customers, including information on digital invoices and documents, is protected at the Company’s 1st-level secure central data server.
4. All Member Information and information exchanged between Member Customers and the Company is stored and kept confidential by the Company’s systems.
5. The Company has appropriate technical and security measures to prevent unauthorized access and use of Member Information. The Company also regularly cooperates with security experts to update the latest information on network security to ensure the confidentiality of Member Information when Member Customers access, register an account and/or use the features of the AEON Vietnam mobile application and/or KIDS CLUB mobile application. When collecting data, the Company keeps and secures Member Information at the server system and this Member Information is secured by measures such as firewalls, access control, and data encryption.
6. The Company does not allow third parties to track or collect Member Information on the AEON Vietnam mobile application and/or KIDS CLUB mobile application well as on the Company’s websites, except for the cases with the consent of the Member Customer.
7. The Company commits that it will not by default force any Member Customer to use additional services when installing and using its application.
Article 5. Contacts of the organization collecting and managing Member Information
AEON VIETNAM Co., Ltd.
Address: No. 30 Tan Thang Street, Son Ky Ward, Tan Phu District, Ho Chi Minh City
Tel: (028) 6288 7711
Article 6. Dispute and claims resolution
Enquiries and concerns about the right to access, modify/correct Personal Information or feedback about the Policy, can be sent to the Company via the following address, on call center and/or e-mail:
Hotline: 1800-888-886 (08:00 am – 22:00 pm every weekday),
E-mail: contact@aeon.com.vn
Article 7. Other regulations
AEON Vietnam reserves the right, from time to time, to amend the content of this Policy at any time and such amendments will take effect immediately at the time of posting and recorded and shown in the the content of the policy on the Website/Application or other official contact/information channels of AEON Vietnam.
If any change, modification, addition or deletion of any part of this Policy adversely affects the rights and obligations of Member Customers specified in Article 3, Member Customers have the right to request cancellation. cancel your member account, withdraw from participating in the Membership Program and/or delete previously provided information, except in cases where AEON Vietnam must store it to fulfill its obligations under the provisions of Law.
AEON Vietnam reserves the right, from time to time, to amend the content of this Policy at any time and such amendments will take effect immediately at the time of posting and recorded and shown in the the content of the policy on the Website/Application or other official contact/information channels of AEON Vietnam.
If any change, modification, addition or deletion of any part of this Policy adversely affects the rights and obligations of Member Customers specified in Article 3, Member Customers have the right to request cancellation. cancel your member account, withdraw from participating in the Membership Program and/or delete previously provided information, except in cases where AEON Vietnam must store it to fulfill its obligations under the provisions of Law.
Here in above is the PRIVACY PROTECTION AND INFORMATION DISTRIBUTION POLICY OF AEON VIETNAM MEMBER AND KIDS CLUB, issued and updated by AEON Vietnam Co., Ltd.
This policy take effect from June 24th, 2024.