CMC Saigon Joint Stock Company (CEMACOSG) is committed to protecting the personal data of customers and business partners in accordance with Vietnam's Decree 13/2023/ND-CP on Personal Data Protection and equivalent GDPR principles. This policy applies to all data collected through the website cemacosg.vn.
1. Information We Collect
We collect information you actively provide when submitting a Request for Quotation (RFQ) form or downloading technical documents (datasheets, MSDS), including: full name, phone number, email address, company name, industry, products of interest, and specific requirements. We also collect technical data automatically, including IP address, browser type, device type, and navigation behaviour through Google Analytics 4. We do NOT collect national ID numbers, ID card images, credit card information, or sensitive data as defined under Article 9 of Decree 13/2023/ND-CP.
2. How We Use Your Information
Information from the RFQ form is used to: (1) respond to your quotation request within 24 business hours; (2) forward notifications to the responsible sales advisor via internal Telegram and email; (3) track the quotation and contract process. Information from document download forms is used to deliver the requested file and notify you when updated versions are available. If you have opted in to receive marketing communications, we may send periodic product updates and promotions. You may unsubscribe at any time.
3. Legal Basis for Processing
We process personal data on three legal bases: (1) Consent · by submitting an RFQ or document download form, you consent to being contacted in response; (2) Contract performance · once a commercial relationship exists, processing is necessary to fulfil orders; (3) Legitimate interest · we have a legitimate interest in analysing website usage patterns to improve user experience, provided this does not override your fundamental rights.
4. Third Parties and Data Sharing
Your data may be transferred to the following third parties to the extent necessary: (1) Telegram (Telegram Messenger Inc.) · used to notify internal sales staff of new RFQ submissions; customer data is not shared beyond this internal group; (2) Email service provider · to send confirmation emails and requested documents; (3) Google LLC (Google Analytics 4) · to measure website traffic. We do NOT sell, rent, or share customer lists with third parties for commercial purposes.
5. Data Retention
RFQ form data is retained for a maximum of 3 years from the last point of contact or from contract completion. Analytics data is retained for 14 months per Google Analytics 4 default configuration. Marketing email data is deleted immediately upon unsubscription. After the retention period, data is permanently deleted or anonymised. Note: we do NOT collect ID card images or identity documents in any form.
6. Your Rights
Under Decree 13/2023/ND-CP, you have the following rights regarding your personal data: the right to be informed (notified of data processing), the right of access (to view data we hold), the right of rectification (to request correction of inaccurate information), the right of erasure (to request deletion when data is no longer necessary), and the right to withdraw consent at any time. To exercise any right, please email info@cemacosg.vn with the subject line 'Personal Data Request'. We will respond within 7 business days.
7. Data Security
The cemacosg.vn website operates over HTTPS with SSL/TLS certificates. Internal account passwords are encrypted using one-way bcrypt hashing · CEMACOSG staff cannot read your password. API authentication uses short-lived JSON Web Tokens (JWT). We do not store credit card or bank account information on our systems. Database access is controlled on a minimum-privilege basis · only staff with a genuine operational need are granted access.
8. Cookies and Analytics
The website uses three categories of cookies: (1) Essential cookies · required for login sessions, authentication tokens, and form security (CSRF protection); cannot be disabled; (2) Analytics cookies · Google Analytics 4, measuring traffic and navigation behaviour; can be declined via the cookie consent banner; (3) Marketing cookies · used where deployed to measure paid advertising effectiveness; can be declined via the banner. You may also manage cookies through your browser settings at any time. Declining analytics and marketing cookies does not affect website functionality.
Personal data contact: info@cemacosg.vn