Privacy Policy

Thank you for visiting the website matinkim.vn operated by General Fashion Trading One Member Company Limited (GTF) - owned by Central Retail Vietnam group. We respect and are committed to protecting your private information. Please read the Privacy Policy below to understand our commitments to respect and protect the rights of visitors.

 

OVERVIEW

Your Personal Data is important to us, and we want to ensure you know how we will Process and protect this information.

As a Data Controller and/or Personal Data Controller and Processor (as defined in Decree No. 13/2023/ND-CP issued on April 17, 2023, effective from July 1, 2023 – hereinafter referred to as “Decree 13”), this Data Protection Policy ("Policy") will outline how we Process the Data you provide to us or that is collected by us.

Within the scope of this Policy, the following terms shall have the meanings specified below:

“Central Retail Vietnam Group” or “we” refers to all companies established in Vietnam to invest, operate, manage, exploit, and run supermarkets and/or shopping centers and/or retail stores under the brands “GO!”/“Big C”, “SuperSports”, “Tops Market”, “Come Home”, “Robins”, “Lan Chi”, "Crocs", "Matin Kim", and our other brands at any given time.

“You” means any individual or organization that interacts with us in certain contexts for Data Processing purposes, such as: customers, suppliers, business partners, contractors, agents, candidates, employees, etc.

“Data Processing” means one or more activities affecting Personal Data, such as: collection, recording, analysis, confirmation, storage, modification, disclosure, combination, access, retrieval, recall, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction of Personal Data or other related actions.

“Personal Data” is information in the form of symbols, letters, numbers, images, sounds or similar forms in an electronic environment associated with a specific individual or helping to identify a specific individual. Personal Data includes basic personal data and sensitive personal data.

Our website, applications, or other platforms may link to third-party websites/applications/platforms not owned or controlled by us. We are not responsible for how these websites, applications, and/or platforms operate or Process your Data, therefore, we recommend that you carefully read the privacy policies for Personal Data and related privacy terms of these third parties.

1. PERSONAL DATA WE COLLECT

We collect Personal Data from various sources, which may include:

• Personal Data you provide to us

We collect data about how you use our services and products, such as the types of products/services you view or are interested in, or how frequently you use the services. We also collect Personal Data you provide to us when you sign up for marketing newsletters, complete a survey, or register an account to purchase our products/services. In doing so, we may ask for Personal Data, such as your name, gender, date of birth, address, email address, phone number, or credit card details. Please note that credit card information is sensitive personal data as stipulated in Decree 13.

• Personal Data we collect automatically

We also receive and store certain types of Personal Data each time you interact with us online. For example, we use cookies and other technologies to collect Personal Data when your web browser accesses our websites or advertisements and other content provided by or on our behalf on other websites. Your Personal Data is also collected when you search, purchase, post, participate in an event program or respond to a survey, or interact with our customer service department. Examples of the types of Personal Data we collect include: IP address, device identifier, location data, computer and connection information such as browser type and version, time zone setting, browser plug-in type and version, operating system, and purchase history – which at times we aggregate with similar information from other consumers. Please note that location data is sensitive personal data as stipulated in Decree 13.

We collect Personal Data from other sources, including through trusted partnerships with third parties and when we operate our branded accounts on third-party platforms. For example, when you use the “like” function on Facebook or the +1 function on Google+. Additionally, we receive information about you and other visitors' interactions with our advertisements to measure the effectiveness of our advertising campaigns. We also collect information about you and your activities from a third party when we co-provide products/services.

The types of Personal Data we collect, depending on the contexts mentioned above, may include but are not limited to the following information:

1.1 Identification Information

Such as: image, full name, date of birth, passport number, identity card number, citizen identification number, personal identification number, driver's license number, vehicle plate number, personal tax code, social insurance number, health insurance card number, image, voice, fingerprints, signature, nationality, and other basic data as specified in Decree 13. Please note that fingerprints are sensitive personal data as specified in Decree 13.

1.2 Contact Information

Such as: billing address, shipping address, email address, phone number, work address, permanent address, temporary residence address, etc.

1.3 Family Relationship Information

Such as: marital status, family relationships (parents, spouse, children), employment relationships, etc.

1.4 Membership Information

Such as: membership card number, member's personal information, reward points, date and month of joining/registration, etc.

1.5 Financial Information

Such as: bank account number/debit card/credit card, account holder's name, type of payment card or account used, etc. Please note that this information is sensitive personal data as specified in Decree 13.

1.6 Transaction Information

Such as: details of payments from you (payment time, payment amount, refund details, refund amount) and purchase location, order number, service appointment date, warranty details, transaction status and/or any information arising from the use of products/services provided by us, etc.

1.7 Information from Computer/Mobile Device

Such as any information about the computer system or other technological devices you use to access one of our websites or applications or other platforms, such as the IP address used to connect your computer or device to the Internet, operating system, web browser type and version. If you access our website or application using a mobile device such as a smartphone, collected information, if permitted, will also include your device's unique ID, advertising ID, and similar mobile device data.

1.8 Behavioral Information

Such as:

Information about your purchasing behavior: We collect information about the products/services you have purchased from us. This information helps us understand your preferences and provide you with more relevant product/service recommendations.

Information about your online search behavior: We collect information about the keywords you have searched for on search engines, as well as the websites you have visited. This information helps us understand your preferences and provide you with more relevant advertisements.

Information about how you interact with our products/services: We collect information about how you use them, such as the websites you have visited, the products/services you have viewed, and the actions you have taken. This information helps us understand how to improve our products/services.

1.9 Profile Information

Such as your username and password, profile details, and purchase history of our products/services (including product/service price, purchase time, and quantity).

1.10 Marketing and Communication Information

Such as feedback on your interest in receiving surveys about promotions and communication events from us, etc.;

1.11 Other Sensitive Personal Data

Such as health status and private life recorded in medical records (excluding blood type), information on racial or ethnic origin, religious views, biometric data, genetic data, criminal information, criminal acts, customer data of credit institutions, payment intermediaries, data on the individual's location identified through positioning services, etc., and/or other sensitive information as required by law.

2. PROVISION OF THIRD-PARTY PERSONAL DATA BY YOU

When you provide us with Personal Data of (an) individual(s) other than yourself, you represent and warrant to us and hereby confirm that:

• Before disclosing such Personal Data to us, you have obtained the valid consent of the individuals whose Personal Data is being disclosed to us, to Process Data in accordance with this Policy; and
• Any Personal Data of the individuals you disclose is accurate and complete; and
• You validly act on behalf of those individuals and you have their valid authorization to provide their Personal Data to us and for us to collect, use, disclose and process this Personal Data for the Purposes specified in this Policy; and
• This Policy has been communicated to these individuals for their full knowledge and consent.

If you do not meet any of the aforementioned representations and warranties, please do not provide us with that individual's Personal Data.

3. PURPOSES OF DATA PROCESSING

Within the scope of your permission and/or to the extent required or permitted by law, we may use your Personal Data for one or more of the following purposes simultaneously (“Purposes”):

3.1 Provision of products and services

We may Process your Data for the purpose of operating and providing products/services to you, which may include but is not limited to: entering into contracts and managing our contractual relationship with you; supporting and carrying out other activities related to the products/services you request; performing services and financial transactions related to payments, including transaction review, verification, and cancellation; processing orders, deliveries, collections - refunds, and exchanges; providing updates and information about product delivery, and performing internal warehouse activities, including picking, packing, and labeling packages; verifying warranty periods; providing after-sales services, including maintenance, servicing, transportation, etc.

3.2 Collaboration with third parties

We may Process your Data for or in connection with purposes where third parties (including our agents, suppliers, contractors, partners, and any other individual/organization with a collaborative relationship or providing services to us or you) perform functions on our behalf to engage in, execute, or process your transactions. This may include allowing such third parties to introduce or provide products/services to you, authenticate you or connect to your account, or conduct other activities including marketing, research, analysis, and product development, customer service, etc.

3.3 Marketing and Communications

With your consent, we may Process your Data for the purpose of sending you offers, product/service updates, new product/service launch announcements, sales programs, promotions, advertisements, notices, news, and any marketing and communication activities about our products/services. The detailed information of the aforementioned programs, including content, methods, forms, and frequency of introducing products/goods/services, will be specifically announced in each program.  

We may market and communicate with you through various means, as appropriate, including on our website/applications and/or chat applications (e.g., SMS, Whatsapp, Telegram, LINE, Viber, WeChat, Zalo, etc.), calls, email.

3.4 Registration and Authentication

We may Process your Data for the purpose of registering, verifying, or authenticating your identity when we provide products/services to you and/or for other purposes as required by law and this Policy.

3.5 Relationship Management

We may Process your Data for the purpose of contacting, communicating, managing human resources, managing customer files, processing information inquiries, requests, feedback, and complaints at your request related to the products/services we provide to you.

3.6 Data Analysis

We may Process your Data for the purpose of recommending products/services you might be interested in, identifying your preferences, and personalizing your experience; to learn more about you, the products and services you receive, and other products/services you might want to receive; to measure your engagement, perform data analysis, data profiling, market research, surveys, behavioral assessment, statistics and segmentation, consumption trends and patterns, etc.

3.7 Improvement of products/services

We may Process your Data for the purpose of troubleshooting and diagnosing issues, errors, malfunctions, and defects in products/services, as well as providing customer care and support services; to evaluate, improve, and develop products/services based on your satisfaction level and consumption behavior; to measure the effectiveness of marketing and communication campaigns, as well as business models.

3.8 To support functions on online pages (website), mobile applications, and social media platforms.

We may Process your Data for the purpose of managing, operating, monitoring, supervising, and administering websites and online platforms, ensuring that the website operates properly, efficiently, and securely; to facilitate your experience on our websites and online platforms.

3.9 IT Management

We may Process your Data for the purpose of managing operations, improving, and developing information technology systems, which may include ensuring information security and data protection, ensuring the availability, integrity, and security of the system, and ensuring system performance meets user needs.

3.10 Protection of Public Interests

We may Process your Data for the purpose of protecting the security, integrity, and safety of data and our business operations; to exercise our rights or protect our legitimate interests when necessary. For example, to resolve complaints, claims, detect, prevent, and legal violations; to ensure compliance with our terms and conditions under the Contract and/or any document with any third party;

3.11 Risk Management, Fraud Detection

We may Process your Data for the purpose of verifying your identity and conducting compliance checks of employees and parties related to us in accordance with our internal regulations and/or legal provisions, for example: to comply with anti-money laundering and anti-corruption regulations, detect and prevent fraud, detect and prevent violations of internal rules and regulations, etc.

3.12 Security

At retail stores, supermarkets, shopping centers, transaction offices, offices, warehouses, parking lots, workplaces, and other locations where we conduct all or part of our business activities (hereinafter referred to as “Operating Locations”), we may use CCTV surveillance systems. Our CCTV surveillance systems may be placed at several locations within the Operating Locations to record audio and video in real-time for the purpose of contributing to maintaining order, safety, and protecting your legitimate rights and interests, and ours, at the Operating Locations; and simultaneously serving to prevent, detect, and investigate violations at the Operating Locations when we deem there are signs of violation or when required by competent state authorities.

By continuing to use our products/services or operate at our Operating Locations, you agree and permit us to collect data through the CCTV system and Process Data for the purposes mentioned above.

3.13 Labor Relationship Management

We may Process your Data for the purpose of exercising the rights and obligations of Employers and Employees as stipulated by current laws; to manage labor relations including but not limited to: evaluating and processing application documents, verifying candidates, managing employee records, declaring labor usage status in the area (salary surveys, bonuses, etc.), participating in insurance programs (social insurance, health insurance, etc.), periodic health checks, etc.

3.14 Compliance with legal regulations

We may Process your Data for the purpose of complying with legal regulations and requests from competent state agencies in Vietnam as well as in foreign countries where we legally operate our business.

4. SHARING PERSONAL DATA

We may disclose or transfer your Personal Data to the following third parties in accordance with the Purposes in this Policy. The third parties mentioned below may be located in Vietnam or outside the territory of Vietnam.

4.1 Companies within the same system

We are part of the Central Group's data ecosystem, which includes various companies. Companies within the ecosystem share certain relevant information and Personal Data to achieve one or more of the Purposes mentioned in this Policy, as well as to serve the operation and management of the entire system in accordance with the general direction. This means that we may need to disclose, share, or transfer your Personal Data to other companies within the ecosystem for the stated Purposes.

We will only disclose or transfer your Personal Data to companies within the ecosystem that we have reason to believe will protect your privacy and the security of your Personal Data. We will also implement security measures to prevent your Personal Data from being used for improper Purposes.

4.2 Service providers

We may share your Personal Data with partners and service providers including but not limited to: technical infrastructure, internet, software, website, and IT service providers; warehousing and logistics service providers; payment service providers; media and event organization providers; telecommunication service providers; insurance service providers, financial service providers; transportation service providers, and other goods/services providers, etc.

4.3 Business partners

We may share your Personal Data with our business partners in business fields including but not limited to: retail, real estate, finance - banking, investment, insurance, telecommunications, marketing, e-commerce, logistics, information technology, etc.

4.4 Websites, social media platforms

We may choose to offer you a login feature on our websites and platforms without needing to enter information into a form. When you use the login system on social media platforms, you agree to allow us to access and store public data on your social media accounts (e.g., Facebook, Google, Instagram social media platforms, etc.) and other data that you have allowed during the use of that social media login system. In addition, we may link your email address to social networks to verify if you are a user of the relevant social network and to display relevant, personalized advertisements on your social media account when necessary.

4.5 Third parties at the request of competent state agencies and/or according to legal regulations

We are committed to protecting your Personal Data and will only disclose or share it when required by competent state agencies and/or according to legal regulations. In such cases, we will cooperate with competent state agencies or other third parties to comply with the law, protect our interests and yours, and prevent fraud, security, or information security issues.

 4.6 Advisors

The advisory team may include: lawyers, engineers, auditors, investment consultants, valuation units, and/or any professional advisors that we deem necessary to support the operation of our business.

4.7 Transferees of rights and/or obligations

We may transfer your Personal Data to relevant third parties in the event that we undertake or participate in any form of restructuring, merger, acquisition, joint venture, assignment, transfer, or divestiture of all or part of our capital, shares, assets, or business operations.

5. CROSS-BORDER DATA TRANSFER

Your Personal Data may be transferred by us from Vietnam ("Home Country") to another location, city, or country outside the territory of Vietnam ("Alternative Country"). When we transfer your Personal Data from the Home Country to an Alternative Country, we will comply with legal obligations and regulations related to your Personal Data, including having a legal basis for transferring Personal Data and applying appropriate safeguards to ensure an adequate level of Personal Data protection.

The legal basis for us to transfer Personal Data as stipulated in this clause will be your consent to the Policy and protective measures as stipulated by law.

6. DATA RETENTION AND PROCESSING PERIOD

We will only store and process your Personal Data for the period we need that information to serve the Purposes of this Policy for you or to comply with our legal obligations. Your Personal Data begins to be processed from the moment we access your Personal Data.

We will cease storing your Personal Data by securely deleting it in accordance with legal regulations and this Policy as soon as (i) there is reasonable belief that such storage no longer serves the Purposes for which the Personal Data was collected and is no longer necessary for any legal or business Purpose and/or (ii) the data retention period expires according to legal regulations and/or (iii) there is a request from you to delete Personal Data, object to, restrict Data Processing, or withdraw consent for your Data Processing.

Notwithstanding the above, we may retain certain of your Personal Data to exercise our rights or comply with this Policy or legal regulations.

7. YOUR RIGHTS AND OBLIGATIONS

7.1 Right to be informed

You have the right to be clearly, transparently, and fully informed about how we Process your Data, including information about your rights and obligations regarding Personal Data when we Process Data, unless otherwise provided by law.

7.2 Right to consent and withdraw consent

You have the right to consent to allow us to Process your Data in accordance with this Policy (specifically, we rely on consent as the legal basis for Data Processing).

You have the right to withdraw your consent, unless otherwise provided by law, at any time by notifying us of this (although if you withdraw your consent, it does not mean that the Data Processing of your Personal Data with your consent up to that point was unlawful).

7.3 Right to access and rectify

You have the right to access, view, edit, or request us to edit any Personal Data about you that we are processing, unless otherwise provided by law.

We are not responsible for problems arising if the Personal Data you provide is (i) fake/inaccurate (partially or entirely) or (ii) misleading or (iii) incomplete/not exhaustive/irrelevant or (iv) you do not update us on any changes to your Personal Data such as the information you have provided to us and/or other cases as stipulated by law.

7.4 Right to erasure

You have the right to request us to erase part or all of your Personal Data, unless otherwise provided by law. Please note that this is not an absolute right in all cases, as we may have legal grounds to retain your personal information for the Purpose of complying with legal regulations and/or requests from competent state agencies.

7.5 Right to restrict Data Processing

You have the right to request a restriction on our Data Processing of your Personal Data, unless otherwise provided by law. This right means that the scope of our Data Processing of your Personal Data will be limited, so we may store the information but cannot continue to use or process it.

7.6 Right to data portability

You may request us to provide a copy of your Personal Data that we hold.

7.7 Right to object to Data Processing

You have the right to object to your Data Processing to prevent or restrict the disclosure of Personal Data or its use for advertising or marketing purposes, unless otherwise provided by law.

7.8 Right to lodge a complaint, denunciation, and lawsuit

You have the right to contact the competent data protection authority to file a complaint, denunciation, and lawsuit in accordance with the law.

7.9 Right to claim damages

You have the right to claim damages in accordance with the law when there are grounds to believe that we have violated your Personal Data protection regulations, unless otherwise agreed by the parties or provided by law.

7.10 Right to self-protection

You have the right to self-protection in accordance with the Civil Code and current laws, or to request competent agencies and organizations to implement civil right protection methods as stipulated by the Civil Code.

We always strive to handle your requests quickly, fairly, and transparently. However, we reserve the right to refuse requests that are unfounded, redundant, or violate our legitimate rights and interests or those of any third party, or fall outside our authority/scope of data processing. We will inform you of the reason for refusal and how to remedy it if possible.

You can exercise these rights by sending an e-mail to us at the "Contact Us" section and attaching relevant documents (when we request and/or legal regulations permit). If the request is made by someone other than you but they cannot provide evidence that the request is made on your behalf legally and with your valid consent, the request will be denied.

For your privacy and information security, we may require you to verify your identity before fulfilling your requests to exercise the rights stated in Article 7 of this Policy.

7.11 Your obligations

• Provide complete and accurate Personal Data when you consent to us Processing Data;
• Respect and protect the Personal Data of others;
• Comply with other legal requirements and obligations for data subjects according to legal regulations.

7.12 Note on potential unforeseen consequences and damages

If you exercise one or more of your rights as stipulated in Articles 7.2, 7.4, 7.5, 7.7 of this Policy, then we (i) may not be able to perform the necessary actions to achieve the processing Purposes described in this Policy for you; and/or (ii) may not be able to execute or enter into a contract that we have or are trying to enter into with you; and/or (iii) may not be able to provide you with our products/services.

Your exercise of your rights and the unforeseen consequences as stated in section 7.12 will be considered a termination by you of any relationship you have with us, and/or a breach of obligations and contractual commitments. For clarity, we expressly reserve our legal rights and remedies in such cases and will not be liable to you for any losses, damages, claims, or lawsuits arising from your exercise of your rights as stated above.

8. DATA PROTECTION

We have been and are implementing various technical and organizational measures to protect and secure your Personal Data, such as:

Implementing policies and rules on information security along with technical measures to protect Personal Data and comply with legal requirements;

Conducting network security checks on the system and equipment used for Personal Data processing before processing, irreversibly deleting, or destroying devices containing Personal Data;

We provide training and require employees who access customers' personal data to comply with our standards for data security and privacy;

We also require our service providers, or other third parties with whom we cooperate and to whom we disclose customers' personal data, to implement similar standards and measures for data security, privacy, and data security when they Process your Data.

9. CHILDREN'S PRIVACY

A child is an individual under 16 years old according to current Vietnamese law, and the definition of this age may change depending on legal regulations at different times.

We have been and will always apply additional, appropriate protection measures to help ensure the safety of children's Personal Data based on the principle of protecting their rights and in their best interests.

Before Processing a child's Data, we need the child's consent if the child is 7 years old or older, and the consent of the parents or legal guardians as stipulated by law.

We will take necessary measures, as required by law, to verify age before Processing a child's Data. You need to understand that if you provide us with Personal Data about a child, you must prove that you are the parent or legal guardian of the child or have the consent and authorization of the child's parent or legal guardian before providing it.

We will cease Data Processing and may delete or destroy children's Personal Data in necessary cases to protect the legitimate rights and interests of children in accordance with legal regulations as well as our business criteria, such as (i) when the child or the child's parent or guardian withdraws consent for the child's Data Processing or (ii) at the request of a competent authority. 

In the event that a child's Personal Data is disclosed to us by you in violation of the above regulations that we could not know and/or verify at the time you provided it, you hereby agree to the Processing of the child's Data and accept, agree to be bound by this Policy and are solely responsible for all issues arising related to the child's Personal Data. We will not be responsible for any unauthorized use of products/services (provided by us) by you and related individuals in violation of the regulations in this Policy. 

10. COOKIES

A cookie is a text file placed on your hard disk by a web server. Cookies are not used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to your computer and can only be read by a web server in the domain that issued the cookie to you.

We use "cookies" to help personalize and maximize the efficiency of your online time when accessing our website/app without needing to re-register existing information.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline all cookies if you prefer. However, if you choose to decline cookies, this may hinder and negatively affect some services and features that rely on cookies on the website/app.

11. DATA PROTECTION POLICY UPDATES

We may review, amend, or automatically update this Policy on our applications/websites/other platforms at our sole discretion from time to time, to ensure that the updates are consistent with our business operations and comply with changes in legal regulations. If such changes are material, we will provide a more prominent notice (by a general announcement published on applications/websites/other platforms or to the email address you provided). 

You agree that you are responsible for reviewing this Policy regularly for the latest information on how we Process your Data, and therefore, your continued use of applications/websites/other platforms or use of products/services provided by us after any modifications to this Policy will constitute your consent to this Policy and all amendments (if any) and your Data Processing in accordance with this Policy and all amendments (if any).

12. CONTACT US

If you have any questions, complaints, or feedback about how we Process your Data or if you wish to exercise any of the rights mentioned in this Policy, please contact us using the contact information below:

Central Retail Vietnam Group - Personal Data Protection Department

• Mailing address: 163 Phan Dang Luu, Ward 01, Phu Nhuan District, Ho Chi Minh City, Vietnam.
• Email address: CRV.dpo@vn.centralretail.com

 

✽✽✽

CONSENT

Please read this policy carefully. By checking the statement "I AGREE TO THE DATA PROTECTION POLICY", or similar statements displayed on the Crocs.com.vn website, or by signing to confirm on forms provided by us in specific cases, you confirm that you have read, understood the entire content of the Policy and agree to allow us to Process your Data in accordance with the provisions of this Policy.

If you do not agree with any content in the Policy, please do not continue to access other applications/websites/platforms or provide/send Personal Data to Us. You have the right to send your feedback, complaints, and questions in the "CONTACT US" section for clarification.