VNEXT HOLDINGS Privacy Notice

Last updated: May 29, 2026

Introduction

VNEXT HOLDINGS Ltd, a legal entity registered under the laws of Socialist Republic of Vietnam, registered address at Floors 17, 18, 19, Tower C, Central Point Building, 219 Trung Kinh, Yen Hoa Ward, Hanoi, Vietnam, and/or any of its affiliated and subsidiary companies, referred to as “VNEXT HOLDINGS”, “we”, “us”, “our”, respect and realize importance of protecting your privacy, and VNEXT HOLDINGS is committed to protecting your privacy rights to the fullest possible extent.

Protecting your data and using it only in ways you expect is our highest priority. This Privacy Notice is designed to inform you about the processing of your personal data and your rights regarding this processing in accordance with applicable data protection laws.

We are the controller of your personal data, which means we are the organization legally responsible for deciding how and for what purposes your personal data is used, and therefore for the data processing described herein.

By using this website, you acknowledge that you have been informed about the processing of your personal data as described in this Privacy Notice. This statement also applies in other cases where we make specific reference to it, including: a) when we receive your personal data from third parties and are obliged to inform you about our use of it; b) when we first communicate with you via email or other means; c) when we process your personal data at our events or the events of our partners, and make specific reference to this Privacy Notice.

How we process your personal data

Personal data we collect

We may collect information that you voluntarily provide to us, our partners, affiliates, or other third parties via email or other direct contact. We may also collect information from your use of our website and information obtained from publicly available sources. This data is used for marketing and recruitment purposes, to fulfill contractual obligations, and for other purposes related to those mentioned above.

If you are a contact person at a company that is our existing or potential client, we collect and process the following personal data, either obtained directly from you or from public sources (such as LinkedIn): your name, phone number, email address, location, LinkedIn profile information, your role/position, history of previous employment, and records of our communications with you. Such data is collected and processed to support proactive client acquisition initiatives and to cultivate and maintain strong, collaborative relationships with our clients. This includes, but is not limited to, facilitating communication on projects, organizing business trips and visits, and addressing any matters relevant to the successful cooperation between us and our clients. This processing is necessary for VNEXT HOLDINGS’s business operations, development, and growth, and ensures the efficiency and effectiveness of our client engagement processes. In this context, we rely on our legitimate interests when communicating with potential clients to engage them or secure new projects from existing clients, and on the legal basis of contract conclusion and execution for data used in communications during the contract conclusion and performance.

If you are a candidate for one of the positions open at VNEXT HOLDINGS, we collect and process the following personal data, either obtained directly from you or from public sources (such as LinkedIn): your full name, phone number, email address, location, information on your CV including education and professional experience, LinkedIn profile information, records of our communications with you, and video or audio recordings of your interview, if applicable. We may process interview transcripts, responses to technical questions, and evaluation results (e.g., correctness scoring, assessments) for analysis by our AI systems. We may collect a candidate image during an interview for human analysis and temporary storage to verify your identity and prevent fraud against us or our clients, in accordance with VNEXT HOLDINGS’s internal policies. Such data is collected and processed for recruitment purposes to attract, assess, and onboard potential team members. This processing allows us to match candidates with suitable roles and ensures a fair and efficient hiring process. It is guided by our legitimate business interest in hiring the best talent or your consent, including when you contact us directly through our website or at our events. We are committed to ensuring that all recruitment-related data processing respects the principles of fairness, transparency, accuracy, and confidentiality, always providing candidates with clarity and control over their data.

For shortlisted or pre-approved candidates, we may collect and process personal data from you for background checks and to confirm your legal eligibility to work in a specific country, in accordance with applicable legal and business requirements. This may include: your citizenship; international passport data; information on temporary protection, residence permits/cards, work permits, visa status, asylum, or other legal stay documents relevant to the contracting country; and your tax number, to the extent applicable. We may also collect and process your travel history, including departure, entry, and transit data, in connection with your country of residence, where applicable.

Please note that we DO NOT collect personal data that is, by its nature, particularly sensitive. This includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; or data concerning a natural person’s sex life or sexual orientation.

Purpose of collecting your personal data

We use your personal data for several purposes, including:

to communicate with you, including responding to your inquiries or requests;
to contact you to inform you about products and services that we or our partners offer, to request the products and services you or your company provide, at to inform you about open vacancies that may be of interest to you;
to improve the user experience of our website;
to improve our website and its functionality;
to enhance customer service;
to administer and manage contractual relationships;
to comply with our legal obligations, to perform tasks carried out in the public interest, or to protect the vital interests of our users and other individuals.

Your personal data may be stored in our secure internal CRM system or other secure internal databases.

Marketing communications

VNEXT HOLDINGS (or its affiliated or subsidiary companies or other selected third parties acting on our behalf) would like to contact you from time to time in order to provide you with information about our services, job opportunities, and exclusive offers, promotions, or new features that VNEXT HOLDINGS assesses to be of interest to you. You have the right to ask VNEXT HOLDINGS not to process your personal data for certain or all marketing purposes, but if you do so, VNEXT HOLDINGS will need to share your contact information with third parties for the limited purpose of ensuring that you do not receive marketing communications from them on VNEXT HOLDINGS’s behalf.

Any marketing email sent to you will include information on how to opt out of receiving such notifications in the future. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails VNEXT sends you or by using the relevant opt-out mechanism for non-email based marketing.

Controller’s use of AI

We may use AI-based service solutions to improve our processes and optimize time and cost efficiency, e.g., platforms for interview transcript summarization or job description analysis and creation, using large language models (LLMs) or learning management system (LMS) platforms with AI integration.

In addition, we may use AI-based tools to support the technical pre-screening of candidates. These tools may analyze interview transcripts and candidate responses to technical questions and provide structured evaluations and recommendations to assist recruiters in assessing whether a candidate should proceed to the next stage of the recruitment process.

Such AI systems are used only as decision-support tools. All hiring decisions are made by human recruiters, and AI outputs are not used as the sole basis for any decision affecting candidates.

We implement appropriate safeguards, including:

human oversight in all decision-making;
use of predefined evaluation criteria;
logging and traceability of AI outputs;
measures aimed at ensuring accuracy, consistency, and fairness, as well as reducing the risk of bias and ensuring fair and consistent evaluation.

We do NOT use AI for the following purposes:

fully automated decision-making without human involvement that produces legal or similarly significant effects;
replacing human judgment in the hiring process;
processing special categories of personal data (e.g., data relating to health, race, religion) for candidate evaluation.

If you have questions or concerns about our use of AI, you may contact us at info@vnext.vn. You may request information about how AI is used in the recruitment process and request human review of AI-supported assessments. For information on your full rights, please see our “Your Privacy Rights” section.

Automated decision-making

We may use AI-based systems and tools for the purpose of supporting candidate evaluation based on predefined technical criteria. We do not make decisions based solely on automated processing. Any assessments generated by such tools are taken into account as one of several factors, but do not determine recruitment decisions, which are always subject to human review.

Cookies and similar technologies

If you use an internet browser to interact with our website, you should be aware that like many businesses with websites and cloud services, we also use “cookies” to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. You can control our use of cookies with respect to your device by changing options in the Internet browser you use. We will display notices to you about cookies and prompt you to accept a cookie from us.

There are two main types of cookies: session cookies and persistent cookies. Session cookies are deleted from your computer when you close your browser, while persistent cookies remain on your computer until deleted or until they reach their expiry date.

Remarketing

Cookies may also be used to display remarketing advertisements based on your previous visits to https://www.vnext.vn/ across the internet.

Remarketing advertisements are served through the Google Display Advertising Network. You can opt out of Google’s use of cookies at any time by visiting the Google Ads Preferences Manager page.

Third-party services and cookies

We may collect analytics information or use third-party analytics tools to measure traffic and usage trends, and to better understand user demographics and behaviors, including how users interact with our services.

Third-party analytics tools and retargeting cookies are used to collect information about user activity on our website. This information helps us analyze web browsing behavior, provide ads that match users’ interests, and measure the effectiveness of remarketing and advertising campaigns.

We currently use the following third-party tools: LinkedIn Insight, Facebook Pixel, Google Ads Remarketing code, Google Ads Conversion code, Google Tag Manager, Google Analytics, Global Site Tag, Hotjar, X (Twitter) Pixel Base.

Legal Bases for Processing

We process your personal data on the following lawful bases and for the following purposes:

Your consent	We rely on your consent when we process your personal data to optimize and enhance the operation of our website, develop new features and services (including where such data is collected as part of aggregated data), and provide you with relevant advertising materials, to the extent permitted by your device or browser’s personalization and privacy settings. We also rely on this lawful basis when responding to your inquiries, for example, regarding open vacancies or cooperation opportunities, as well as when you attend our events. You have the right to withdraw your consent to processing of your personal data at any time. Please note that withdrawal of consent does not mean that any processing carried out before the withdrawal is unlawful. Also take into account that if you withdraw your consent, we may be limited in our ability to respond to you and/or provide you with certain services or job opportunities.
Compliance with our legal obligations	We rely on this lawful basis to identify you and verify your identity (where relevant), to help prevent and detect fraud against you or us, to protect the security of systems and data, and for disclosures or other activities necessary to comply with legal and regulatory obligations applicable to our business. Examples include recording and demonstrating evidence of your consents, retaining HR and recruitment data, processing data related to contract execution, and verifying your legal stay and right to work in your country of residence. Applicable laws, depending on the relationship between you and us, may affect the scope of personal data we collect, the ways in which we process your personal data, our ability to maintain the confidentiality of your data and limit its disclosure, the duration of its retention, etc.
For the performance of a contract with you or to take steps at your request before entering a contract	We may rely on this lawful basis to provide certain services to you, to receive certain services from you, or to engage in employment or other contractual relationships with you or the company that you represent.
To perform a task carried out in the public interest	We may rely on this lawful basis to report to the police or other competent enforcement agencies if we discover fraud, violations of applicable law, or suspicious behavior or actions during your interaction with us, as well as in other cases where the disclosure of your personal data is required by law.
For our legitimate interests or those of a third party	We may rely on this lawful basis to: contact you regarding potential cooperation between you and/or the company you represent and us; inform you about our open vacancies; verify your lawful departure, entry, and transit in connection with your country of residence; make non-marketing communications to you about changes to our terms or policies or to provide other important notices; enable or administer our business, including quality control, consolidated reporting, customer service, transfer of ownership, etc.

International data transfer

We may share your personal data with the following recipients: our affiliated and subsidiary companies, professional advisers, third-party service providers, partners, contractors, and employees, for the purposes described in this Privacy Notice or otherwise notified to you.

As a company operating across Vietnam, Japan, South Korea, and other markets in the APAC region, we may transfer your personal data to recipients located outside your country of residence, including outside Vietnam. Some of these countries may have data protection laws that differ from those in your jurisdiction. Where personal data is transferred to a recipient located outside Vietnam, we ensure an adequate level of protection at the destination in line with applicable laws, including Vietnam’s Decree 13/2023/ND-CP and Personal Data Protection Law, Japan’s Act on the Protection of Personal Information (APPI), South Korea’s Personal Information Protection Act (PIPA), and other relevant national regulations.

We engage service providers which help us operate, support, and develop our business and website and which understand how it is used. These services include cloud hosting, content delivery, customer and technical support, recruitment and HR services, background checks, migration services, insurance services, marketing, analytics, event hosting, etc. We share your personal data with these service providers only as necessary to enable them to provide their service to us.

As a global company, we support certain entities within our corporate group. These entities process your personal data as necessary to provide functions such as data storage, security, research and development, analytics, and customer and technical support.

In addition, we may share your information with competent law enforcement bodies, regulatory or government agencies, courts, or other third parties where such disclosure is necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

Information tracking

This website may automatically collect information about you in several ways, including tracking your activities through your IP address, computer settings, most recently visited URL, operating system, date and time, preferences and choices, and saved options, subject to your browser settings. We may use your IP address to help diagnose server issues and to administer the website.

Security of your personal data

We implement appropriate organizational, technical, and security measures to protect your personal information, such as usernames, passwords, transaction data, and other information stored on our website, against unauthorized access, alteration, disclosure, or destruction. Personal data processed for any purpose will not be kept longer than necessary for that purpose, including to comply with legal requirements. If you withdraw your consent, we may retain certain personal information for the period required by applicable law, to resolve disputes and/or enforce our rights and agreements.

Your rights

If there are applicable privacy laws in your jurisdiction, you have the following rights regarding your personal data:

Right to access your information: You have the right to request access to the personal data that we hold about you, including access to duplicates of the personal data retained.
Right to correct your information: If your personal data is inaccurate or incomplete, you can ask us to correct your information.
Right to suspend processing: You have the right to request that we stop processing your personal data in certain circumstances, including when you believe that the information we hold about you is inaccurate or unlawful.
Right to port your data to another party: You have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format, and have your information transferred to another party.
Right to delete: You have the right to request we delete your personal data.
Right to object: When we process your personal data based on legitimate interests, you have the right to object to this processing. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds under applicable law (e.g., your data is necessary for us to establish, exercise, or defend our legal rights).
Right to complain to a supervisory authority: You have the right to lodge a complaint with your applicable supervisory authority.
Right to withdraw consent: You have the right to withdraw consent that you’ve previously provided to us.

Third-party links

As you use our services, if you link to third-party sites not controlled by us and which do not operate under our privacy practices, our privacy practices no longer apply. We encourage you to review each third-party site’s privacy policy before disclosing any personal data.

Data storage

We ensure that your personal data is not retained for longer than necessary for the purposes for which it is processed. To ensure compliance with this principle, we define retention periods applicable to each processing activity. The following factors are considered when determining the retention period:

Legal obligations;
Recommendations of supervisory authorities;
Best practices;
Our operational needs.

Different retention periods may apply to different types of personal data. The retention period for each type of data is determined based on applicable legal requirements in the relevant jurisdictions. At the end of the relevant retention period, we will delete or anonymize your personal data.

Below, we explain how long we retain your data, along with the relevant details:

Purpose	Types of data	Typical Retention Period	Legal Basis
Recruitment	Hiring process data (CVs, background checks, identity data, contact details, professional qualifications).	Up to 2 years from the last interaction, unless local law in Japan or Vietnam mandates a shorter period or explicit consent is given for longer retention.	Legitimate interest or consent.
Interview Records	Recordings and transcriptions of interviews.	Maximum 6 months from the interview date.	Legitimate interest or consent.
Employment	Identity data, financial/tax info, health/sick leave, citizenship/residence permits, and other employment-related data.	Duration of employment plus the statutory retention period (typically 4-10 years depending on Vietnamese or Japanese tax/labor laws).	Legal obligation or performance of contract.
Administration & Security (CCTV)	Video surveillance captured within VNEXT premises.	Generally, our personnel’s data is retained for the duration of their employment within the VNEXT group or for the term of any other contractual relationship with it. Data relating to guests and other visitors is kept for the duration of their stay on VNEXT premises, plus an additional 30 days, unless a longer period is required by local law, information security requirements, or your explicit consent.	Legitimate interest or legal obligation.
Marketing	Outreach data (name, email, preferences, interaction history).	We retain this data for as long as it is needed for marketing purposes, or until you opt out (where processing is based on legitimate interest) or withdraw your consent (where processing is based on consent). You can object to the use of your data for direct marketing at any time, and we will stop such processing without undue delay. As a rule, we do not keep or use your data for marketing for more than 5 years without renewed interaction or valid consent, unless we are required to retain certain information, such as suppression lists, to honor your opt-out request.	Legitimate interest or consent.
Cookies & Analytics	Session and persistent cookies, browsing history, and interaction data.	Session cookies are deleted automatically when you close your browser, while persistent cookies stay on your device for a set period, usually 12 to 24 months, depending on their function and the third party that sets them. You can disable non-essential cookies or withdraw your consent at any time through your browser or cookie settings, after which these cookies will no longer be used and will be deleted where technically possible.	Consent or legitimate interest.
Events Management	Data from seminars, webinars, and social activities (registration, photos, recordings).	Generally kept for up to 7 years after the event, unless a longer period is needed to document participation, preserve media content, or meet legal obligations. Where consent was obtained, such as for publishing media content, the data may be retained until that consent is withdrawn.	Legitimate interest, consent, or legal obligation.
Handling Requests	Data used for addressing inquiries and data subject rights requests.	Kept for up to 10 years after your request is resolved, unless a longer period is needed to establish, exercise, or defend legal claims, or to meet regulatory obligations.	Legal obligation.
Communication	Email, social media, and telephone metadata (timestamps, message content).	Retained for up to 5 years from your last interaction, unless a longer period is required for contractual or legal reasons or you have explicitly consented to it. Communication records relating to legal claims, disputes, or regulatory matters may be kept for longer, in line with applicable regulations.	Legitimate interest, performance of contract, or consent

Changes to the Privacy Policy

We may update this Privacy Notice from time to time at our sole discretion by publishing a new version on this website. Any changes will be posted on the website so that you are always aware of the information we collect, how we may use it, and under which circumstances we may disclose it. You are encouraged to review the most recent version of this Privacy Notice regularly, as well as each time you visit our website.

The date of the last modification of this Privacy Notice is stated at the beginning of this document.

Contact us

If you have any questions or concerns about our use of your personal data, or if you wish to exercise any of your privacy rights, please contact us at:

VNEXT HOLDINGS Ltd 17F, 18F & 19F, C Tower, Central Point, 219 Trung Kinh Street, Yen Hoa, Hanoi, Vietnam
contact@vnext.vn
+84-24-3765-9555