Idemitsu Vietnam Co.,Ltd
Idemitsu Vietnam Co.,Ltd (hereinafter referred to as the “Our company”) strives to process (collect, record, analyze, confirm, store, modify, disclose, combine, access, trace, revoke, encode, decode, reproduce, share, spread, provide, transfer, erase, destroy as well as implementing any other relevant activities) on personal data as follows appropriately in accordance with the “Group Basic Policy on the Protection of Personal Information, etc.” and Law on Data No. 60/2024/QH15, Decree No. 13/2023/ND-CP on protection of personal data and any other related prevailing regulations (hereinafter collectively referred to as the “Applicable laws”).
1．Personal Data acquired by Our company
2 . Purpose of Use of Personal Data acquired by Our company
3．Proper Management and Protection of Personal Data
4．Provision of Personal Data to Third Parties
5．Rights and Obligations of the Data subject
6 . Procedures of Requests to Exercise Data Subject’ Rights
7．Contacts for Other Inquiries Regarding Personal Data
8．Notifying Data subject and Reporting to the competent authorities
9．Revision of this Privacy Policy
“Personal data” refers to electronic information in the form of symbols, letters, numbers, images, sounds, or equivalences associated with an individual or used to identify an individual. The personal data acquired by Our company may include, but is not limited to, the following data:
(i) Name (last name, middle name and first name, other names (if any)), gender, contact address, date/place of birth, place of permanent residence, place of temporary residence, current place of residence, hometown, nationality;
(ii) telephone number, email address, bank account information, ID Card, passport number, driving license number, vehicle registration plate, taxpayer identification number, social security number, health insurance card number;
(iii) Other data and information necessary for ordinary course of our business.
We will use personal data of our customers, clients, shareholders, employees, and others with whom we have a relationship (hereinafter collectively referred to as the “Data subject”) as detailed below after obtaining the consent of the Data subject.
Please note that, except where permitted by laws and regulations, we will re-obtain the consent of the Data subject in each case when using personal data beyond the scope necessary for achieving the purpose(s) of use as notified by any of the following:
・Purposes of use notified to the Data subject when personal data is provided;
・Purposes of use announced on our website, etc., including this Privacy Policy; or
・Purposes of use notified by other means.
We will use personal data for the following purposes.
(1) Personal data related to our customers
| Items of Personal Data | Purposes of Use |
| Personal data related to users of our web and application services (hereinafter referred to in this table as the “Target Services”) | (i) Execution and performance of contracts between customers and Our company as well as Idemitsu Group (hereinafter collectively referred to as “Idemitsu”), and management of other transactions (ii) Communication between customers and Idemitsu, as well as notifications and greetings based on social customs (iii) Provision and management of the Target Services, various information and notifications (iv) Information on campaigns, events, etc. for the Target Services (v) Requests for cooperation with questionnaires, surveys, etc. on the Target Services (vi) Shipment of prizes and rewards for campaigns, questionnaires, etc. on the Target Services (vii) Development and advertisement of our products and services (viii) Aggregation and analysis of data for use in the development and marketing of our products and services (ix) The following items through analysis including users’ browsing history and purchase history of the Target Services: a. Improvement and enhancement of the convenience of the Target Services; b. Guide to contents and information on our products and services matched to the interests and concerns of the relevant users; and c. Distribution of advertisements regarding our products and services matched to the interests and concerns of users on services other than the Target Services and measurement and analysis of advertising effectiveness. (x) Responding to requests, inquiries, etc. from users of the Target services |
| Personal data related to users of various websites operated by Idemitsu (except for the above-mentioned Target Services; as the “Target Sites” in this table) | (i) Conclusion and execution of contracts between customers and Idemitsu, and management of other transactions (ii) Communication between customers and Idemitsu, as well as notifications and greetings based on social customs (iii) Research and development and advertising of our products and services (iv) The following items through analysis including users’ browsing history of the Target Sites: a. Improvement and enhancement of the convenience of the Target Sites; b. Guide to contents and information on our products and services matched to the interests and concerns of the relevant users; c. Distribution of advertisements regarding our products and services matched to the interests and concerns of users on sites other than the Target Sites and measurement and analysis of advertising effectiveness (v) Handling requests, inquiries, etc. from users of the Target Sites |
| Personal data related to Idemitsu mail order (online store) purchasers, etc. | (i) Receipt of orders, shipping, payment, and handling of inquiries about our products and services (ii) Information on our mail order campaigns, events, etc. (iii) Requests for cooperation with questionnaires, surveys, etc. on our mail order (iv) Sending and providing prizes and rewards for our mail order sales campaigns, questionnaires, etc. (v) Research and development and advertising of our products and services (vi) Compilation and analysis of statistical data for use in the development and marketing of our products and services (vii) The following matters through analysis including the browsing history, purchase history of purchasers, etc. in our mail order sales: a. Improvement and enhancement of the convenience of the relevant mail order sites; b. Guides to contents and information on our products and services in accordance with the interests and concerns of the relevant purchasers; and c. Distribution of advertisements regarding our products and services matched to the interests and concerns of users on sites other than the relevant mail order sites and measurement and analysis of advertising effectiveness (viii) Various communications related to the above |
| Personal data related to participants in events, seminars, etc. organized or co-sponsored by Idemitsu | (i) Implementation of events, seminars, etc. sponsored or co-sponsored by Idemitsu (ii) Responding to inquiries and various communications regarding events, seminars, etc. sponsored or co-sponsored by Idemitsu (iii) Requests for cooperation with questionnaires on events, seminars, etc. sponsored or co-sponsored by Idemitsu and consideration of improvements (iv) Requests for cooperation with questionnaires, surveys, etc. on our products and services (v) Research and development and advertising of our products and services |
| Personal data related to persons who provide Idemitsu with comments, inquiries, consultations, suggestions, etc. regarding our products and services | (i) Responding to opinions, inquiries, consultations, suggestions, etc. regarding our products and services, and keeping records of such responses (ii) Requests for cooperation with questionnaires, etc. on satisfaction with the above responses |
| Personal data related to applicants to our campaigns, questionnaires, contests, etc. | (i) Conducting lotteries and selection, and announcing the results of the selection (ii) Shipment and provision of prizes, etc. (iii) Responding to inquiries from applicants (iv) Development and advertising of our products and services (v) Compilation and analysis of statistical data for use in the development and marketing of our products and services (vi) Various communications related to the above |
| Personal data related to those who have requested our materials, etc. | (i) Shipment of materials and related responses (ii) Research and development and advertising of our products and services |
| Personal data related to monitors who are asked to evaluate our products and services | (i) Conducting evaluations, etc. of our products and services (ii) Research and development and advertising of our products and services (iii) Various communications related to the above |
(2) Personal data related to clients and business partners
| Items of Personal Data | Purposes of Use |
| Personal data related to employees and officers of our clients, business partners, etc. | (i) Conclusion and execution of contracts between clients and Idemitsu, and management of other transactions (ii) Communication between clients and Idemitsu, as well as notifications and greetings based on social customs (iii) Provision of information regarding our products, services, campaigns, etc. (iv) Providing information regarding our products and services, their quality, safety, efficacy, proper use, and problem solving (v) Introduction and sales promotion of our products and services, and sales management (vi) Surveys, analysis, research and development, and advertising for our products and services (vii) Fulfillment of obligations and exercise of rights regarding transactions with Idemitsu (viii) Collecting and communicating information necessary for business operations (ix) Audit confirmation work (x) Other matters incidental or related to transactions, etc. |
(3) Personal data related to job applicants, internship applicants, and retirees
| Items of Personal Data | Purposes of Use |
| Personal data related to job applicants and internship applicants to Idemitsu | (i) Conducting reviews and decision-making for hiring and rejection (ii) Verification and analysis of recruitment and selection activities, and future planning and management (iii) Verification and analysis of internship activities, future planning and management (iv) Administrative communications and paperwork related to the above (v) Responses to inquiries from job applicants and internship applicants (vi) Work related to the above |
| Personal data related to internships at Idemitsu | (i) Implementation of internships (ii) Management of equipment and facilities (iii) Labor management (iv) Education and training (v) Safety and hygiene, health management, etc. (vi) Business communications (vii) Work related to the above |
| Personal data related to our retirees | (i) Payment of retirement pension, etc. (ii) Fulfillment of obligations under labor-related laws and regulations, and relevant communications (iii) Provision of information regarding the status of Idemitsu (iv) Necessary business communications (v) Work related to the above |
(4) Personal data related to officers, employees, etc.
| Items of Personal Data | Purposes of Use |
| Personal data related to directors, employees (full-time and part-time employees, senior employees, contract employees, mates, employees on temporary assignment, and dispatched employees) of Our company, and their family members | (i) Human resource management, labor management (ii) Wages, salaries, bonuses, retirement benefits, corporate pensions, and other benefits, etc. (iii) Education, drills, training, and skill development (iv) Identification, assignment, secondment, transfer, promotion, demotion of human resources, and other employment-related management (v) Employment insurance, social insurance, tax, social security, and other work as required by laws and regulations (vi) Health management, safety and hygiene management (vii) Business communications, equipment and facility management and operations (viii) Work related to share ownership associations (ix) Work related to the above |
(5) Personal data related to shareholders and investors
| Items of Personal Data | Purposes of Use |
| Personal data related to shareholders and investors | (i) Exercise of rights and performance of obligations under the law on enterprises and investment (ii) Sending and communication of shareholder newsletters, shareholder special benefits, and other distributed materials (iii) Requests for cooperation with questionnaires, surveys, etc., and the sending and provision of rewards for such cooperation (iv) Shareholder management, including the preparation of shareholder data according to prescribed standards in accordance with various relevant laws and regulations (v) Implementation of shareholder services and consideration of improvements (vi) Provision of information and communication related to the Idemitsu Group (vii) Work related to the above |
(6) Other Personal Data
| Items of Personal Data | Purposes of Use |
| Personal data in our business activities Click here to view our business activities. | • Exchange of information and communication with industries and organizations relating to our business |
| Personal data related to members of organizations and other external organizations of which Idemitsu is a member or sponsor | (i) Exchange and communication of administrative and other necessary information of the relevant organizations (ii) Consideration of the possibility of collaboration, etc. with Idemitsu |
| Personal data related to persons who submit requests, complaints, etc. regarding personal data to Idemitsu | (i) Responding to requests, complaints, etc., and conducting investigations for that purpose (ii) Identification of such persons and/or their representatives (iii) Sending and communication of responses |
| Personal data related to residents in the neighborhood of our facilities | (i) Emergency and other necessary communications (ii) Exchange and communication of information necessary for business |
| Personal data related to visitors to Idemitsu (including data about persons filmed by security cameras) | (i) Maintaining our safety, crime prevention, and security (ii) Verification of visitors to Idemitsu |
| Personal data obtained from sources such as publicly available data, or lists of names distributed at events, etc. | (i) Consideration of the possibility of partnership with Idemitsu and related communications (ii) Research and development and advertising of our products and services |
ID Card number, personal identification number, passport number, driver’s license number, license plate, taxpayer identification number, social security number and health insurance card number, etc. (hereinafter collectively referred to as “Personal numbers”) and specific personal data retained by Our Company and the purposes of are as follows.
We will not use your personal number beyond the scope of personal number-related matters as stipulated by laws and regulations.
| Items of Personal Number and Specific Personal Data | Purposes of Use |
| Personal numbers of shareholders | Conducting matters related to dividends |
| Personal numbers and specific personal data of suppliers required to be included in documents submitted to the tax office, etc. | Performance of administrative work related to the preparation and submission of payment records |
| Personal numbers and specific personal data of our employees, etc. and their dependents | (i) Performance of health insurance-related work, employee pension insurance-related work, and other social security-related work stipulated by law (ii) Performance of withholding tax-related work and other tax-related affairs required by law (iii) Performance of administrative work related to share ownership associations and other employee benefit programs |
| Personal numbers of corporate pension beneficiaries, etc. | Performance of administrative work related to the preparation and submission of payment records |
For data related to personal data retained by Our company and the main purposes of use are as follows.
| Items of Data Related to Personal Data | Purposes of Use |
| Cookies and related and similar data (the “Cookies”) | • To ascertain and analyze the state of users’ use of the various websites operated by Idemitsu, including our membership web services (hereinafter referred to as the “Company’s Sites”).• Retention of users’ content browsing history, etc. on the Company’s Sites.• The following items through analysis of users’ browsing history, etc. of the Company’s Sites:(1) Improvement and enhancement of convenience of the Company’s Sites.(2) Display of content matched to the interests and concerns of users (including display of content more suitable for users in combination with the usage status of other sites and services provided by the Idemitsu Group).(3) Distribution of advertisements related to our products and services matched to the interests and concerns of users outside the Company’s Sites and measurement of the effectiveness of such advertisements. |
*The Cookies and other data acquired by Idemitsu may become personal data when a user subscribes to the various services offered on the Company’s Sites. In such cases, such Cookies will be processedappropriately as personal data in accordance with the Applicable laws. Users may also refuse the use of the Cookies by changing their browser settings. However, such user may not be able to use certain parts of the Company’s Sites.
We will use personal data entrusted to us for processing within the scope of the entrustment.
After obtaining consent from the Data subject, Personal data subject to joint use and the purposes of use etc. are as follows.
| Items of Joint Use Personal Data | Purpose of Joint Use | Scope of Users of Joint Use Data | Entity Responsible for Management of Joint Use |
| The following data acquired on our website: Data registered by users of our website, such as e-mail addresses and attribute data, as well as the site browsing history and usage conditions. | (i) Improvement and enhancement of the convenience of various websites operated by Idemitsu and its group companies (ii) Compilation and analysis of statistical data for use in the development and marketing of our products and services (iii) Display of contents and information on our products and services by Idemitsu and its group companies matched to users’ interests and concerns (iv) Distribution of advertisements by Idemitsu and its group companies on our products and services matched to the interests of users outside our website and measurement of the effectiveness of such advertisements. (v) Other purposes incidental or related to the above. | Idemitsu Vietnam Co.,Ltd Idemitsu Group | Idemitsu Vietnam Co.,Ltd |
| The following personal data acquired when Idemitsu receives various opinions, inquiries, etc. from customers, etc.: Names, addresses, telephone numbers, e-mail addresses, dates of birth, etc. | (i) Responding to opinions, inquiries, consultations, suggestions, etc. regarding our products and services, and keeping records of such responses (ii) Requests for cooperation with questionnaires, etc. on satisfaction with the above responses (iii) Other purposes incidental or related to the above. | Idemitsu Vietnam Co.,Ltd Idemitsu Group | Idemitsu Vietnam Co.,Ltd |
| The following personal data related to employees of Idemitsu and its group companies: Personnel and labor-related data, such as names, e-mail addresses, and dates of birth, etc. | (i) Human resource management, labor management (ii) Services related to wages, salaries, bonuses, retirement benefits, corporate pensions, and other employee benefits (iii) Education, drills, training, and skill development work (iv) Identification, assignment, secondment, transfer, promotion, demotion of human resources, and other employment-related management (v) Employment insurance, social insurance, tax, social security, and other work as required by laws and regulations (vi) Health management, safety and hygiene management work (vii) Work relating to business communications, equipment and facility management and operations (viii) Work related to share ownership associations (ix) Other purposes incidental or related to the above. | Idemitsu Vietnam Co.,Ltd Idemitsu Group | Idemitsu Vietnam Co.,Ltd |
| The following personal data related to employees and directors of clients, business partners, etc. of Idemitsu and its group companies: Names, company names, affiliations, e-mail addresses, telephone numbers, etc. | (i) Conclusion and execution of contracts between clients and Idemitsu, and management of other transactions (ii) Communication between clients and Idemitsu, as well as notifications and greetings based on social customs (iii) Provision of information on our products, services, campaigns, etc. (iv) Providing information on our products and services, their quality, safety, efficacy, proper use, and problem solving (v) Introduction and promotion of our products and services, sales management, and advertising (vi) Fulfillment of obligations and exercise of rights in connection with transactions with Idemitsu (vii) Collecting and communicating information necessary for business operations (viii) Other matters incidental or related to transactions, etc. | Idemitsu Vietnam Co.,Ltd Idemitsu Group | Idemitsu Vietnam Co.,Ltd |
2-6 Preparation of Anonymized Personal Data
We do not currently process anonymized personal data.
2-7 Preparation of Pseudonymized Personal Data
We may create pseudonymized personal data (the name and other data deleted) based on personal data provided and use it only for internal analysis after obtaining consent from the Data subject. When using pseudonymized personal data, personal identification and provision of such data to third parties are prohibited.
3．Proper Management and Protection of Personal Data
As a basic policy for ensuring the proper processing of personal data, we have established the “Basic Policy for the Protection of Personal Information, etc.” and stipulates compliance with the relevant laws and regulations. In addition, we have established “Information Management Regulations”, “Personal Information Management Regulations”, and “Regulations for Handling Specific Personal Information” to ensure that personal data is processed properly.
Initiative
(i) Organizational Safety Management Measures
a. Assignment of departments with the function of protecting personal data, designation of personnel responsible for personal data protection and implementation of measures necessary for the appropriate management of personal data
b. Establishment of a system to contact responsible persons and relevant departments in the event of an incident such as data leakage.
c. Confirmation of the status of processing of personal data databases, etc., in each division of Our company, and evaluation, review and improvement of safety management measures
(ii) Personnel Safety Management Measures
a. Identification of management supervisors/personnel responsible for personal data protection for ensuring compliance with relevant laws and regulations and rules by our employees
b. Training for our employees
(iii) Physical Safety Management Measures
a. Management of areas where personal data is processed
b. Measures to prevent theft or loss of equipment, electronic media that handle personal data and documents containing such data
c. Measures to prevent leakage, etc. when carrying electronic media
d. Deletion of personal data and disposal of equipment, electronic media, etc.
(iv) Technical Safety Management Measures
Measures to restrict access, prevent unauthorized external access, etc., and prevent leaks, etc., associated with the use of data systems
(v) Ascertaining the External Environment
Ascertaining the systems for the protection of personal data in the countries where personal data is stored, and implementing safety management measures in line with the systems in each country.
4．Provision of Personal Data to Third Parties
We will not provide personal data it acquires to any third party, except as required by the Applicable laws, in cases such as the following.
(i) In the case we obtain the prior consent of the person
(ii) In the case there is a need to protect a human life, health of the Data subject or others in an emergency
(iii) In the case there is a disclosure of personal data in accordance with the Applicable laws
(iv) In the case personal data is processed to fulfill obligations under contracts the Data subject with Our company as prescribed by the Applicable laws
(v) In the case personal data is processed to serve operations by regulatory authorities as prescribed by Applicable laws.
5 . Rights and Obligations of the Data subject
5-1 The Rights
The Data subject may have certain rights in respect of the processing of personal data, which may include: (i) being informed, (ii) giving consent, (iii) access, (iv) withdrawal of consent, (v) rectification, (vi) erasure, (vii) restriction of processing, (viii) being provided with data, (ix) objection to processing, (x) filing complaint, denunciations and lawsuits to relevant data protection authority, (xi) claiming damage and (xii) self-protection.
5-2 The Obligations
The Data subject may have certain obligations in respect of the processing of personal data, which may include (i) protecting his/her own personal data; (ii) respecting and protecting others’ personal data; (iii) fully and accurately providing his/her personal data when he/she consents to the processing; (iv) participating in dissemination of personal data protection skills; and (v) comply with regulations of law on protection of personal data and prevent violations against regulations on protection of personal data.
6 . Procedures of Requests to Exercise Data Subject’ Rights
6-1 Types of Requests
Our company will respond to requests to exercise the rights mentioned in 5-1 in accordance with the provisions below.
6-2 Procedures of Requests
(1) Where to submit requests
Please contact the inquiry desk set up separately for each of our services, sites, etc. to which you have provided your personal data. If you are not sure where to contact us, please click here for details.
Please note that you may be able to confirm, change, or delete your membership data, customer data, etc., registered on our membership web services, mail order sites, etc., by yourself. The purpose(s) of use of personal data may also be described in this Privacy Policy or elsewhere. In such cases, customers are requested to check the necessary data and make adjustments themselves.
(2) How to make a Request
(i) For requests for provision of personal data
a. Form of Request for the Provision of Personal Data
・The Data subject directly or through an authorized representative may visit Our company’s headquarters to request the provision of personal data. The recipient of the request is responsible for guiding the organization or individual making the request to fill in the required information in the Personal Data Request Form as stipulated by law. In cases where the requesting organization or individual is illiterate or has a disability that prevents them from writing the request, the recipient of the request is responsible for assisting in filling out the contents of the Personal Data Request Form.
・The Personal Data Request Form can also be sent to Our company via electronic network, postal services, or fax.
b. The main contents of the Personal Data Request Form
The Personal Data Request Form must be presented in Vietnamese and include the following main contents:
・Full name; place of residence, address; ID card number, citizen identification card number, or passport number of the requester; fax number, phone number, and email address (if any)
・The personal data requested, specifying the name of the document, file, or material
・The form in which the personal data will be provided
・The reason and purpose for requesting the provision of personal data.
(ii) For requests to exercise other rights
Please inform us of the details of your request at the inquiry desk in (1) above and provide us with the data necessary to verify your identity, such as name, address, date of birth, and telephone number of the requester, in accordance with the guidance. We may ask you to submit documents verifying your identity. In the case of a request from a representative, please provide us with documents that can verify the representative’s relationship with the requester (or other equivalent method if it is difficult to provide such documents).
(3) Method of verifying the identity of the person concerned and his/her representative
We will confirm your identity and the identity of your agent by checking the data provided necessary to confirm your identity and the identity of your representative and the contents of the documents confirming your identity and your relationship with your representative.
(4) Method of response to requests
We will respond to requests for exercising rights within the time stipulated by Applicable laws.
7 . Contacts for Other Inquiries Regarding Personal Data
For inquiries regarding personal data other than procedures for Requests described above, such as service suspension, or other inquiries, complaints, or consultations regarding personal data for each site or content operated by Our company, please contact the respective site or content in question. If you do not know the contact point, please contact us at:
By telephone: Idemitsu Vietnam Office: +84 24 3939 3328
Hours of operation: Monday – Friday, 8:30 a.m. – 5:00 p.m
(Excluding Saturdays, Sundays, national holidays, year-end and New Year holidays, and holidays designated by Idemitsu)
8．Notifying Data subject and Reporting to the competent authorities
In the event of a incidents such as leakage of personal data, we will notify the Data subject and report the matter to the Department of Cybersecurity and Hi-Tech Crime Prevention – Ministry of Public Security in accordance with the provisions of the Applicable laws.
9．Revision of this Privacy Policy
We may revise this Privacy Policy at any time without notice. The revised policy shall take effect from the time it is posted on our website. However, if the purpose(s) of use of acquired personal data is changed beyond the scope reasonably considered to be relevant to the purpose(s) of use before the change, we will obtain the consent of the user(s) concerned to the changed purpose(s) of use.
Our website is under the management of Idemitsu Vietnam Co.,Ltd. Although our website may be accessed from countries throughout the world with differing laws, users shall be deemed to have agreed to be bound by the laws of Vietnam with respect to the use of the website.
In addition, we make no representation or warranty on our website as to whether the contents of our website are appropriate to the environment persons accessing the website. Users accessing our website do so at their own discretion assume all responsibility for the use of the website.
© 2025 Idemitsu Vietnam Co.,Ltd.