PATI GROUP

Decree 13/2023

Personal Data Protection Policy

How PATI GROUP AGENCY collects and uses personal data when you visit the site, Apply, or sign in to a staff portal.

  1. 01General rules

    Personal data is information in symbols, text, numbers, images, sound, or similar form in an electronic environment that relates to, or can identify, a specific person. It includes basic and sensitive personal data under Decree 13/2023/ND-CP.

    A data subject is the person the data describes: visitors to patigroup.com, Apply and Careers candidates, employees and contractors, people in internal training, and users of PATI staff portals (AI Portal, AdLauncher, Creative Portal, LMS Portal).

    Processing means one or more operations on personal data: collect, record, analyze, confirm, store, edit, disclose, combine, access, retrieve, encrypt, copy, share, transmit, delete, destroy, or a related act.

    If you give us data about a related person (dependents, referees, emergency contacts), you confirm they lawfully consented to the purposes in this policy. PATI does not have a separate duty to verify that consent.

    Using patigroup.com, sending Apply, interviewing, signing a contract, or signing in to a staff portal means you accept this policy.

    PATI may update this policy. The current text lives at https://patigroup.com/personal-data-protection and https://patigroup.com/chinh-sach-bao-ve-du-lieu-ca-nhan. Effective date: 01/09/2026.

    Principles: Vietnamese law; collect only for the specific, lawful purposes in Section 3; technical measures suited to the data; keep only as long as needed; protect children's data under Decree 13.

  2. 02Data we process

    patigroup.com is not a consumer store. We process data for hiring, employment, training, and running the site and staff portals.

    Basic data may include: name; date of birth; gender; contact address; nationality; photo; phone; email; ID or personal tax number; job, education, CV, portfolio, and tests; account details and site or portal logs.

    Sensitive data only when the law requires it or you consent: occupational health if any; biometrics if used for timeclock; portal credentials; optional location; cookies and technical logs.

    We do not collect on patigroup.com: crime data, sex life, or payment card numbers.

  3. 03Purposes

    Recruiting: receive Apply, screen, interview, and make offers.

    Employment, training, and portal access: AI Portal (ai.patigroup.com/staff), AdLauncher (ads.patigroup.com), Creative Portal (creative.patigroup.com), LMS Portal (learntogrow.patiagency.com).

    Site operations, security, and analytics for patigroup.com.

    Employer-brand communications. PATI does not sell personal data.

    Tax, audit, and legal or contract compliance.

    Corporate restructuring if it occurs.

    Fraud and security response.

    Disclosures to authorities when the law requires it.

    Other purposes with your consent.

  4. 04How we process

    We collect through Apply forms, email, Lark, interviews, staff portals, cookies and logs, public professional sources, and authorized processors.

    We store data in Vietnam and/or on infrastructure vendors in or outside Vietnam.

    No sale of data. We may share with affiliates, technology vendors, lawyers and auditors, and competent authorities.

    Cross-border transfers use security measures and Vietnam's transfer rules.

    We delete data when the purpose ends unless the law requires us to keep it.

  5. 05Children

    patigroup.com and PATI portals are not aimed at children.

    We process data of a person under 16 only with parent or guardian consent. From age 7, the child must also consent, in the child's best interests, under Decree 13.

  6. 06Risks

    No system is absolutely secure. PATI uses measures suited to an HQ site and internal portals.

    We notify incidents as the law requires.

    Withdrawing consent may mean we cannot continue a hiring process or keep portal access open.

  7. 07Retention

    We process from lawful receipt until the Section 3 purposes are done, plus any legal retention (labor, tax, accounting, or proceedings if they arise).

  8. 08Parties

    PATI GROUP AGENCY COMPANY LIMITED is the controller (and may also be a processor when a partner sends us data to perform a contract).

    Vendors for infrastructure, email, Lark, hosting, analytics, and staff portals.

    Persons the Company authorizes.

    Competent state authorities.

  9. 09Your rights

    You may: know; consent; access and correct; withdraw consent; delete; restrict processing; obtain your data; object; complain, denounce, or sue; claim damages; protect yourself under the law.

    Send requests to hr@patigroup.com. PATI will check identity before acting. We may refuse invalid or unlawful requests.

  10. 10Your duties

    Give accurate data and update it when it changes.

    Protect portal credentials. Do not share passwords.

    Respect other people's data you see at work.

    Report suspected leaks or unauthorized access at once.

  11. 11Other terms

    By accepting this policy you have been told the data types, purposes, processors, and rights above.

    Contact: PATI GROUP AGENCY COMPANY LIMITED (Công ty TNHH PATI GROUP AGENCY). Tax code 0316100508. Legal representative: Nguyễn Tuấn Quang. Registered: 59 Cộng Hòa, Phường Tân Sơn Nhất, TP. Hồ Chí Minh, Việt Nam. Office: Shophouse Midtown M7 Signature, Đường Số 15, Phú Mỹ Hưng, Tân Mỹ, TP. Hồ Chí Minh 72308. Email: hr@patigroup.com. Site: https://patigroup.com. Effective: 01/09/2026.