Privacy Policy

This Privacy Policy ("Policy") explains how Nhat Quang Mvtec ("VIAITEC", "we") collects, processes, stores and protects the personal data of visitors to viaitec.com (the "Website") and of customers who contact us.

This Policy is based on the Law on Personal Data Protection No. 91/2025/QH15 of Vietnam, Decree No. 356/2025/ND-CP detailing its implementation, the Law on Electronic Transactions No. 20/2023/QH15 and other applicable regulations. It also serves as the notice of personal data processing given to data subjects.

• Name: Nhat Quang Mvtec
• Personal data contact: info@viaitec.com · +84 974 139 366

Data you provide through forms (Contact, Request a demo): full name, email address, phone number, country, company name, product of interest and the content of your message or request.

Customer account data (when you create an account to request documents): full name, email address, phone number, country, company or organisation name, password (stored only as a hash; we cannot read your password), your download requests with the intended use you state, their approval status, and the time and IP address of each download.

Technical data when you visit the Website: IP address, browser and device type, pages viewed, time of visit and referral source. The server records this data in technical logs to operate and protect the Website. Visitor statistics are collected only after you consent (see Cookies and analytics).

We do not request, and ask you not to submit, sensitive personal data (for example health, biometric or financial information, or identity documents) through the Website.

Personal data is processed only for the following purposes:

1. Responding to your requests and providing technical consultation, evaluation packages, quotations and contracts you ask for;
2. Contacting you about the request you submitted;
3. Managing customer accounts, reviewing document download requests, sending download links and keeping a download history to protect technical documents;
4. Visitor statistics to improve the Website's content and experience (only with your consent);
5. Keeping the Website secure: spam protection, rate limiting of forms and sign-ins, and detection of abnormal access;
6. Complying with legal obligations.

VIAITEC does not buy or sell personal data and does not send you advertising or marketing without your separate consent under Article 28 of the Law on Personal Data Protection. You may opt out of marketing communications at any time.

• Your consent: when submitting a form, you tick a box confirming that VIAITEC may process the data above to respond to your request; for analytics, you consent through the cookie banner. Consent is clear, specific, recordable and given per purpose; silence or inaction is not consent (Article 9 of the Law on Personal Data Protection).
• Performance of an agreement with you or steps taken at your request before entering into a contract, and legal obligations, in the cases where the law allows processing without consent (Article 19 of the Law on Personal Data Protection).

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it (Article 10 of the Law on Personal Data Protection).

ViAiTracker^LT, ViAiEdge and VIAITEC libraries process images and video directly on the customer's device or system; VIAITEC does not collect, receive or store the images or video processed by the products.

When using the products, the customer is the data controller for the images, video and data collected by its own system and is responsible for complying with personal data protection, privacy and camera installation laws at the place of use.

Where a customer voluntarily sends sample videos for VIAITEC to evaluate performance, processing follows a separate agreement, serves only the evaluation and the data is deleted upon completion or at the customer's request.

VIAITEC shares personal data only with:

• Web hosting and email service providers with servers in Vietnam, to operate the Website and deliver form messages to VIAITEC's mailbox;
• Google LLC (Google Tag Manager, Google Analytics, YouTube), only as described under Transfers outside Vietnam;
• Competent state authorities when required by law;
• A successor organisation if VIAITEC merges, consolidates, divides, separates or transfers its business; the data is transferred in accordance with the law and the successor must continue to protect it under this Policy.

Processors acting on VIAITEC's behalf may process data only for the purposes and within the scope permitted by VIAITEC.

Form data is stored in Vietnam. The following services have servers outside Vietnam:

• Google Analytics via Google Tag Manager: runs only when you consent in the cookie banner; analytics data (a random browser identifier, pages viewed, device and approximate location based on IP) is transferred to Google's servers;
• YouTube (privacy-enhanced mode, youtube-nocookie.com): when you watch an embedded video, your browser connects directly to Google's servers.

VIAITEC fulfils its obligations regarding cross-border transfers of personal data, including preparing and keeping a transfer impact assessment dossier under Article 20 of the Law on Personal Data Protection where required.

• Necessary storage: the Website stores a few settings in your browser (for example your cookie choice). These are not used to track you.
• Sign-in cookie: when you sign in to a customer account, the Website uses a session cookie (vt_session) to keep you signed in. It is required for the account to work, is not used for tracking, and expires when you sign out, after 2 hours of inactivity, or at the latest 7 days after signing in. It is accompanied by a vt_in cookie (value "1", no personal data) that lets the account icon in the header know you are signed in.
• Analytics: Matomo (operated by VIAITEC on a server in Vietnam, cookieless, with IP addresses partially masked) and Google Analytics (uses cookies). Both estimate the visitor's country and city from the IP address; we do not collect the precise (GPS) location of your device. Both load only after you click "Accept" in the cookie banner.
• You can change your choice at any time via "Cookie settings" in the footer. Declining does not affect your use of the Website.

• Form data: up to 24 months from the last contact, or until you withdraw consent or request deletion, whichever is earlier. Where a contract arises, data is kept for the periods required by contract, accounting and tax law.
• Customer account data and download request history: for as long as the account exists. You can delete your account at any time on the Customer account page; your account data and request history are then deleted immediately.
• Detailed analytics data: up to 14 months; thereafter only aggregated figures that do not identify individuals remain.
• Server technical logs: for the hosting provider's retention period and as required by cybersecurity law.

At the end of the retention period, data is deleted or destroyed so that it cannot be recovered.

Under Article 4 of the Law on Personal Data Protection, you have the right to:

1. Be informed about the processing of your personal data;
2. Give or refuse consent, and withdraw consent;
3. View and correct, or request correction of, your personal data;
4. Request provision, deletion or restriction of processing of your personal data, and object to processing;
5. Complain, denounce, sue and claim damages in accordance with the law;
6. Request competent authorities to protect your rights.

To exercise your rights, please send a request to info@viaitec.com. We may ask you to verify your identity to protect your own data and will respond within the time limits set by law. You are also responsible for providing accurate data and respecting the personal data of others.

The Website may be accessed from many countries. If you reside outside Vietnam, in addition to the rights described in this Policy, VIAITEC respects the personal data rights granted by the law of your place of residence (for example the European Union's General Data Protection Regulation, GDPR) to the extent that law applies to VIAITEC. You may submit requests as described under Your rights as a data subject.

VIAITEC applies appropriate organisational and technical measures, including HTTPS/TLS encryption, a browser Content Security Policy (CSP), rate limiting and spam protection for forms, keeping system configuration outside the public web directory, and limiting data access to authorised staff.

In the event of a personal data breach, VIAITEC will remedy it and notify the specialised personal data protection authority within 72 hours of detection where notification is required under Article 23 of the Law on Personal Data Protection, and will inform affected data subjects where necessary.

The Website and VIAITEC products are intended for organisations, businesses and adults. We do not knowingly collect children's personal data. If we learn that we have received a child's data without valid consent as required by law, we will delete it.

This Policy may be updated when the law or our processing changes. Updates are published on the Website with their effective date. Where processing purposes change, we will ask for your consent again if required by law.

For questions, requests or complaints about personal data, please contact info@viaitec.com or use the Contact page. You may also lodge a complaint with the specialised personal data protection authority under the Ministry of Public Security of Vietnam.