Privacy statement

The Privacy Statement (updated and effective 1 July 2023)

PricewaterhouseCoopers in Vietnam (“PwC”, "us", “our” or “we”) values your trust in us and respects the need to maintain security and confidentiality of the information you provide us, whether or not you are our client, an individual associated with one of PwC’s existing or potential clients, a registered user, a visitor to our website, or another individual who has business contact with us. This Privacy Statement describes why and how we process Personal Data, as defined below, collected through our websites, social media platforms, applications, products and/or services provided by PwC in Vietnam, and provides information about individuals’ rights with respect to their Personal Data.

By submitting or providing your Personal Data, either directly or via third-parties such as your employer, you consent to the use of your Personal Data that is collected by PwC and all persons involved in the provision of services, recruitment and communicating with you, in the manner as set out in this Privacy Statement. This Privacy Statement serves as our notice to the data subjects regarding our processing activities.

We recognise that transparency is an ongoing responsibility, and hence we keep this Privacy Statement under regular review. We shall have the right to modify, update or amend the terms of this Privacy Statement at any time, by placing the updated Privacy Statement on our website. Continuing to communicate with PwC or continuing to use PwC’s services following any modifications, updates or amendments to this Privacy Statement shall signify your acceptance of such modifications, updates or amendments.

If you have questions on privacy issues, please email us at vn_pwc_marketing@pwc.com.

We only collect Personal Data that is necessary for the agreed purposes.

We receive various types of Personal Data in the course of communicating you or your continuous use of PwC’s services, including but not limited to the following (“Personal Data”):

personal and contact details such as national registration identity card details and business card details;
financial details such as salary and other income and investments, benefits, tax status and other tax information;
any information which may identify you, your spouse or family members.

When we process Personal Data to provide our services, our clients / you need to notify the data subjects concerned (e.g., clients’ employees/customers) regarding how PwC will process that Personal Data, and obtain the data subjects’ consent and authorisation for the clients / you to provide their Personal Data to us.

In addition to the Personal Data provided to PwC directly, PwC may also collect your Personal Data from a variety of sources, including without limitation at any meetings, events, conferences, seminars, social media channels, or talks either organised, sponsored or attended by PwC, and/or from the cookies used on the website (please refer to the "Cookies" section).

From time to time, you may also voluntarily provide PwC with unsolicited Personal Data – that is, information other than what PwC has requested (for example, through PwC’s websites). If you do provide such information for any reason, you consent to PwC using that information in manners described in this Privacy Statement or as described at the point of disclosure. Furthermore, when providing such unsolicited information, we ask that you do not provide any sensitive information such as race or ethnic origin, political opinions, religious beliefs, health, genetic, or biometric data.

We do not collect Personal Data of anyone below the age of 18. To the extent that you have provided (or will provide) Personal Data about your family members, spouse and/or other dependents that are below the age of 18, you confirm that you have explained to them that their Personal Data will be provided to and processed by us and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their Personal Data in accordance with this Privacy Statement.

We may process your Personal Data for the purposes in connection with the services you have requested, for the activities you have attended or enquired, which shall include but are not limited to:

performing our services and other contractual arrangements
security, quality and risk management activities such as:
- security monitoring such as automated scans to identify harmful emails
- service monitoring for quality assurance
- client/engagement acceptance procedures
complying with any requirement of law, regulation or professional body of which we are a member. We are required to keep certain records to demonstrate that our services satisfy those compliance obligations which may contain Personal Data
administering, managing and developing our business and services such as:
- managing our relationship with existing and prospective clients
- recruitment activities
- developing our businesses and services, such as identifying client needs and improvements in service delivery
- maintaining and using IT systems
- hosting or facilitating the hosting of events
- administering and managing our website and systems and applications
- performing analytics for reporting and statistical purposes
providing information about us and our range of services. We may send you industry updates and insights, information about our services that may be relevant to you, and invites to events.

We will only disclose Personal Data to others for business purposes as explained above and where we are legally permitted to do so, including but not limited to the following circumstances:

as required by law such as through subpoena, search warrant or other legal processes
to other PwC firms, subcontractors and/or service providers (please also refer to the "Cross-border transfer" section).

When we disclose Personal Data to others, we put in place appropriate contractual and/or comparable safeguards required by applicable data protection legislation to protect the Personal Data being transferred.

There are several places throughout pwcglobal.com and pwc.com that may link to other websites that do not operate under pwcglobal.com or pwc.com's privacy practices. When you follow links to other websites, PwC's privacy practices no longer apply. We encourage visitors to review each site's privacy policy before disclosing any Personal Data.

The Personal Data you submit to us (as referred to in the "Collection of Personal Data" section) will only be retained for as long as is required for the purposes for which it was collected, or as required by law, regulation or professional standards and to establish, exercise or defend our legal rights.

We retain contact information (such as mailing list information) until a user unsubscribes or requests that we delete that information. If you choose to unsubscribe from a mailing list, we may still keep limited information about you so that we are able to honour your request.

When your Personal Data is collected, PwC assumes responsibility for keeping an accurate and up-to-date record of the Personal Data once you have submitted and verified the data. PwC does not assume responsibility for verifying the ongoing accuracy of the content of Personal Data. If PwC is informed by you that any of your Personal Data which we have collected (referred to the "Collection of Personal Data" section) is no longer accurate, PwC will only make appropriate corrections based on the updated information provided by you. PwC is committed to providing reasonable and practical access to you for the opportunity to identify and correct any inaccuracies.

If you would like to update the details of the Personal Data which you have submitted to us, you may contact us at vn_pwc_marketing@pwc.com.

We have implemented generally accepted standards of technology and operational security in order to protect your Personal Data (as referred to in the "Collection of Personal Data" section) from loss, misuse, alteration or destruction. In particular, we ensure that all appropriate confidentiality obligations and technical and organisational security measures are in place, to prevent any unauthorised or unlawful disclosure or processing of such information and data, and to prevent the accidental loss, destruction of or damage to such information and data. Only our authorised personnel are provided access to Personal Data, and these employees have agreed to ensure the confidentiality of this information.

However, the electronic transmission of information cannot be guaranteed to be secure or error free, and such information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete or otherwise be adversely affected or unsafe to use. Accordingly, while we endeavour to protect Personal Data, we cannot guarantee the security of data transmitted to or by us.

Where a security incident arises, we shall respond to the incident, assess the likely impact of the incident, and take necessary actions to bring the incident under control, including reporting to the relevant regulator, as required.

Personal Data collected by PwC may be transferred to other PwC member firms of the worldwide PwC organisation, where it is necessary to meet the purposes for which you have submitted the data, and as described in the “Purpose of processing” section.

Your Personal Data may also be transferred to third-party service providers who process information on PwC's behalf, including providers of information technology, identity management, website hosting and management, data analysis, data back-up, security and storage services. As a result, your Personal Data may be transferred outside the country where you are located. This includes countries and regions outside the European Economic Area (EEA), and countries or regions that do not have laws that provide specific protection for personal information. For a list of countries and regions where PwC firms are located, please see https://www.pwc.com/gx/en/about/office-locations.html.

The following additional terms apply to the processing of EEA Personal Data:

where we act as a controller, we may process Personal Data for any of the purposes set out in this Privacy Statement.
where we act as processor in relation to your Personal Data, we will: (a) process it only on your lawful written instructions; (b) implement appropriate measures designed to ensure its security, including by imposing confidentiality obligations on relevant personnel; (c) transfer it only to sub-processors under a written contract which imposes obligations consistent with those in this clause, and only when you authorise us to transfer your personal data to them; and (d) notify you without undue delay after becoming aware of a data breach in respect of any EEA Personal Data.
where recipients are located outside the EEA, we will carry out such transfers only where we have a lawful basis to do so.

Cookies may be used on our site. "Cookies" are small text files placed on your hard drive that assist us in providing a more customised website experience. For example, a cookie can be used to store registration information in an area of the site so that a user does not need to re-enter it on subsequent visits to that area. It is PwC's policy to use cookies to make navigation of our websites easier for visitors and to facilitate efficient registration procedures. Site statistics are compiled by third parties, and therefore your Internet Protocol (“IP”) address will be passed to third parties for statistical reporting only.

Where PwC collects information through our website, we automatically collect certain non-Personal Data regarding website use that does not identify you, including but not limited to: the IP address of your computer, the IP address of your internet service provider, the date and time of your access to the website, the operating system you are using, the sections of the website you visit, the content you download from website, and the internet address of the website from which you linked directly to PwC's website. PwC may use non-Personal Data to compile tracking information reports regarding site user demographics and site traffic patterns. None of the tracking information in the reports can be connected to your identity.

If you are concerned about cookies, most browsers permit individuals to decline cookies by changing the privacy settings on their browser. In most cases, a visitor may refuse a cookie and still fully navigate our websites; however, other functionality on the site may be impaired. After termination of the visit to our site, you can always delete the cookies from your system if you wish.

Full details on the cookies in use on our website can be found on the Cookies information page.

Subject to the limitations in the applicable law and the terms stated herein, you are entitled to certain rights in relation to the Personal Data we hold about you, including the rights to:

request access to, rectification, and erasure of your Personal Data
request for provision of your Personal Data
object to or request the restriction of processing of your Personal Data
withdraw your consent at any time (without affecting the lawful processing previously based on your authorisation).

Your exercise of these rights is subject to certain exemptions to safeguard public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege).

Note that it is necessary for PwC to collect and process Personal Data provided by you depending on the purposes for which your Personal Data is collected. If you choose not to provide us with such Personal Data or do not consent to this Privacy Statement, you/your organisation may not be able to use our product/service or otherwise deal with us.

If you would like to exercise any of these rights, please email us at vn_pwc_marketing@pwc.com or, where appropriate, contact us via the relevant website registration page. We will treat your requests in accordance with applicable legal requirements.