Privacy policy
How Đông Nam Á Events collects, uses and protects your personal data — under Decree 13/2023/ND-CP.
Updated:
Đông Nam Á Entertainment & Events collects only the minimum personal data that you choose to send us through the contact form on this website — your full name, your phone number and the details of your enquiry — so that we can advise you on your event and prepare a quotation for it. We do not sell your data and we do not trade it with any other party, and you can ask to see, correct or delete your data at any time you wish.
This English page is a translation provided for convenience. Where the two differ, the Vietnamese version — Chính sách bảo mật — prevails.
This policy is built on Decree 13/2023/ND-CP on the protection of personal data, and it applies to the whole website and to every channel through which we receive enquiries.
What personal data we collect
The website does not ask you to create an account. Personal data arises only at the point where you send us the enquiry form; beyond that, the website records its own traffic figures at session level, in a form that does not identify you as an individual (see the section “Our own traffic measurement” below). When you send the form, the data consists of the following:
- When you send the contact form / request a consultation: your full name, phone number, event type, provisional date and a description of what you need (the last two fields appear only on the full form on the contact page).
- Technical information attached to that enquiry: the time it was sent, the URL of the page you were viewing when you pressed send, and your browser identification string (user-agent). We use this data to tell genuine enquiries apart from automated spam.
We do not store your IP address alongside the enquiry, we do not collect sensitive personal data as defined in Article 2 of Decree 13/2023/ND-CP (health status, biometric data, political or religious views, financial data and so on), and we never ask you for payment details on the website.
If you volunteer your company name, job title or event details in the description field, we treat that part as belonging to your consultation request.
What we use your data for
The data you send is used only for the purposes below:
- Getting back in touch to advise you, ask for further details and send proposals and quotations for the event you are interested in.
- Preparing and performing a service contract if the two sides go ahead together.
- After-event care: confirming sign-off, handing over media assets and receiving your feedback.
- Blocking spam and protecting the system against automated submissions.
We do not use your data for automated scoring, we do not send bulk advertising unless you have agreed to receive it, and we do not use it for any purpose outside the scope above without asking your permission first.
The legal basis for processing your data
The main legal basis is your consent: you know exactly who you are sending your information to and why, and the consent statement sits immediately beside the send button on the form. Where a contract has been signed, processing the contact details of the signing representative also serves the performance of that contract and our statutory obligation to retain accounting records.
You are free not to provide your data. In that case we cannot contact you with advice, but you can still read the whole of the website.
Where your data is stored and for how long
The enquiries you send are stored on a server located in Vietnam which we administer ourselves. They are not pushed out to any third-party lead-capture platform. Only the staff responsible for consultation work and for administering the website can reach them, and they do so through an admin area protected by a password.
Retention period: a maximum of 24 months counted from your most recent contact with us, after which the data is either deleted or anonymised. Data attached to a contract that has already been performed is kept for as long as the law on accounting and on the retention of records requires. If you ask us to delete your data sooner than that, we act on the request within 72 hours.
Do we share your data?
We do not sell, do not rent and do not trade your personal data. It can be shared in the three limited situations set out below, and in no others:
- Partners working directly on your event — a venue or a technical supplier that needs the name of the on-site contact, for example — and then only the minimum information required, once you have agreed to it.
- Infrastructure providers for the servers and email we rent to keep the website running; these parties process the data on our instructions and may not use it for their own purposes.
- Competent state authorities where there is a lawful written request.
Cookies and measurement tools
The website uses no advertising cookies and carries no behavioural tracking code from advertising networks. Technical cookies appear only when you log in to the internal admin area — ordinary visitors never need them.
When Google Analytics 4 is switched on to measure traffic, the statistics are aggregated and anonymous (page views, traffic sources, device types) and do not allow us to identify you personally. You can block the tool completely through your browser’s cookie settings or a tracker-blocking extension, with no effect on your reading of the content.
Our own traffic measurement
The website measures its own traffic (first-party, with no third-party service): when you view a page, your browser sends our server a record containing the page URL, the time spent on the page, the domain of the site you clicked through from (if any), the device type (desktop or mobile) and a random session ID held in your browser’s sessionStorage — that ID disappears by itself when you close the tab and it holds no information that identifies you. The purpose of this measurement is simply to show us which pages our visitors take an interest in, so that we can improve the content. When you send the enquiry form, the session ID is recorded alongside your enquiry so that we know which pages you looked at before you got in touch with us. Measurement data is kept for a maximum of 24 months.
Your rights over your personal data
Under Article 9 of Decree 13/2023/ND-CP, you have the following rights over your own personal data:
- To be informed about which of your data is being processed, and for what purpose.
- To access a copy of the data we hold about you.
- To correct inaccurate data, or to ask us to correct it.
- To withdraw your consent at any time, without giving a reason.
- To have data deleted, and to request restriction of or object to the processing.
- To complain, to report a violation to the competent authority, or to bring legal action, and to claim compensation under the law if your rights are infringed.
Withdrawing your consent does not invalidate processing that was lawfully carried out before that point.
How to exercise your rights
Send your request to us through the hotline or email address given on the contact page, stating clearly whether you want to see, correct or delete your data, or to withdraw your consent. We may ask for a few further details to verify that you are indeed the data subject — that step protects you, by stopping anyone else from impersonating you to interfere with your data.
Response time: within 72 hours of receiving the verification details in full. If a request is refused, we set out the reasons in writing.
Security and incident handling
The website runs over an encrypted HTTPS connection, the admin area is protected by individual accounts and by a limit on the number of failed login attempts, and the contact data you send is stored outside the part of the website that is open to the public.
If we discover an incident that has exposed personal data, we notify the affected data subjects and the competent authority within the time limits set by Decree 13/2023/ND-CP, together with a description of the incident and the remedial measures taken.
Changes to this policy
Whenever the way we collect or process data changes, we update this page directly and change the date on the “Updated” line above. It is worth re-reading this page before you send a new enquiry. If a change affects the scope of what you have consented to, we will ask for your consent again.
Contacting us about personal data
Any question, request or complaint concerning personal data should be sent to the data protection contact at Đông Nam Á Entertainment & Events, using the details on the contact page.