Data Subject Rights Policy

DATA SUBJECT RIGHTS POLICY 

(Reference No.: 02-2026/CS/PDP – Version 1.0) 

1. Introduction

FPT Smart Cloud Company Limited (“FPT Smart Cloud”, “we”, “us”, or “our”) is committed to fully respecting and protecting the lawful rights of Personal data subject matters (or Data subjects) in accordance with Vietnamese laws on Personal data protection. 

This page is designed to provide customers, partners, and users with a transparent, comprehensive, and structured overview of: 

• Their rights relating to personal data; 

• How to exercise those rights; 

• The process for receiving, verifying, and handling requests at FPT Smart Cloud. 

The exercise of these rights is carried out based on the principles of transparency, security, timeliness, and compliance with applicable laws. 

2. Personal data subject matters (or Data subject) rights 

In accordance with applicable laws, data subjects are entitled to the following rights: 

2.1. Right to be informed 

Data subjects have the right to request information regarding the processing of their personal data, including but not limited to: 

• Purpose of processing; 

• Categories of personal data collected; 

• Processing methods; 

• Retention period; 

• Relevant parties involved in processing. 

2.2. Right to consent and withdraw consent 

Data subjects have the right to decide whether to consent to the processing of their personal data. 

They also have the right to withdraw their consent at any time. 

Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal. 

2.3. Right of access 

Data subjects have the right to: 

• Request confirmation as to whether their personal data is being processed; 

• Access their personal data; 

• Request a copy of personal data under processing, except where otherwise provided by law. 

2.4. Right to rectification 

Where personal data is inaccurate, incomplete, or outdated, data subjects have the right to request updates, corrections, or supplementation to ensure accuracy and completeness. 

2.5. Right to erasure 

Data subjects have the right to request deletion of personal data in accordance with applicable laws, including but not limited to cases where: 

• The data is no longer necessary for the processing purpose; 

• Consent has been withdrawn and no other legal basis exists for processing. 

2.6. Right to restrict processing 

In certain circumstances, data subjects may request restriction of processing, for example: 

• When there is a dispute regarding data accuracy; 

• When there are concerns about the lawfulness of processing. 

2.7. Right to object to processing 

Data subjects have the right to object to the processing of their personal data where: 

• Processing is conducted for marketing purposes; or 

• Processing is based on legitimate interests of FPT Smart Cloud, 

unless there are overriding legal grounds. 

2.8. Right to complaint, denunciation, and legal action 

Where data subjects believe their lawful rights and interests have been infringed, they have the right to: 

• Lodge complaints with competent authorities; 

• Seek compensation for damages; 

• Initiate legal proceedings in accordance with applicable laws. 

3. How to submit a request 

Data subjects may exercise their rights by submitting a request through the following channels: 

• Email: support@fptcloud.com 

• Hotline: 1900 638 399 

• Postal mail:
  FPT Smart Cloud Company Limited
  No. 10 Pham Van Bach Street, Cau Giay Ward, Hanoi, Vietnam 

To ensure accurate and timely processing, requests should include: 

• Identification information (full name, contact details); 

• Specific request details; 

• Supporting documents or information (if necessary for verification). 

4. Identity verification

To ensure the security and confidentiality of personal data, FPT Smart Cloud may request additional information or documentation to verify the identity of the requester before processing the request. 

Verification will be conducted in a manner that is appropriate, necessary, and proportionate to the purpose. 

5. Request processing time 

FPT Smart Cloud commits to handling requests within the timeframes required by applicable laws. 

Specifically: 

• Acknowledgment of receipt will be provided as soon as possible, typically within 72 hours of receiving a valid request; 

• Processing time depends on the nature and complexity of the request; 

• Where an extension is required, we will inform the requester of the reason and expected timeline. 

6. Processing fees

The exercise of data subject rights is generally provided free of charge. 

However, in cases where requests are: 

• Repetitive; 

• Unreasonable; or 

• Resource-intensive, 

FPT Smart Cloud may charge a reasonable fee in accordance with applicable laws and will notify the requester in advance. 

7. Grounds for refusal

FPT Smart Cloud may refuse to process a request in the following cases: 

• Inability to verify the identity of the requester; 

• Requests that are unclear, incomplete, or invalid; 

• Requests that may adversely affect the lawful rights and interests of third parties; 

• Other cases as provided by law. 

In all cases of refusal, we will clearly inform the requester of the reasons. 

8. Confidentiality of Requests

All information related to data subject requests will be handled and stored securely and used solely for the purposes of receiving, verifying, and processing the request in accordance with applicable laws. 

9. Contact Information

For any requests or inquiries regarding data subject rights, please contact: 

Data Protection Officer (DPO)
FPT Smart Cloud Company Limited 

Address: No. 10 Pham Van Bach Street, Cau Giay Ward, Hanoi, Vietnam 

Email: Minhpt@fpt.com 

Phone: 0913571357 

Hotline: 1900638399 

10. Updates

This page may be updated from time to time to ensure compliance with legal requirements and operational practices. 

The latest version will be published on our website and will take effect from the date of publication.