PERSONAL DATA PROTECTION POLICY FOR JOB APPLICANTS
(Hereinafter referred to as the "Policy")
ARTICLE 1. DEFINITIONS
1.1. "Company" means HS HYOSUNG VIETNAM CO., LTD. Under this Policy, the Company acts as the Personal Data Controller or Personal Data Controller and Processor, depending on each specific case.
1.2. "Applicant" means any individual applying or intending to apply for positions advertised by the Company. Under this Policy, the Applicant is the Personal Data Subject or a person authorized by the Data Subject to provide personal data for recruitment purposes.
1.3. "Personal Data" means digital data or information in any other form that identifies or can identify a specific individual, including Basic Personal Data and Sensitive Personal Data. Personal Data that has been anonymized is no longer considered Personal Data.
1.4. "Basic Personal Data" means personal information reflecting common identity and background information as prescribed by applicable laws.
1.5. "Sensitive Personal Data" means personal information associated with an individual's privacy, the infringement of which may directly affect the lawful rights and interests of individuals or organizations, as prescribed by law.
1.6. "Processing of Personal Data" means one or more activities relating to Personal Data, including collection, recording, analysis, storage, encryption, decryption, modification, deletion, destruction, anonymization, disclosure, transfer, or any other processing activities.
ARTICLE 2. PERSONAL DATA COLLECTED
2.1. The Company may collect and process all Personal Data provided by the Applicant, including but not limited to:
- Full name
- Gender
- Marital status
- Date of birth
- Place of birth
- Phone number
- Email address
- National ID/Passport information
- Residential address
- Educational background
- Professional qualifications
- Employment history
- Reference contacts
- Family information
- Recruitment source
- Curriculum Vitae (CV)
- Cover letter
- Academic degrees
- Professional certificates
- Other recruitment documents
2.2. The Personal Data collected is not limited and depends on the recruitment requirements of each position and the information voluntarily provided by the Applicant.
2.3. Personal Data may be provided in hard copy, electronic files, or other digital formats.
ARTICLE 3. PURPOSES OF PERSONAL DATA PROCESSING
- Screening recruitment applications.
- Contacting Applicants and notifying recruitment results.
- Organizing interviews and candidate assessments.
- Verifying identity and employment history.
- Entering into employment contracts or other working agreements.
- Managing employees and trainees.
- Administering salaries, benefits, and welfare programs.
- Providing information to competent authorities where required by law.
- Sharing information with IT service providers, software vendors, affiliated companies, business partners, and service providers for recruitment-related purposes.
- Statistical analysis and reporting.
- Other lawful purposes permitted under applicable laws.
ARTICLE 4. METHODS OF PERSONAL DATA PROCESSING
4.1. The Company may collect Personal Data through:
- Website: https://hyosungjobs.com/
- Email: tuyendung@hshyosung.com
- Other recruitment websites operated by the Company.
- Email addresses of Company recruiters.
- Third-party recruitment agencies authorized by the Company.
4.2. Where Personal Data is provided through other means, the Company will process such data only after obtaining the Applicant's consent.
4.3. Personal Data may be stored in the Company's databases or those of its affiliated companies, subsidiaries, business partners, or service providers for the purposes stated in Article 3 and in accordance with applicable laws.
4.4. Personal Data may be shared with consulting firms, auditors, legal advisors, software providers, IT service providers, HR service providers, and other authorized parties for lawful business purposes.
4.5. Where cross-border transfer of Personal Data is required, the Company shall comply with all applicable legal requirements.
4.6. Personal Data will be retained for five (5) years from the date of receipt if the Applicant is not recruited, or until the Applicant requests deletion of the data, whichever occurs first.
Note: Once an Applicant requests deletion of Personal Data, all recruitment activities relating to that Applicant will immediately cease.
ARTICLE 5. FORCE MAJEURE
The Company implements various technical and organizational security measures to protect Personal Data. However, no security system can guarantee absolute protection.
Potential risks include, but are not limited to:
- Security breaches involving partners or service providers.
- Security vulnerabilities beyond the Company's control.
- Cyberattacks or hacking incidents.
- Natural disasters, fire, or other force majeure events.
- Hardware, software, or system configuration failures.
The Applicant acknowledges these potential risks and agrees that the Company cannot guarantee absolute security of Personal Data.
ARTICLE 6. NOTIFICATION OF PERSONAL DATA INCIDENTS
If the Company becomes aware of any Personal Data breach or security incident, it will notify relevant internal departments, competent authorities, and affected Applicants in accordance with applicable laws.
ARTICLE 7. RIGHTS AND OBLIGATIONS OF THE APPLICANT
7.1. Applicant's Rights
- To be informed about the processing of Personal Data.
- To give or withdraw consent.
- To request correction of Personal Data.
- To request deletion or restriction of processing.
- To lodge complaints or claims in accordance with applicable laws.
- To request protection measures for Personal Data.
- Other rights provided by applicable laws.
7.2. Applicant's Obligations
- Provide accurate and truthful Personal Data.
- Obtain consent before providing Personal Data of third parties.
- Protect his/her own Personal Data.
- Respect the Personal Data of others.
- Not interfere with the lawful rights and obligations of the Company.
- Comply with all applicable legal requirements.