PERSONAL DATA PROTECTION AGREEMENT

Implementing Decree No. 13/2023/ND-CP dated April 17, 2023 on personal data protection effective from July 1, 2023, to ensure compliance with the provisions of law, FCQ Cyber Security Joint Stock Company applies the "Personal Data Protection Agreement" to all individuals who need to apply for and/or participate in training programs organized by us.

PERSONAL DATA PROTECTION AGREEMENT

This agreement, notice, consent to protect personal data (collectively referred to as the Agreement), is made between FCQ Cyber Security Joint Stock Company (hereinafter referred to as FCQ) and the individual who applied to work and/or participate in the training program at FCQ, for the purpose of recognizing the voluntary consent and approval of the individual to allow FCQ to collect, store and use information provided by the individual to serve the recruitment and/or training process between individuals and FCQ, internal use as follows:

1. Personal information provided is collected, stored, exploited, used
Individuals understand, confirm and agree that FCQ is allowed to collect, store and use the information that individuals provide to us during the recruitment and training process through applications, exchanges, interviews, work agreements ... The basic personal information that the Company collects will include: full name, date of birth, gender, phone number, email, permanent address, residential address, ID/CCCD information, information about education, qualifications, occupation, work experience or other information provided by the individual to FCQ for the above purposes.

2. Purpose of collecting, storing, using personal information
Individuals agree and confirm that personal information is collected, stored, used for purposes related to recruitment and/or training such as assessing suitability for vacancies, communication, exchange, interview, agreement, appropriate job placement, training, record keeping at the Company for reference for future recruitment or other issues related to recruitment and training as required by law and the Company.

3. Organizations that collect, manage and use personal information
The individual agrees that the collection, management and use of personal information is carried out by FCQ.

4. Methods of collecting, storing and using personal information
The individual agrees that personal information is collected, stored, used by any means as applicable by FCQ from time to time, including but not limited to, collection, recording, confirmation, storage, editing, combination, access, retrieval, recovery, encryption, decryption, copying, sharing, transmission, provision, transfer, use of network space, equipment, electronic media, or other forms of transferring personal information domestically and/or abroad, deletion, destruction and other actions other related.

5. The start and end of the collection, storage and use of personal information
FCQ begins to collect, store and use personal information from the time the individual registers for recruitment, provides and shares with FCQ until the individual has a written request to withdraw his consent or according to the company's regulations. The withdrawal of the individual's consent in this case does not affect the legality of the activities of collecting, storing and using personal information previously provided to FCQ.

6. Rights and obligations of individuals
• Individuals have the rights of personal data subjects in accordance with the law, including the right to provide; access; correct; delete personal information; withdraw consent; request to restrict the processing of their personal data; oppose the processing of their personal data;

• Individuals are obliged to provide complete and accurate personal data when agreeing to allow the processing of personal data.

• Individuals have other rights and obligations as prescribed by law.

7. Other commitments on collecting, storing and using personal information
The Company will protect personal information in accordance with the provisions of Vietnamese law and the Company's regulations. In the process of collecting, storing and using personal information, the Company will apply necessary technical, security and confidentiality measures and in an appropriate capacity to protect personal data. However, individuals understand and recognize that no technical system or security measures are absolutely safe in the cyber environment, which may have potential risks arising, including but not limited to, the leakage of information, spread due to the technical system, the security system is attacked. If the Company has taken all measures as much as possible, the Company does not bear any responsibility to the individual.

8. Validity
The individual has read, understood and agreed to the entire content of the Agreement before submitting an application or applying for training to FCQ. This Agreement is effective from the date the individual takes the above actions until the individual requests to cancel the agreement or withdraw consent to process personal data. The Individual understands and agrees that this Agreement is also FCQ's notice for the processing of personal information; and the Company does not need to send any further notice to the individual in connection with the processing of this information.