PERSONAL DATA PROTECTION POLICY
(Effective from 05/10/2026)
While You use the features or perform actions on the website dmx.vn (the "Website") of Dien May Xanh Investment Joint Stock Company (the "Company" or "DMX"), we may collect and process certain personal data of Yours in our role as the Personal Data Controller. This Policy is a general agreement between You and us regarding the processing of personal data.
1. What personal data do we collect from You?
Depending on the features You use (e.g., subscribing to the IR newsletter, accessing the Website, logging in to attend the General Meeting of Shareholders), we may collect:- Basic personal data: full name, phone number, address, email, identity card/citizen identity card/passport number, personal photos, and data related to shareholder status.
- Sensitive personal data: images of identity card/citizen identity card/passport; Your location data determined through location services (if You grant access permission to the device).
- Other data: technical data (IP address, Cookies), Website access history.
2. Purposes of data processing
Your data is processed for the following groups of purposes:- Purposes for performing agreements/transactions (Mandatory): Registering, issuing and managing shareholder/user accounts; identifying and verifying eligibility to attend the General Meeting of Shareholders; answering inquiries and providing technical support; fulfilling reporting and information disclosure obligations as required by State authorities; preventing fraud and impersonation of shareholder status.
- Extended purposes (Optional): Sending Investor Relations (IR) newsletters, dividend payment notices, business activity updates, and analysis to improve the Website experience. Before collecting Your personal data for this group of purposes, DMX will notify You in advance, and You have the right to consent or refuse consent to the processing of such personal data.
3. Personal data retention period
Your personal data will be stored and secured until: (i) You submit a valid request to delete/destroy personal data; (ii) We have completed the purpose of processing the personal data; or (iii) The retention period under securities, enterprise and other relevant laws expires, whichever occurs first.4. Transfer of personal data
To serve the lawful purposes stated above, DMX may share Your data with:- Affiliated companies and subsidiaries within the DMX.
- Partners providing technology infrastructure services and online General Meeting of Shareholders systems; telecommunications and delivery service partners; auditors; DMX's legal advisors.
- Competent State authorities upon lawful request.
- Personal data processing service providers for DMX under contract.
5. Your Rights and Obligations
- Rights: You have the right to be informed about personal data processing activities; the right to withdraw consent; the right to request access, provision, correction/request correction, or request deletion, restriction, or object to the processing of Your personal data through the Account Settings feature or by sending a written request to DMX's email/office address stated in Section 7 of this Policy.
Note: Your withdrawal of consent, request for deletion or restriction of data processing may result in DMX being unable to continue providing the corresponding features or fulfilling Your requests/benefits (e.g., unable to verify identity to grant access to the online General Meeting of Shareholders). In such cases, DMX shall be exempted from all related liability.
Obligations: You must ensure that all information provided to DMX is accurate and lawful. If You provide data of a third party (such as a person authorized to attend the General Meeting of Shareholders), You represent and warrant that You have obtained their lawful consent for You to provide their personal data to DMX for the purposes stated in Section 2 of the Policy.
6. Security and Disclaimer
DMX endeavors to apply strict technical and organizational security measures to maintain the safety of Your Personal Data. However, in cases of unauthorized disclosure arising from sophisticated cyberattacks by hackers/malicious actors due to objective causes not attributable to DMX's fault, You agree to release us from all liabilities and unforeseeable damages arising therefrom.7. Contact information
If You have any questions or requests regarding personal data protection rights, please contact us via:- Dien May Xanh Investment Joint Stock Company.
- Head office: 128 Tran Quang Khai, Tan Dinh Ward, Ho Chi Minh City
- Executive office: Lot T2-1.2, D1 Street, Saigon Hi-Tech Park, Tang Nhon Phu Ward, Ho Chi Minh City.
- Email: investor@dienmayxanh.com
(This Policy may be updated and amended from time to time and will be announced and publicly disclosed on the Website.)