THE PERSONAL DATA PROCESSING AND PROTECTION POLICY

The Customer agrees apply, coordinate and commit to comply with Policy on The Personal data processing and protection of Shinhan Securities Vietnam Co., Ltd (“SSV” or “Company”).

1. General rules:

1.1. The Personal data processing and protection Policy (“Policy”) is an integral part of Agreements, terms and conditions governing the relationship between Customer and SSV and other Company related to SSV.

1.2. This Policy applies to individual Customers only

1.3. SSV only collect, process and store Customer’s Personal data in accordance with law and within the agreement(s) between SSV and Customer.

1.4. This Policy’s purpose to help Customer understand the type of data SSV collect, reason for collection and how SSV process data

1.5. Depending on the role of SSV in specific situation is: (i) Personal Data Controller: (ii) Personal Data Processor; or (iii) Personal Data Controller-cum-Processor, SSV will exercise rights and responsibilities as provided for by law.

2. Definition of terms:

2.1. “Personal data” refers to electronic information in the form of symbols, letters, numbers, images, sounds, or equivalences associated with an individual or used to identify an individual. The personal data includes general personal data and sensitive personal data.

2.2. “Personal data processing” refers to one or multiple activities that impact on personal data, including collection, recording, analysis, confirmation, storage, rectification, disclosure, combination, access, traceability, retrieval, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction or other relevant activities.

2.3. “Customer” refers individual who access, register, use or related in the operation process, providing products, services of SSV.

2.4. “Shinhan Finance Group” includes: head quarters, office, subsidiaries, parents company, associate companies of SSV or any companies in Shinhan Finance Group.

3. Personal data SSV collect:

When Customer use official website of SSV, we do not collect and store any your personal data until Customer provide your information for use SSV services, register securities trading account, and/or provide information for the purpose of finding a job at SSV.

Customer’s Personal data collected by SSV includes but is not limited to:

• Full name

• Date of birth

• ID card/Passport

• Nationality

• Phone number

• Place of Residence

• Email address

• Bank account

• Personal image

• Information on related beneficiary

4. Purpose of processing Customer’s personal data:

The following are purpose for which personal data collected and processed by SSV:

a. Verify the accuracy and completeness of information provided by the Customer; identify or verify the identity of the Customers and perform the Customer authentication process;

b. Process Customer’s registration for any products/services proposed or provided by SSV;

c. Provide products, services proposed or provided by SSV or members of Shinhan Finance Group;

d. Contact the Customer to exchange information, handover statements, reports or other relevant documents;

e. Notify Customer about information: right, changing features of product/services of SSV;

f. Manage and evaluate business activities, improve and enhance the quality SSV’s products, services or perform marketing communication activities;

g. Market research, surveys and data analysis related to any products or services provided by SSV (whether performed by SSV or another third party with which SSV cooperates) that may be related to Customers;

h. Protect SSV's legal right and comply with relevant laws;

i. To response, comply internal policies of SSV, procedures and any rules, regulations, guidelines, directions or requirements issued by the Competent Authority in accordance with the law;

j. To protect or enforce SSV’s rights, including to collect fees, charges and/or recover any debt, under agreement between Customer and SSV;

k. For other purpose required or permitted by any law, regulation, guideline and/or Competent Authority;

l. To perform other activities related to the provision, operation, handling and management of SSV for products and services for Customers

m. To serve other purposes related to SSV's business activities that SSV deems appropriate from time to time; and

n. Other reasonable purpose related to the foregoing.

SSV will request permission from Customer before using Customer's personal data for other purposes than those stated in this Policy.

5. Customer’s rights and obligations related to personal data provided to SSV

5.1. Customer’s right: (i) Right to be informed; (ii) Right to give consent; (iii) Right to access personal data; (iv) Right to withdraw consent; (v) Right to delete personal data; (vi) Right to obtain restriction on processing; (vii) Right to obtain personal data; (viii) Right to object to processing; (ix) Right to file complaints, denunciations and lawsuits; (x) Right to claim damage; (xi) Right to self-protection and other related rights in accordance with law.

5.2. For security purposes, Customer may need to make its request in writing or use another method to prove and verify Customer's identity. SSV may require Customer to verify its identity before processing Customer's request.

6. Measures to protect Personal data

6.1. SSV considers Customer's personal data as the most important asset of SSV, and SSV ensures confidentiality, safety, compliance with the law, limits the consequences, and potential damage. (including but not limited to: data leakage or inappropriate data processing that damages the legitimate rights and interests of the Customer). The responsibility to protect the customer's personal data is a mandatory requirement that SSV sets for all employees

6.2. SSV carries out its responsibility to protect personal data in accordance with applicable laws with international-standard security best practices and regularly reviews and updates technical and management measures when processing Customer's personal data (if any)

7. Revision

SSV may amend, update or adjust this Policy SSV from time to time. Notice of any amendments, update or adjust will be updated, posted on https://shinhansec.com.vn/vi and/or notify to Customer through orther means of communication as SSV deems appropriate.