Privacy Agreement

Customers voluntarily and agree to confirm their consent to the processing of members’ personal data in accordance with Decree 13/2023/ND-CP with the following contents:

Article 1: Personal data processed

Customers understand, confirm and agree that Lalatour is allowed to process basic personal data and sensitive personal data of customers, authorized persons and other related parties of customers, if provided or contacted by Lalatour, including personal data updated, modified and supplemented at each time, in which:

Basic personal data includes: Full name, date of birth, gender, place of birth, permanent address, contact address, nationality, image, phone number, email, types of identification documents, information about digital accounts, personal data reflecting activities, history of activities on cyberspace, other information and data associated with individuals or helping to identify an individual specific and other information and data as prescribed by law; and
Sensitive personal data according to Clause 4, Article 2 of Decree 13/2023/ND-CP.

Article 2: Purpose of processing personal data

Customers agree and confirm that their personal data as stated in Article 1 of this Agreement is processed for the following purposes:

Authentication, customer identification
Contacting to provide product and service information to customers who register for membership and taking care of and supporting customers during the use process (such as calling; sending emails, …).
Providing tourism services to customers.
To issue invoices and documents as prescribed by law.
Following the request of competent State agencies.

Article 3: Organizations and individuals processing personal data

Customers agree that the processing of customers’ personal data is carried out by Lalatour and organizations and individuals cooperating/associating with Lalatour to process personal data.

Article 4: Methods of processing personal data

Customers agree that customers’ personal data is processed by any method according to Lalatour’s policies and/or applications from time to time, including but not limited to, collecting, recording, confirming, storing, editing, combining, accessing, retrieving, recalling, encrypting, decrypting, copying, sharing, transmitting, providing, transferring, using cyberspace, devices, electronic means or other forms to transfer personal data domestically or internationally, deleting, destroying and other related actions.

Article 5: Time of commencement and termination of personal data processing

Lalatour begins to perform personal data processing activities from the time it is provided until it receives a written request to terminate personal data processing from a competent State agency or the customer has a decision to withdraw consent after the customer has completed the procedures as prescribed by law or according to Lalatour’s applicable policies at each time.

Article 6: Rights and obligations of customers regarding personal data processing

Customers have the right to provide, access, edit, delete personal data, withdraw consent to the processing of personal data, restrict or object to the processing of their personal data, unless otherwise provided by law.

Customers are responsible for providing complete and accurate personal data as requested by Lalatour for the convenience of caring for and supporting members.
Customers have other rights and obligations as prescribed by law.

Article 7: Other commitments on personal data processing

In the process of processing personal data, Lalatour and related parties will apply necessary and appropriate technical, security and confidentiality measures to protect customers’ personal data. However, customers understand and acknowledge that no technical system or security and confidentiality measures are absolutely safe and online transactions, cyberspace and other forms of personal data processing always have potential risks, including but not limited to data leakage, dissemination, exploitation and appropriation. In this case, customers agree that Lalatour and related parties shall not bear any responsibility to customers and customers’ related parties (if any).

Article 8: Validity

This agreement is an inseparable part of other documents, contracts and papers that customers execute with Lalatour.