Privacy Notice for Visitors and Event Participants

Long Son Petrochemicals Co., Ltd respects your privacy. This notice explains how we process your personal data when you visit our premises or participate in our events, in compliance with Vietnam’s Personal Data Protection Laws.

1. Definitions

1.1. “We” means Long Son Petrochemicals Co., Ltd.

1.2. “You” means visitors to our premises and participants in our events and activities.

1.3. “Processing” covers collecting, recording, analyzing, storing, editing, disclosing, combining, accessing, retrieving, encrypting, decrypting, copying, sharing, transmitting, transferring, deleting, and destroying personal data.

1.4. “Vietnam Personal Data Protection Laws” refers to applicable Vietnamese statutes, including Decree 13/2023/NĐ-CP (as amended).

2. Purposes of Processing

2.1. We process your data to:

1. Perform contractual obligations when you visit or attend our events.
2. Manage and develop business operations, including website/app administration.
3. Control access to buildings and network resources for security, crime prevention, and evidence in investigations.
4. Establish, exercise, or defend legal claims.
5. Comply with legal obligations.
6. Protect vital interests (e.g. emergency contact, disease control).
7. Perform public-interest tasks or exercise official authority.

This list is illustrative and may be updated as necessary.

2.2. For consent‑based processing, we will inform you of specific purposes at the time of collection.

3. Personal Data We Collect

We collect data directly from you and indirectly from government agencies, SCG Group companies, partners, and trusted providers.

3.1. Event Participation

1. Registration & Participation: name, surname, age, address, contact number, email, chat/social media handles.
2. Video & Audio: photos and video recordings at events.
3. Event Details: information about activities you join or register for.
4. Payments: transaction details related to events (if applicable).

3.2. Premises Visits

CCTV Monitoring: images/video (no audio) in designated areas; signage will notify you.

Visitor Records: name, surname, phone, email, ID details, vehicle registration (if applicable), and Wi‑Fi registration info (first name, last name, phone, email).

3.3. Additional Data: we will notify you if more data is needed and comply with law.

3.4. Sensitive Data

1. Facial recognition or fingerprint data for identity verification.
2. Health data (allergies, vaccination) for events and compliance.
3. Unintended sensitive data (e.g. religious beliefs) will be redacted or not processed.
4. May include financial and location data.

3.5. If you share others’ data, you must have the rights and inform them of this notice.

4. Cookies

4.1. We use cookies and similar technologies per our Cookies Notice.

5. Consent, Withdrawal & Consequences

5.1. You may withdraw consent anytime; prior processing remains valid.

5.2. Withdrawal or refusal may prevent some processing.

5.3. Withdraw via provided channels or contact Section 11.

5.4. Under‑16s or incapacitated persons require guardian authorization.

5.5. Consenting on others’ behalf requires legal authority.

6. Retention Period

6.1. Retain as needed unless law requires longer.

6.2. Delete/destroy when no longer necessary.

6.3. If consent‑based, stop on withdrawal but retain for records.

7. Disclosure

1. SCG Group companies (inside & outside Vietnam) per report at https://scc.listedcompany.com/ar.html
2. Other parties (logistics, data processors, marketing, regulators, etc.) as necessary.

7.2. Recipients may have their own notices; please review them.

7.3. On restructuring/transfers, we may disclose to counterparties/advisors under compliance.

7.4. Recipients must protect data and only process as needed.

8. International Transfers

8.1. May transfer to SCG or others outside Vietnam as necessary.

8.2. Offshore storage by providers with appropriate security.

8.3. We comply with laws and protect your rights; recipients only process as needed.

9. Security Measures

9.1. Encryption, access controls, training to protect data.

9.2. Physical, technical, administrative safeguards with reviews.

9.3. Additional measures for sensitive data.

10. Your Rights & Obligations

10.1. Rights: be informed; consent/withdraw; access/correct; object to marketing; delete/anonymize; restrict processing; portability; complain/claim.

10.2. We will respond within a reasonable timeframe under law.

10.3. To exercise rights, contact compliance@lsp.com.

10.4. You must provide complete, accurate data when consenting.

11. Data Controller & DPO

11.1. Data Controller: Long Son Petrochemicals Co., Ltd.

11.2. Address: Hamlet 2, Long Son commune, Vung Tau city, Ba Ria – Vung Tau province.

11.3. Contact: compliance@lsp.com.

If this notice is amended, the new version will be posted on our website or other channels and take effect immediately.