Privacy policy
TÜV NORD Vietnam Co., Ltd. (“TÜV NORD Vietnam”, “we”) respects your privacy. This policy explains how we collect, use, store, share and protect personal data when you visit https://tuvnord.vn and use the forms and tools on the website. It is based on the Law on Personal Data Protection No. 91/2025/QH15 (in force since 1 January 2026) and Decree No. 356/2025/ND-CP detailing its implementation, which replaced Decree No. 13/2023/ND-CP.
1. Data controller
The controller of personal data collected through the website is TÜV NORD Vietnam Co., Ltd., head office: 14th Floor, HCMCC Building, 249A Thuy Khue Street, Tay Ho Ward, Hanoi, Vietnam; phone: 2982 2773 42 48+; email: moc.dron-vut@manteiv.
2. Personal data we collect
- Data you provide via the contact/quote form: name, email, phone number, company, service of interest, preferred office and your message.
- Technical data: IP address, browser and device type, time of access, pages viewed and session cookies required for the website to work.
- Usage statistics: only with your consent, via Google Analytics 4 (see section 5).
- Anti-spam data: Google reCAPTCHA assesses form interactions to distinguish people from automated programs.
The certificate verification portal (/en/cert) displays certificate data of certified organisations (organisation name, address, scope, standard, validity). vCard pages display the business contact details of TÜV NORD Vietnam staff. We do not intentionally collect sensitive personal data through the website; please do not include such data in your message.
3. Purposes of processing
- Receiving and answering contact and quote requests and providing information about our certification, validation, verification, assessment and training services.
- Operating and securing the website and preventing spam, fraud and unauthorised access.
- Analysing website traffic to improve content and user experience (only with consent).
- Enabling third parties to verify the validity of certificates issued by TÜV NORD Vietnam.
- Complying with legal obligations and requests from competent authorities.
We do not sell personal data and currently do not use it for marketing or advertising.
4. Legal basis and consent
When you submit a form, you voluntarily provide the data and consent to our processing it to answer your request. Analytics cookies are activated only after you consent in the cookie banner. Essential cookies and processing needed to keep the website secure, perform a contract or meet legal obligations are carried out where the law permits. Information in the certificate verification portal is published under the certification contract and the rules applicable to certification bodies. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.
5. Cookies and Google Analytics
The website uses essential cookies (session, form protection, storing your cookie choice) and analytics cookies (Google Analytics 4). Google Analytics is integrated via Google Consent Mode and sets analytics cookies only after you consent. We do not currently use marketing cookies. See the Cookie policy for details; you can change your choice at any time via the “Cookie settings” link in the footer.
Without your consent, Google Analytics sets no cookies; under Google Consent Mode, Google may only receive cookieless signals for aggregated statistics.
6. Recipients
- Authorised staff of TÜV NORD Vietnam (Hanoi head office, Ho Chi Minh City and Vung Tau branches): form submissions are stored in the website database and emailed to the responsible team.
- Companies of the TÜV NORD GROUP (Germany and other countries) where necessary to deliver the service you request.
- Technical service providers: hosting and email services; Google (Google Analytics, Google reCAPTCHA).
- Competent authorities where required by law.
7. Cross-border transfers
Personal data may be transferred outside Vietnam, namely to Google (whose servers may be located in the United States and other countries) when Google Analytics and Google reCAPTCHA are used, and to TÜV NORD GROUP companies in Germany where needed for service delivery. Such transfers are carried out in accordance with the Law on Personal Data Protection and its implementing regulations, with appropriate safeguards.
8. Retention
- Contact form data: kept as long as needed to handle your request and manage the customer relationship, then deleted or anonymised when no longer needed, unless the law requires longer retention or the data becomes part of contract records.
- Cookies: for the periods listed in the Cookie policy.
- Certificate data: kept and published for the period required by the rules applicable to certification.
9. Your rights
Under personal data protection law you have the right to:
- be informed about the processing of your personal data;
- give or refuse consent, and withdraw consent;
- view, access and obtain a copy of your personal data;
- request correction of inaccurate data;
- request deletion of data and restriction of processing;
- object to processing;
- lodge complaints, denunciations or lawsuits and claim damages as provided by law.
To exercise these rights, email moc.dron-vut@manteiv or use our Contact page. We may ask you to verify your identity before acting on a request and will respond within the time limits set by law. If you are not satisfied with our response, you may complain to the competent personal data protection authority.
10. Security
We apply appropriate technical and organisational measures to protect data, including HTTPS encryption, protection of forms against cross-site request forgery (CSRF) and spam, role-based administrative access and restricting access to staff who need the data for their work. TÜV NORD Vietnam staff are bound by confidentiality under internal rules and the TÜV NORD GROUP Code of Conduct.
11. Links to other websites
The website may link to third-party websites (for example the TÜV NORD GROUP website). This policy does not apply to those websites; please refer to their own privacy policies.
12. Changes to this policy
We may update this policy when our processing activities or the law change. The new version applies from the date it is published on this page.
Effective date: 17 October 2026.