This Policy describes how personal data are collected, used, stored, publicly disclosed, or shared when you visit the Human Act Prize website, submit a nomination/apply to participate in the Prize, contact the Organizing Committee, or provide information through Human Act Prize channels.

Personal data are processed in accordance with the stated purposes, to the extent necessary, and in compliance with personal data protection laws. We do not consider all information in a Submission to be public; the scope of disclosure is determined based on each information field, the Submission content, and the purposes of the Prize.

This Policy may be updated to reflect changes in Human Act Prize operations or legal requirements. The updated version will be published on the website. Where changes introduce a new purpose of processing that requires consent by law, Human Act Prize will provide appropriate notice/obtain consent before processing data for that purpose.

By registering for the Prize, you consent to the collection and processing of your data in accordance with this policy. All information submitted during the application process will be treated as accurate and eligible for public disclosure. We reserve the right to publish this information in our program communications, including through websites, media outlets, social media platforms, and other distribution channels (including those of our partners). This information may also be shared with affiliated parties for press and media purposes, as outlined in the General Terms

Our website and online content may include links to third-party websites, plug-ins, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share your data. We do not control these third-party sites and are not responsible for their privacy practices. When leaving our website, we encourage you to review the privacy policies of every site you visit.

Whenever candidates provide personal data, we process and use such data in compliance with all applicable Vietnamese laws related to data protection.

This policy may be amended or updated from time to time. Any changes will be posted on this page, so please check back regularly.

We are VCCorp Joint Stock Company, registered in Vietnam with business registration number 0101871229. Our office is located at No. 1 Nguyen Huy Tuong Street, Thanh Xuan Trung Ward, Thanh Xuan District, Hanoi.

If you have any questions about this privacy policy or wish to request more information regarding our data protection practices, please contact us at:

FAO: Human Act Prize

Address: No. 1 Nguyen Huy Tuong Street, Thanh Xuan Trung Ward, Thanh Xuan District, Hanoi, Vietnam

Email: humanactprize@vccorp.vn

Phone: 024.73095555

Depending on the form and how you interact with Human Act Prize, the data collected may include:

• Identification and contact information, such as full name, employer/occupation, position/title (if any), email address, and telephone number;

• Information about a nominated/registered project, product/service, initiative, or individual;

• Images, videos, documents, statistics, descriptions, and other content voluntarily provided by the applicant;

• Communications, feedback, support requests, and the history of contact with Human Act Prize;

• Technical data necessary for the operation, safety, and security of the website/system, if such data are actually collected by the system.

Human Act Prize does not require users to provide sensitive personal data unless necessary for the purposes of the Prize. Applicants should not enter their own or others’ sensitive personal data into free-text fields unless genuinely necessary and supported by an appropriate basis.

3.3 We collect personal data either directly from you or via third parties (see Section 7: Third Parties).

We use various methods to collect data from and about you, including:

• Directly from you when you complete forms, submit a Submission, send emails or messages, make telephone calls, or otherwise communicate with Human Act Prize;

• From nominating organizations/individuals or project representatives when they provide information for nomination, registration, and administration of the Prize;

• From publicly available or other lawful sources where verification of a Submission is necessary, within the scope appropriate to the purposes of processing.

Data are processed for one or more of the following purposes:

• Receiving, managing, verifying, and processing Submissions;

• Contacting applicants, nominators, implementing organizations, or project contact persons;

• Appraising and judging entries, and organizing evaluation rounds and Prize events;

• Announcing results and communicating information about projects, participating organizations, and the Prize within the scope of the publicly disclosed content;

• Archiving public content in the Human Act Prize repository;

• Receiving feedback, addressing requests/complaints, and improving Human Act Prize activities;

• Ensuring safety and security, preventing fraud, responding to incidents, and complying with requests from competent government authorities or other legal obligations.

Human Act Prize publicly discloses personal data only to the extent necessary for the stated purposes and in line with the parts of the Submission designated as public. Internal contact information is not automatically published on the website or communication channels.

Data may be provided/shared, to the extent necessary, with:

• The Organizing Committee, operations team, and Appraisal Council/Judging Panel;

• VCCorp and technical, hosting, and system operation service providers in accordance with their assigned responsibilities;

• Press agencies, media organizations, and collaborating partners for the production/distribution of content concerning projects and the Prize, primarily regarding content already designated as public;

• Competent government authorities or other entities where required/permitted by law or necessary to protect lawful rights and interests in accordance with the law.

Sponsors or partners of Human Act Prize are not automatically entitled to use participants’ email addresses, telephone numbers, or other contact data for their own independent advertising/marketing activities. Processing for any other independent purpose must have an appropriate legal basis and be separately notified/subject to separate consent when required by law.

The Human Act Prize website may contain links, plug-ins, or content directing users to third-party websites/services. When you choose to access such services, the third party’s data processing activities may be governed by its own policies. Human Act Prize does not control the independent activities of third-party websites/services outside the scope of services managed by Human Act Prize or provided under contract to it.

6.2 We do not sell your data to third parties or permit third parties to contact you without your permission.

6.3 We only share your data with third parties when we are legally obligated to do so or have identified a valid legal basis. We may process your personal data without your knowledge or consent when required or permitted by law.

6.4 When you have explicitly given us your consent, we may also use your information:

6.4.1 To provide you with information about other activities similar to those you have previously shown interest in; and

6.4.2 To provide you with information about campaigns or initiatives that we believe may be of interest to you.

Please note: If you have agreed for us to share your information with third parties, we recommend reviewing their privacy policies. If you have concerns about how a third party uses your data, you should contact them directly.

Data are retained for periods appropriate to the purposes of processing, the Prize rules/procedures, and legal requirements. Publicly disclosed Submission content may be retained over the long term in the Human Act Prize repository for the purposes described in the General Rules.

For contact data and data used only for internal operations, Human Act Prize/VCCorp will consider deletion, destruction, anonymization, or cessation of processing once such data are no longer needed for their respective purposes, unless continued retention is required by law, for the resolution of complaints/disputes, or to protect lawful rights and interests.

You may exercise your rights concerning your personal data in accordance with applicable law, including the rights to be informed, access and correct data, withdraw consent, request deletion/restriction of processing, or object to processing where permitted by law.

Requests should be sent to the Human Act Prize contact point identified in Section 2. To protect data, we may request information necessary to verify your identity and the scope of your request. The fulfillment of requests may be subject to restrictions prescribed by law.

Human Act Prize/VCCorp implements appropriate organizational and technical measures to prevent unauthorized access, use, alteration, loss, or disclosure of data. Data access rights are restricted according to roles, responsibilities, and processing needs.

Upon discovering an incident involving personal data, the relevant parties are responsible for handling the incident and fulfilling notification/reporting obligations in accordance with applicable law.