Privacy notice for road users

VinFast Trading and Production JSC, Dinh-VU Cat Hai Economic Zone, Cat Hai Island, Cat Hai Town, Hai Phong, Vietnam, as well as development partners commissioned by it carry out vehicle tests for vehicle systems in the field of autonomous driving on public roads. It is not excluded that you or your vehicle were unintentionally captured in the resulting image and video recordings of the environment. This document serves to inform you about the processing of your personal information and about the rights to which you are entitled in this regard.


1. Controller:

VinFast Trading and Production JSC, Dinh-VU Cat Hai Economic Zone, Cat Hai Island, Cat Hai Town, Hai Phong, Vietnam


2. Contact and Data Protection Officer:

If you have any questions about the processing of your personal information, this notice or the assertion of your rights regarding your personal information, please contact our Data protection officer: [email protected], Attn: Data Protection Officer, VinFast Auto Canada Inc., 900 – 2025 Willingdon Avenue Burnaby, British Columbia, V5C 0J3.


3. Purposes:

Below you will find an overview of the purposes of the processing of your personal information in the context of the test drives carried out by us. We carry out test drives with autonomous vehicles in order to test the systems we have developed under real conditions and to identify potential for improvement. This in turn serves the further development of the techniques used and thus the avoidance of accidents. In order to be able to evaluate the test drives carried out and the measured values determined afterwards for research and development purposes, our test vehicles are equipped with a video system, among other things. In addition to the driver's cab and the instruments located there, the installed cameras are also used to record the vehicle's surroundings. In the course of this, road users, license plates or other personal information may be recognizable. The collection of this data during the test drives is necessary in order to identify other road users and to be able to react to them. This in turn serves the prevention of accidents and close encounters.

After the data has been collected, the faces and license plates are made unrecognizable by an automated procedure before further processing. The original recording will not be further processed and will be deleted after it has been made unrecognizable.

We delete your personal information when it is no longer necessary for the purposes we pursue and no other legal basis prescribes and/or legitimizes ongoing processing. If the latter applies, we will delete your personal information if the applicability of this other legal basis ceases to apply. We store your personal information for a maximum period of 10 years.


4. Receiver:

Internal recipients: Only those persons have access to your personal information who need it to achieve the purposes mentioned in section 3. This includes, in particular, project managers, department managers and other employees involved in the development of autonomous driving systems.

External recipients: We only pass on your personal information to external recipients if this is necessary for research purposes and for the further development of autonomous driving systems or if there is another legal permission/obligation. External recipients can be:

a) Processors External service providers that we use to provide services, for example in areas of our technical infrastructure. These processors are carefully selected by us to ensure that the legal requirements of personal information protection laws are also complied with by these service providers. The service providers may only use the data provided by us for the purposes specified by us.

b) Public bodies Authorities and state institutions to which we have to transfer personal information for legally compelling reasons, for example to the responsible administrative service provider usually accident investigation.


5. Transfer of data to third countries:

In the images created, faces and license plates are anonymized in an automated procedure in Canada before a transfer to third countries takes place. For the remaining cases, the following applies: if a personal information transfer takes place to another body or another group company whose registered office or place of personal information processing is not located in Canada, we shall ensure before the transfer that an adequate level of personal information protection exists with the recipient outside of legally permitted exceptional cases


6. Individual Rights

As an individual, you have the following rights under the applicable Canadian privacy laws, insofar as their respective legal requirements are met:

Deletion: In certain specific circumstances, you can request the deletion of your personal information.

Right to lodge a complaint with the competent Canadian privacy regulatory authorities: You have the right to lodge a complaint with a competent privacy regulatory authority if you believe that the processing of your personal information is unlawful.

Subject to applicable legal exceptions, in addition, you are entitled to the following rights:

Information: You have the right to obtain information about the personal information processed about you.

Correction and update: You can request the correction or the update of incorrect personal information about you. In addition, you can request the completion of incomplete personal information.