Personal Data Protection Policy

Last updated: October 28, 2026 • Compliant with Decree 13/2023/ND-CP

1. Purpose and Scope

This policy applies to all candidates submitting employment applications online via the Shantek ATS platform (careers.shantek.vn). We strictly adhere to Vietnam Decree 13/2023/ND-CP on Personal Data Protection.

2. Categories of Data Collected

Under data minimization principles, Shantek only collects information necessary to evaluate job qualifications:

  • Full legal name
  • Email address and contact phone number
  • City / Country of residence
  • Professional profile links (LinkedIn, Portfolio, GitHub)
  • Attached resume/CV documents (Education, work history, skills)
  • Cover letter (if provided voluntarily)

* We DO NOT collect citizen ID numbers, bank details, biometric data, religious beliefs, or sensitive personal data during initial application.

3. Purposes of Data Processing

  • Evaluating applicant suitability for advertised vacancies
  • Contacting candidates for interviews and communicating recruitment outcomes
  • Compliance with statutory employment and labor records

4. Security Measures & Cloud Storage

All resume documents are stored in private Cloudflare R2 vaults with zero public endpoints. Transport is encrypted via HTTPS/TLS 1.3 with rigorous binary signature validation.

5. Data Retention & Candidate Rights

Submissions for non-hired candidates are retained for up to 180 days (6 months) for future talent matching, after which files are safely purged and anonymized.

Under Decree 13/2023/ND-CP, candidates maintain full rights to access, rectify, or request immediate erasure of their submitted data by contacting:

Email: [email protected] (Phòng Quản Trị Nhân Sự & Bảo Mật Dữ Liệu Shantek)