Executionlab

Introduction

Intelligent T&E Co., Ltd. (trading as “Executionlab”, hereinafter “the Company”, “we”, “us”) respects your privacy and is committed to protecting the personal data of individuals who visit the executionlab.asia (the “Website”), including individuals who submit a job application or send contact information through the Website.

This Policy is prepared in accordance with Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/ND-CP detailing certain articles and measures for implementation of the Law on Personal Data Protection.

For processing purposes under this Policy that require consent, your consent is expressed by ticking the corresponding checkbox on the relevant form before submitting your job application or contact information. You are free not to tick the checkbox; however, in that case the Company may not have a lawful basis to receive and process your application or inquiry.

Personal Data Controller and Processor

• Name: Intelligent T&E Co., Ltd.
• Enterprise Registration No: 0313565209
• Address: 3rd Floor, Indochina Building, No. 4 Nguyen Dinh Chieu Street, Tan Dinh Ward, Ho Chi Minh City, Vietnam
• Personal data protection contact point: contact@executionlab.asia

Who This Policy Applies To
This Policy applies to:

• Individuals who submit a job application for a position advertised by the Company through the Website (“Candidates”);
• Individuals who submit an inquiry or request for consultation through the Website's contact form (“Contacts”).
• This Policy does not apply to the personal data of employees, interns or collaborators who have already entered into an employment contract or cooperation agreement with the Company. Their personal data is processed under the Company's internal Personal Data Processing Agreement and Personal Data Protection Policy.

Personal Data Collected

For Candidates: full name; date of birth; contact address; personal photo (if included in the CV/application); phone number; email address; educational qualifications; certificates; work history; reference contact details; and any other information voluntarily provided in the application.
For Contacts: full name, email address, company name (if any), and the content provided in the contact message.

Purpose and Legal Basis for Processing
For Candidates: the Company processes Candidates' personal data for recruitment, assessment of qualifications, interview arrangements, and management of recruitment records. This processing is carried out on the basis of the Candidate's consent.

For Contacts: the Company processes Contacts' personal data to receive, respond to, and discuss the cooperation or service needs raised in the contact message. This processing is carried out on the basis of the Contact's consent.

If a Candidate is subsequently hired and becomes an employee of the Company, or a Contact becomes a client/partner under a signed contract or agreement with the Company, further processing of personal data will be carried out under the legal basis and personal data policy applicable to employees or clients/partners of the Company (which may include performance of a contract/agreement as permitted by law).
The Company does not use Candidates' or Contacts' personal data for any purpose other than those stated in this Policy (for example, advertising or marketing purposes), unless separate, specific consent is obtained for that purpose.

Sharing of Personal Data

The Company does not sell or rent Candidates' or Contacts' personal data to third parties for commercial purposes. Personal data may be shared, to the extent necessary, with:
The Human Resources department (for Candidate data) or the Administration department (for data) for processing applications or inquiries;
Technology infrastructure and hosting service providers engaged by the Company to operate its recruitment system and Website (currently Google, via the Google Workspace/Google Drive platform), subject to appropriate data protection terms;
Competent state authorities where required by law.

Cross-Border Transfer of Personal Data

Where personal data is stored or processed on a platform whose servers are located outside the territory of Vietnam, the Company complies with all applicable requirements on cross-border transfer of personal data under the Law on Personal Data Protection and Decree 356/2025/ND-CP.

Data Retention Period

Candidate applications: retained for a maximum of 2 years from the date the Company receives the application, unless the Candidate is hired (in which case the data continues to be processed under the policy applicable to employees) or a different period is required by law or in connection with the exercise of the data subject's rights.
Contact information: retained for as long as necessary to process and respond to the inquiry; where no further cooperation arises, the Company reviews and deletes/destroys the data within a reasonable period after the exchange concludes.

Personal Data Protection Measures

The Company applies appropriate administrative, technical and organizational measures to protect personal data against unauthorized access, use, disclosure, alteration or destruction, including access controls, encryption of sensitive data (where applicable), periodic backups, and personal data protection awareness training for relevant personnel.

Cookies and Automated Data Collection

The Website does not use analytics, behavioral tracking, or advertising cookies. The Website may use strictly necessary technical cookies to ensure its basic functions operate properly (if any); such cookies are not used to identify or track individuals and are not subject to the consent requirement under applicable law.

Your Rights as a Data Subject
As data subjects, Candidates and Contacts have the rights provided under the Law on Personal Data Protection, including:

• The right to be informed about the processing of their personal data;
• The right to consent or refuse to consent to the processing of their personal data;
• The right to withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out before withdrawal);
• The right to access, request a copy of, or request correction of their personal data;
• The right to request deletion, restriction of processing, or to object to processing, in the cases provided by law;
• The right to file a complaint or denunciation, initiate legal proceedings, or claim damages as provided by law.

To exercise the above rights, or if you have any questions about this Policy, please contact the Company using the contact details provided in the Personal Data Controller and Processor section

Changes to This Policy

Last updated: September 2026
The Company may update this Policy from time to time to reflect changes in its personal data processing activities or applicable law. The updated version will be posted on the Website together with the corresponding update date.