1. Introduction & Scope
DIKO VINA Co., Ltd. ("DIKO VINA", "we", "us", or "our"), the Vietnam design center of DIKO Co., Ltd. (Busan, Republic of Korea), operates the website diko.com.vn and related online services (collectively the "Service"). Our branch DIKO MIEN TAY is also covered by this policy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or submit an inquiry through our contact form. It applies to all visitors and prospective clients worldwide.
We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR), Vietnam's Personal Data Protection Decree 13/2023/ND-CP (PDPL), and the Republic of Korea's Personal Information Protection Act (PIPA).
2. Information We Collect
When you submit our contact form, we collect the following information you provide voluntarily: company name, contact person name, business email address, phone number (optional), country, project type, and project description.
We also collect certain technical information automatically: IP address, browser user-agent string, referring URL, and the date/time of your visit. This data is used solely for security, spam prevention, and aggregate analytics.
We use cookies and similar tracking technologies: (a) strictly necessary cookies required for the website to function; (b) Google Analytics cookies to measure anonymous aggregate traffic patterns; and (c) Google reCAPTCHA cookies to protect our contact form from automated abuse. See Section 9 for details on managing cookies.
3. Purposes of Processing
We process your personal data for the following purposes: (a) to respond to your inquiry and communicate with you about potential stamping mold design projects; (b) to evaluate B2B business opportunities and assess technical feasibility; (c) to send relevant service updates or follow-up communications, but only where you have given your explicit consent; and (d) to fulfil our legal obligations and resolve disputes.
We do not use your data for automated decision-making or profiling that produces legal effects.
4. Legal Basis for Processing
Under GDPR and equivalent frameworks, we rely on the following legal bases: (a) Consent — when you tick the privacy consent checkbox on our contact form, you consent to us processing your contact details to respond to your inquiry (GDPR Art. 6(1)(a); PDPL Art. 11); (b) Legitimate interests — we have a legitimate interest in protecting our website from spam and abuse using reCAPTCHA and server-side rate limiting, which does not override your fundamental rights (GDPR Art. 6(1)(f)).
You may withdraw your consent at any time by contacting us at privacy@diko.com.vn. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
5. Data Retention
We retain personal data collected through the contact form for up to 3 years from the date of last contact or the date the inquiry was closed, whichever is later. This period reflects the typical B2B sales cycle in the automotive stamping industry and our legitimate need to maintain records of project discussions.
Server access logs, including IP addresses, are retained for a maximum of 90 days for security purposes, after which they are automatically deleted.
You may request earlier deletion of your data at any time (see Section 8). Where we are required by law to retain data for a longer period, we will inform you accordingly.
6. Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share your data only with the following carefully selected service providers who process data on our behalf under appropriate data processing agreements:
• Supabase Inc. — database hosting and backend API (data stored in Singapore region). Purpose: persistent storage of contact form submissions.
• Resend Inc. — transactional email delivery. Purpose: forwarding your inquiry and our confirmation email.
• Google LLC (reCAPTCHA) — bot and spam protection. Purpose: verifying that form submissions originate from a human user.
• Google LLC (Analytics) — anonymous website traffic measurement. Purpose: understanding aggregate visitor behaviour to improve the site.
We may also disclose your data when required by applicable law, court order, or governmental authority.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence. Specifically: Supabase stores data in Singapore; Resend processes email data in the United States; Google processes analytics and reCAPTCHA data across its global infrastructure.
Where such transfers involve data originating from the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or on adequacy decisions, to ensure your data receives an equivalent level of protection.
For data originating in Vietnam, we comply with the cross-border data transfer requirements of Decree 13/2023/ND-CP. For data originating in Korea, we comply with PIPA Chapter IV provisions on cross-border transfers.
8. Your Rights
Depending on your country of residence, you may have the following rights regarding your personal data:
• Right of access (GDPR Art. 15 / PDPL Art. 25 / PIPA Art. 35) — you may request a copy of the personal data we hold about you.
• Right to rectification (GDPR Art. 16 / PDPL Art. 26 / PIPA Art. 36) — you may request correction of inaccurate or incomplete data.
• Right to erasure / "right to be forgotten" (GDPR Art. 17 / PDPL Art. 27 / PIPA Art. 36) — you may request deletion of your personal data.
• Right to restriction of processing (GDPR Art. 18) — you may request that we restrict processing in certain circumstances.
• Right to data portability (GDPR Art. 20) — you may request your data in a structured, machine-readable format.
• Right to object (GDPR Art. 21) — you may object to processing based on legitimate interests.
• Right to withdraw consent — you may withdraw consent at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at privacy@diko.com.vn. We will respond within 30 days (or within the statutory period required by applicable law). We may ask you to verify your identity before processing your request.
10. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint, please contact our privacy team:
Email: privacy@diko.com.vn
Postal address (Vietnam Design Center): DIKO VINA Co., Ltd., 55B5 Cay Keo St., Tam Phu ward, Thu Duc District, Ho Chi Minh City, Vietnam. Tel: +84-70-4082-4175
Postal address (Korean Headquarters): DIKO Co., Ltd., 3F #301, 39 Chaeyukgongwon-ro, Geumjeong-gu, Busan, Republic of Korea. Tel: +82-51-582-4175
We will acknowledge your request within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your country.