Rights & Obligations

RIGHTS AND OBLIGATIONS OF THE PARTIES

The collection, management, and protection of personal data are top priorities of Nicetrip Travels Company Limited (hereinafter referred to as “Nicetrips,” “we,” “us,” or “our”). Our policies and procedures are designed to ensure that all personal data collected is processed in strict compliance with Decree No. 13/2023/ND-CP on Personal Data Protection, the Law on Cyber Information Security of Vietnam, and all other applicable laws and regulations of Vietnam.

Decree No. 13/2023/ND-CP and other relevant legal frameworks set out detailed requirements governing the collection, processing, use, disclosure, storage, transfer, and deletion of personal data (including both basic personal data and sensitive personal data), as well as the rights of data subjects to access, correct, or lodge complaints concerning their personal data.

This Privacy Policy explains how we collect, process, and protect the personal data of our customers. By providing your personal information to us or using the services offered by Nicetrips, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data in accordance with the terms set out in this Privacy Policy.

This Privacy Policy does not apply to the personal information of Nicetrips employees. Employees should refer to the Company’s internal policies or contact the Human Resources Department for further information regarding the processing of employee personal data.

For customers residing outside Vietnam or participating in international travel services, our data protection obligations may be supplemented by applicable international laws and regulations, depending on the relevant jurisdiction. Please refer to Appendix A of this Privacy Policy or contact us directly for further information.

PRIVACY POLICY

1. Definitions

Basic Personal Data

Personal Data refers to information in the form of symbols, written characters, numbers, images, sounds, or similar forms in a digital environment that is associated with or enables the identification of a specific individual.

Basic Personal Data includes, but is not limited to: full name, date of birth, gender, telephone number, contact address, email address, nationality, personal photographs, passport number, citizen identification number, travel history, and digital account information.

Anonymized data (to the extent that the individual can no longer be re-identified) shall no longer be considered Personal Data.

Sensitive Personal Data

Sensitive Personal Data refers to Personal Data relating to an individual’s privacy which, if violated or improperly disclosed, may directly affect the individual’s legitimate rights and interests.

In relation to Nicetrips’ Travel Services, Sensitive Personal Data may include: health information (including health conditions, medical records, special dietary requirements, allergies, or medical incidents occurring during a trip), genetic data, biometric data, real-time actual geographical location data, and other specific personal information contained in passports or visa application documents.

For the purpose of processing and fulfilling travel service bookings (including package tours, private/customized tours, visa services, flight ticket reservations, and hotel reservations), the collection of certain Basic Personal Data and Sensitive Personal Data is necessary and unavoidable.

All Personal Data shall be processed in accordance with this Privacy Policy and Decree No. 13/2023/ND-CP on Personal Data Protection. Nicetrips only requests the minimum amount of information necessary to provide high-quality Travel Services and ensure your safety throughout your journey.

2. Information We Collect

The types of Personal Data that Nicetrips collects from or about you depend on the transactions you conduct, the type of Travel Services you request (for example, package tours or customized tours), and the products or services you are interested in.

We collect Personal Data through lawful, transparent, and fair methods in accordance with applicable laws and regulations. The collection of Personal Data is conducted for business operations, the provision of Travel Services, and other legally permitted purposes.

Examples include:

• When you contact us to request information, consultation, or advice regarding Nicetrips’ Travel Services and products.
• When you register to receive newsletters, promotional updates, or communications through our official email channels or other authorized communication channels.
• When you enter into a service agreement, complete booking procedures, and participate in activities related to your travel arrangements.

During the consultation and booking process, you may be required to provide the following information:

• Full name;
• Date of birth;
• Passport number;
• Passport issuance date;
• Passport expiry date;
• Nationality;
• Permanent residence/contact address;
• Email address;
• Telephone number;
• Travel preferences;
• Emergency contact information; and
• Any health conditions that may affect tour activities or the safety of the travel group.

In accordance with Nicetrips’ Terms and Conditions, the provision of such information is necessary for us to process your booking and arrange your travel services.

Nicetrips does not proactively collect, and you should not voluntarily provide, credit card information or bank account details through unsecured or unencrypted communication channels.

All online payment transactions (if applicable) are processed through reputable third-party payment gateways that comply with the Payment Card Industry Data Security Standard (PCI DSS). Nicetrips only collects bank account information for the purpose of processing refunds or verifying financial transactions.

In addition to the information you provide directly to us, non-identifiable technical data may be automatically recorded when you visit our website or interact with us through electronic means.

Such technical information may include:

• Geographical location information;
• Cookies;
• IP address;
• Browser type;
• Website browsing behavior; and
• Interaction with digital marketing campaigns.

This technical information cannot be directly linked to your personal identity and is used to continuously improve service quality and enhance user experience.

The cookies used by Nicetrips cannot access Personal Data stored on your device.

By accessing and using the Nicetrips website, you acknowledge and agree that we may collect and record such technical data from your device.

If you wish to disable cookies, you may adjust the settings of your web browser. Please note that disabling cookies may affect your ability to access certain features or sections of our website.

Nicetrips will interact with you on an anonymous basis where possible and where there is no legal requirement to verify your actual identity.

Identity verification may be required when you contact us regarding an existing booking, service agreement, or contractual arrangement.

3. Methods of Personal Data Collection

Nicetrips primarily collects Personal Data directly from you through consultation forms, booking request forms, or direct interactions via email, telephone, social media channels, account registration processes, or customer support channels.

Personal Data may be provided directly by you or by an authorized representative (such as a person making a group or family booking). When providing Personal Data relating to any third party (for example, travel companions, family members, or emergency contacts), you confirm that you have obtained their lawful consent and authorization to provide such information to Nicetrips.

Completing a booking with Nicetrips, providing Personal Data through any communication channel, or continuing to use our website or Travel Services (all of which are voluntary actions) shall be deemed as your consent for Nicetrips to process your Personal Data in accordance with this Privacy Policy.

For Personal Data that is not requested or voluntarily submitted to Nicetrips (i.e., unsolicited Personal Data):

• We will assess whether such information is necessary for any lawful processing activities;
• If such information is determined to be unnecessary, we will securely delete, destroy, or permanently anonymize such data within a reasonable period in accordance with applicable laws and regulations.

4. Purposes of Personal Data Collection and Processing

The collection and processing of Personal Data are necessary primarily for the purpose of providing travel consultation, preparing quotations, and delivering Travel Services booked with Nicetrips.

Accordingly, your information may be shared with relevant third-party service providers, including:

• Airlines;
• Local tour operators;
• Hotels and accommodation providers;
• Transportation service providers;
• Insurance companies; and
• Visa processing agencies or immigration-related service providers.

In certain cases, third-party service providers may be granted limited access to relevant Personal Data solely for the purpose of directly supporting and fulfilling your travel itinerary.

If mandatory Personal Data is not provided or retained as required, Nicetrips may be unable to process your booking, provide Travel Services, or respond to your requests.

Where you provide Sensitive Personal Data (such as health conditions or dietary requirements) for a specific purpose, we will only use such information for that specific purpose unless you provide explicit consent for other uses.

Basic Personal Data may also be processed for other lawful purposes necessary to support Nicetrips’ business operations, including:

• System administration;
• Fraud prevention and security control;
• Marketing activities;
• Content improvement;
• Market research;
• Post-trip customer feedback surveys;
• Statistical analysis;
• Technical issue resolution; and
• Service quality management.

We may also retain, use, and disclose your Personal Data where necessary to comply with legal obligations under Vietnamese laws and regulations.

For example, your information may be provided to:

• Immigration authorities;
• Local police authorities (for temporary residence registration purposes);
• Embassies or consulates; or
• Tourism management authorities,

where such disclosure is legally required or lawfully requested by competent authorities.

Nicetrips shall retain Personal Data until the relevant processing purposes have been completed or until a valid request for deletion is received, unless a longer retention period is required under applicable laws and regulations (such as accounting regulations or contractual record-keeping requirements).

Your Personal Data will never be sold to any third party for commercial purposes.

Personal Data may only be transferred in connection with a merger, acquisition, corporate restructuring, or transfer of assets relating to Nicetrips.

If Nicetrips intends to use your Personal Data for purposes other than those stated in this Privacy Policy, we will obtain your explicit consent before conducting such processing activities.

5. Data Retention Period or Method for Determining the Data Retention Period

Customer Personal Data shall be retained by Nicetrip Travels for the period necessary to fulfill the purposes for which such data was collected and processed, including travel consultation, booking arrangements, provision of Travel Services, customer support, complaint handling, dispute resolution, and compliance with legal obligations.

Specifically:

• Information relating to transactions, service agreements, contracts, and supporting documents shall be retained for the period required under applicable sector-specific laws and regulations.
• Information used for customer care and marketing purposes shall be retained until the customer requests deletion, withdraws consent, or Nicetrip Travels determines that the purpose of processing has been completed.
• Where continued retention is required by law, or where retention is necessary for dispute resolution, complaint handling, fraud prevention, or responding to requests from competent state authorities, Personal Data shall be retained for the period prescribed by applicable laws and regulations.

Upon expiration of the applicable retention period, or when the purpose of Personal Data processing no longer exists, Nicetrip Travels shall delete, destroy, or anonymize Personal Data in accordance with Decree No. 13/2023/ND-CP on Personal Data Protection and other relevant legal regulations.

6. Data Storage and Security Measures

Personal Data is stored electronically within secure database systems and/or maintained in protected physical records at Nicetrips’ offices.

We implement appropriate organizational, technical, and operational security measures to protect Personal Data against unauthorized access, use, modification, disclosure, or destruction.

Nicetrips’ technical and operational security measures include, but are not limited to:

• Implementing strict access control policies for employees, limiting access to Personal Data only to authorized personnel on a “need-to-know” basis.
• Applying secure password authentication protocols and requiring periodic password updates.
• Using secure server systems and cloud database infrastructure that comply with applicable data security standards.
• Implementing data encryption, firewalls, and information technology security tools.
• Maintaining physical records in secured areas with restricted access.

Nicetrips prioritizes the security and protection of your Personal Data. However, please note that no method of internet transmission or electronic storage can guarantee absolute security at all times.

You also play an important role in protecting your Personal Data by managing your account credentials, maintaining password confidentiality, preventing unauthorized access to your devices, and logging out of the Nicetrips website after completing your session.

In the event of a security incident or Personal Data breach beyond our reasonable control, Nicetrips commits to promptly investigating the incident, activating appropriate incident response procedures, minimizing potential risks and damages, notifying affected Data Subjects, and reporting to competent authorities (specifically, the Cybersecurity and High-Tech Crime Prevention Department under the Ministry of Public Security) in accordance with Decree No. 13/2023/ND-CP on Personal Data Protection.

7. Measures for Protecting User Information and Data

Nicetrips applies appropriate technical and organizational measures to ensure the security and confidentiality of customers’ Personal Data throughout the processes of collection, storage, use, disclosure, sharing, and processing, in accordance with applicable laws and regulations.

Security measures include, but are not limited to:

• Applying technical solutions to protect information systems, servers, databases, and transmission networks against unauthorized access, use, disclosure, alteration, or destruction of Personal Data.
• Implementing access authorization mechanisms for Personal Data, ensuring that only authorized individuals or departments with legitimate work-related purposes may access such information.
• Applying authentication measures, access account management procedures, and maintaining access logs for data processing systems where necessary.
• Performing regular data backups and maintaining data recovery plans to ensure business continuity in the event of technical failures or cybersecurity incidents.
• Requiring employees, partners, and data processors acting on behalf of Nicetrips to comply with confidentiality obligations, process Personal Data only within the assigned scope, and implement Personal Data protection measures as required by law.
• Regularly reviewing, assessing, and updating security measures to identify, prevent, and minimize information security risks.

Where Nicetrips detects or has reasonable grounds to determine that a Personal Data incident has occurred which may affect the legitimate rights and interests of Data Subjects, Nicetrips shall proactively implement necessary measures to minimize damage, remedy the incident, and fulfill notification obligations to competent state authorities and affected Data Subjects in accordance with Decree No. 13/2023/ND-CP on Personal Data Protection and other applicable legal regulations.

To contribute to the protection of Personal Data, users are responsible for maintaining the confidentiality of their account information (if applicable), not sharing passwords or authentication information with others, and immediately notifying Nicetrips upon detecting signs of unauthorized access or potential risks to the security of their Personal Data.

8. Disclosure and Transfer of Personal Data

Due to the nature of Travel Services, Personal Data may need to be transferred to third-party partners located in Vietnam as well as in destination countries (for example, Japan or other countries included in your itinerary).

Information shall only be disclosed where we have reasonable grounds to believe that such disclosure is necessary to complete your booking, arrange your travel services, with your consent, or as required by applicable laws and regulations.

Nicetrips organizes tours worldwide; therefore, relevant Personal Data (including passport information and medical requirements) may be disclosed where necessary to hotels, local Destination Management Companies (DMCs), and transportation operators in your destination country.

We are committed to selecting reputable partners and incorporating Personal Data protection obligations into contractual agreements with third-party service providers.

9. Parties with Whom We Share Personal Data

We will not share your Personal Data with any party outside Nicetrips, except in the following circumstances:

• Direct service providers involved in delivering your travel arrangements, including airlines, hotels, local transportation companies, tour guides, and insurance providers.
• Professional advisors, including accountants, auditors, legal consultants, and lawyers, who require access to perform services on behalf of Nicetrips.
• Competent government authorities in Vietnam or foreign jurisdictions where disclosure is officially required by law.
• Other third parties where you have provided explicit consent.

We require all third parties receiving Personal Data to implement equivalent security measures and appropriate safeguards to protect your Personal Data.

10. Data Retention, Deletion, and Anonymization

Nicetrips retains your Personal Data for the period necessary to fulfill the purposes for which such data was originally collected or to comply with applicable legal obligations (such as mandatory retention periods for accounting records and contractual documents).

The retention period is determined based on factors including the volume of data, the nature of the data, the context of the services provided, legal obligations, and potential risks associated with the retention of such data.

Upon expiration of the applicable retention period, or when Personal Data is no longer necessary for our business operations, Nicetrips shall take reasonable measures to delete the data, destroy physical records, or permanently anonymize electronic data.

Where complete deletion from backup systems is technically restricted, appropriate technical isolation measures shall be implemented to prevent further processing or use of such data.

Unless otherwise agreed or where a valid deletion request has been received, Nicetrips shall retain your information throughout the period during which you maintain an active relationship with us.

11. Marketing Communications

We may use Basic Personal Data (such as your email address or telephone number) to send you marketing communications regarding new tour packages, special offers, promotions, or events from Nicetrips that may be of interest to you.

Such communications will only be sent where you have opted in to receive marketing communications or have not previously declined to receive such communications from our customer service department.

You may unsubscribe from marketing communications at any time by clicking the “Unsubscribe” link provided at the bottom of any promotional email or by contacting us at:

support@nicetriptravels.com

Please note that even if you opt out of receiving marketing communications, you will continue to receive operational notifications directly related to your existing bookings or Travel Services.

12. Rights and Obligations of Customers Regarding Personal Data

In accordance with Decree No. 13/2023/ND-CP on Personal Data Protection, you have the following statutory rights regarding your Personal Data:

• Right to be informed: The right to be informed about Personal Data processing activities carried out in relation to your data.
• Right to consent: The right to provide or refuse consent for the processing of your Personal Data.
• Right of access: The right to access, review, modify, or request correction of your Personal Data.
• Right to withdraw consent: The right to withdraw previously provided consent where applicable.
• Right to deletion: The right to request the deletion or removal of your Personal Data.
• Right to restriction of processing: The right to request restrictions on the manner in which your Personal Data is processed.
• Right to data provision: The right to request the provision of your own Personal Data.
• Right to object: The right to object to Personal Data processing in order to prevent or limit the disclosure or use of your data.
• Right to lodge complaints, denunciations, or initiate legal proceedings: The right to exercise legal remedies under Vietnamese law in the event of Personal Data protection violations.
• Right to claim compensation for damages: The right to request compensation in accordance with applicable laws where violations occur.
• Right to self-protection: The right to protect your Personal Data or request competent state authorities to protect your legitimate civil rights.

Customer Obligations

Customers are responsible for:

• Protecting their own Personal Data and requesting relevant organizations and individuals to protect their Personal Data.
• Respecting and protecting the Personal Data of other individuals.
• Providing complete and accurate Personal Data when consenting to the processing of such information.

Nicetrips does not charge fees for standard requests relating to access or correction of Personal Data.

However, where a request is clearly unfounded, repetitive, or excessive, we may notify you of a reasonable administrative fee before processing such request.

To protect your privacy, Nicetrips will carry out identity verification procedures before processing any request relating to your Personal Data rights.

Where you authorize a representative to submit a request on your behalf, a valid authorization letter or legal authorization document must be provided.

For inquiries or requests relating to correction of Personal Data, please contact us at:

support@nicetriptravels.com

If we refuse to fulfill your request, we will provide a written response explaining the legal grounds for such refusal.

13. Methods and Procedures for Data Subjects to Access, Modify, or Request Correction of Their Personal Data

Nicetrips respects and ensures customers’ rights to access, review, update, and request correction of Personal Data that Nicetrips stores and processes in accordance with applicable Personal Data protection laws.

Customers may exercise their rights by submitting a request to Nicetrips through the contact methods published on our website, including:

• Support email: info@nicetriptravels.com
• Support telephone number: (+81) 70 9188 1073
• Other online contact methods published by Nicetrips on its website (if applicable).

Request Handling and Processing Procedure

Step 1: Submission of Request

Customers submit a request to access, modify, or update their Personal Data to Nicetrips, providing necessary information for Nicetrips to identify the relevant data requiring review or adjustment.

Step 2: Verification of Data Subject Identity

Upon receiving a request, Nicetrips may conduct identity verification procedures to ensure that the request is submitted by the actual Data Subject or a legally authorized representative, thereby preventing unauthorized access or modification of Personal Data.

Step 3: Review and Processing of Request

After successful verification, Nicetrips shall review, update, or correct Personal Data in accordance with the customer’s request, to the extent appropriate for the purpose of processing and in compliance with applicable laws and regulations.

Step 4: Notification of Processing Results

Nicetrips shall notify customers of the outcome of their request within a reasonable period.

Where Nicetrips is unable to fulfill a request, we shall notify the customer of the reasons and relevant legal grounds in accordance with applicable regulations.

Where customers’ Personal Data has been provided to third parties for the purpose of delivering Travel Services (such as transportation providers, accommodation providers, insurance companies, or other related service providers), Nicetrips shall coordinate within the necessary scope to ensure that updates or corrections to such information are carried out in compliance with Personal Data protection requirements.

14. Methods and Procedures for Receiving Data Subject Requests Regarding the Deletion, Destruction, or Restriction of Processing of Provided Personal Data

Nicetrips respects the rights of Data Subjects to request the deletion, destruction, or restriction of processing of Personal Data provided during the use of our website, consultation processes, or registration for Nicetrips’ Travel Services, in accordance with applicable Personal Data protection laws and regulations.

Data Subjects may submit requests for deletion, destruction, or restriction of Personal Data processing through Nicetrips’ official communication channels, including:

• Email: info@nicetriptravels.com
• Support telephone number: (+81) 70 9188 1073

Request Receipt and Processing Procedure

Step 1: Submission of Request

The Data Subject submits a request to Nicetrips specifying the Personal Data to be deleted, destroyed, or the scope of processing activities to be restricted, together with necessary information for Nicetrips to identify the relevant Personal Data.

Step 2: Verification of Request

Nicetrips will review and verify the information of the requester to ensure that the request is submitted by the actual Data Subject or a legally authorized representative, thereby preventing unauthorized deletion, modification, or restriction of Personal Data processing.

Step 3: Assessment and Processing of Request

After successful verification, Nicetrips shall assess and process the request for deletion, destruction, or restriction of Personal Data processing within the scope permitted by applicable laws and the actual technical capabilities of our systems.

Where Personal Data must continue to be retained for the purpose of fulfilling legal obligations, providing registered Travel Services, resolving complaints or disputes, or protecting the legitimate rights and interests of Nicetrips and relevant parties, Nicetrips may refuse or restrict the deletion request and shall notify the Data Subject of the reasons in accordance with applicable regulations.

Step 4: Notification of Processing Results

Upon completion of the request processing, Nicetrips shall notify the Data Subject of the outcome within a reasonable period.

Where the request cannot be fulfilled, Nicetrips shall provide notification explaining the reasons and legal grounds for such refusal.

The deletion, destruction, or restriction of Personal Data processing shall be conducted by Nicetrips based on the principle of ensuring Data Subject rights while balancing legal obligations and the legitimate rights and interests of Nicetrips, service providers, and other relevant parties.

15. Third-Party Links

The Nicetrips website may contain links to external third-party websites.

Once you click on such links and leave our website, any information you provide on those third-party websites will no longer be under the control of Nicetrips or governed by this Privacy Policy.

We encourage you to review the privacy policies of any third-party websites you access.

16. Contests and Promotional Activities

When participating in contests, surveys, or promotional events organized by Nicetrips, you may be required to provide Personal Data for event administration purposes and for notifying winners.

Participation in such activities is entirely voluntary.

17. Email and Digital Communications

Personal Data contained in emails sent to Nicetrips (including email addresses and message content) shall only be used for responding to and processing your requests.

The transmission of information via email is carried out at your own responsibility. Nicetrips shall not be responsible for cybersecurity risks arising from your device or communication network before the information reaches our infrastructure.

19. Job Application Data

Personal Data collected from job applications (including resumes/CVs and cover letters) shall only be used by Nicetrips for evaluating candidate suitability, arranging interviews, and completing onboarding procedures following successful recruitment.

Personal Data from unsuccessful job applications may be anonymized for internal recruitment analysis purposes.

20. Changes to This Privacy Policy

Nicetrips reserves the right to amend or update this Privacy Policy at any time to reflect changes in our business operations, services, or legal requirements.

Any amendments or updates shall be publicly posted on our official website and shall become effective immediately upon publication.

21. Contact Information and Dispute Resolution

If you have any questions, feedback, or wish to exercise your rights regarding your Personal Data, please contact Nicetrips through the following channels:

NICETRIP TRAVELS CO., LTD

• Office Address: MD Complex Building, No. 28 Nguyen Co Thach Street, Nam Tu Liem District, Hanoi, Vietnam.
• Privacy Contact Email: info@nicetriptravels.com
• Website: https://nicetriptravels.com/

If you are dissatisfied with our response, you have the right to submit a complaint or report to the competent authority responsible for Personal Data protection:

Cybersecurity and High-Tech Crime Prevention Department – Ministry of Public Security of Vietnam.

Procedure for Receiving and Handling Data Subject Requests

Step 1: Receipt of Request

The Data Subject submits a request, feedback, or complaint relating to Personal Data processing through Nicetrips’ official communication channels.

The request should clearly specify the matter requiring assistance, relevant Personal Data, and the desired resolution.

Step 2: Verification of Requester’s Identity

Upon receiving the request, Nicetrips shall verify the requester’s identity to ensure that the requester is the Data Subject or a legally authorized representative.

Verification may be conducted by comparing the information provided during previous communications, consultations, or use of Travel Services.

Step 3: Assessment and Processing of Request

Nicetrips shall review the request, determine the scope of relevant Personal Data, and implement appropriate measures, including:

• Providing information regarding Personal Data processing activities upon a lawful request from the Data Subject;
• Updating or correcting inaccurate or incomplete Personal Data;
• Deleting, destroying, or restricting Personal Data processing where legal requirements are satisfied;
• Providing explanations and responses regarding inquiries, feedback, or complaints relating to Personal Data processing.

Step 4: Notification of Processing Results

After completing the review and processing of the request, Nicetrips shall notify the Data Subject of the result through an appropriate communication method within a reasonable period.

Where Nicetrips is unable to fulfill the request, we shall notify the Data Subject of the reasons for refusal or limitation, including circumstances where Personal Data must continue to be retained or processed for the purpose of:

• Complying with legal obligations;
• Providing or completing Travel Services registered by the customer;
• Resolving disputes or complaints;
• Protecting the legitimate rights and interests of Nicetrips or third parties.

Step 5: Complaints or Reports to Competent Authorities

Where the Data Subject disagrees with Nicetrips’ processing results or believes that their legitimate rights and interests relating to Personal Data have been violated, the Data Subject may submit a complaint, report, or request to competent state authorities responsible for Personal Data protection in accordance with Vietnamese laws.

Nicetrips commits to receiving and handling Personal Data-related requests transparently, ensuring Data Subject rights, and complying with Decree No. 13/2023/ND-CP on Personal Data Protection and other applicable regulations.

APPENDIX A

International Customers or Customers Traveling to Foreign Destinations

If you reside in the European Economic Area (EEA), the United Kingdom (UK), or other jurisdictions governed by specific Personal Data protection regulations (such as the EU General Data Protection Regulation – EU GDPR or UK GDPR), the processing of your Personal Data shall, in addition to compliance with Vietnamese laws, respect your fundamental rights under applicable regional regulations where Nicetrips provides Travel Services directly to you.

Legal Basis for Personal Data Processing

Nicetrips may process your Personal Data based on the following legal grounds:

• Contractual necessity: Processing is necessary for the performance of a travel contract entered into with you.
• Consent: You have provided explicit consent for specific Personal Data processing activities.
• Legal obligations: Processing is required to comply with statutory obligations in Vietnam or destination countries.
• Legitimate interests: Processing is necessary to ensure the security, safety, and quality of Travel Services without adversely affecting your fundamental rights and freedoms.

Customers residing in these jurisdictions may request access to their Personal Data, correction, deletion (“right to be forgotten”), restriction of processing, or data portability by contacting:

info@nicetriptravels.com