Personal data notice
Version 2026-11 · under Vietnam Decree 13/2023/ND-CP on personal data protection
1. Controller and processor
PEB Studio is the controller of the personal data on this system.
2. Data processed
- Accounts: name, e-mail, position, phone, department, rights, sign-in times, IP address at registration and sign-in.
- Workers (when the company uses MES): code, name, date of birth, start date, team, position, phone, e-mail, photo, qualifications and training, welder stamp.
- Work history: who reported production, QC inspections, packing, receiving, erection, and site photos.
- Company sign-up: company name, contact person, e-mail, phone, message.
3. Purposes
- Give and manage accounts and rights, secure sign-in.
- Run projects, production, quality, packing and erection; traceability required by quality rules and contracts.
- Per-user billing.
The data is not used for advertising and not sold to anybody.
4. Storage and security
The data is stored on the server of region SG, kept apart for each company; backups are encrypted in transit. Passwords are hashed with Argon2id and cannot be read by anybody.
5. Retention
- Accounts: while in use; an erasure removes the contact data and closes the account.
- Production, quality, packing and erection records (with the name of who did the work): as long as the company and the construction quality law require.
- Closed company sign-up requests: 365 days.
- Security logs: 24 months.
6. Your rights
- Know, see and download your data (My account → Personal data).
- Ask to correct or erase your data, withdraw consent, object to or restrict processing.
- Complain to the company or to the authority.
Withdrawing consent does not affect earlier processing nor the records the company has to keep by law.
7. Contact
Contact the administrator of the company.