Notice version 2026-10-10
Personal data notice
How the library processes personal data through this public catalogue and how to exercise your rights.
Who is responsible
The library operating this catalogue determines the purposes of personal-data processing for its library services. Contact the library for its data protection arrangements.
Data processed
The data depends on the services you use and the information you provide.
- Patron accounts
- Identity, library card and contact information supplied for registration and account management; sign-in credentials and session records.
- Library services
- Loans, reservations, requests, payments or deposits, reading progress and annotations, reviews and messages where you use those features. Optional photo or face-based services require their own information and choices.
- AI search and virtual librarian
- Your queries, messages and conversation context when you use AI features. Avoid including sensitive data that is unnecessary for your request.
- Technical and visit data
- Operational and security logs needed to run the service. Optional visit statistics, browser identifiers and configured analytics are used only after your analytics choice.
- Consent decisions
- Document versions, purposes, decision method, language, timestamps and random references; the receipt may include a validated signed-in patron number. Consent records omit raw IP addresses and user-agent strings.
Purposes
- Provide catalogue search, account access and the library services you request.
- Respond to your requests and send service-related information.
- Protect accounts and the service, maintain operational records and evidence your consent decisions.
- Measure visits and improve the service only when you allow optional analytics.
Basis for processing
Processing for a requested service follows the applicable service terms and legal obligations. Where consent is required, the library must explain the purpose and obtain it separately. This notice is information, not a request for blanket consent. Cookie consent applies only to optional analytics and is not permission to process AI conversations or sensitive data for unrelated purposes.
Who receives data
Authorised library staff and service providers may access data needed for their work. Data may be provided to competent authorities where legally required. Public contributions you choose to publish may be visible to other visitors.
Services and transfers outside Vietnam
The software integrates the services below. Actual processing depends on enabled features and the library’s deployment settings.
- OpenAI: United States. The default provider for AI queries and virtual-librarian context when enabled. The library can configure another compatible provider; ask the library which provider is active.
- Internet Archive / Open Library: United States. Server-side book-cover lookup uses bibliographic identifiers; it does not intentionally send your patron account. The library server may fetch or redirect to the cover provider.
- Google Books: United States. Google Books is a fallback source for book covers and receives bibliographic lookup requests.
Analytics recipients are disclosed in Cookie settings. Contact the library for the confirmed processor list, hosting locations and applicable transfer arrangements before providing sensitive information.
Retention
Library service and consent records follow the library’s records retention schedule and applicable legal requirements. Contact the library for the approved periods for each record type. Browser-storage periods are listed in the Cookie policy; those periods do not define server-side retention.
Your rights
- Be informed about how your personal data is processed.
- Give, refuse or withdraw consent where processing relies on consent.
- Access your data and request corrections or provision of your data.
- Request deletion of your data, subject to applicable exceptions.
- Request restriction of processing or object to processing as provided by law.
- Lodge complaints, make denunciations, bring proceedings and seek compensation where applicable.
- Protect your rights yourself or through an authorised representative.
Requests are handled under applicable law, including identity verification and exceptions for records the library must retain.
PDPD reference: Decree 13/2023/NĐ-CPContact and exercise your rights
Send your request through the library’s published channels and describe the data and action concerned. Include your consent receipt ID if relevant. The library can direct your request to the person responsible for personal-data protection.
The library operating this catalogue
Ask at the library service desk for the current contact for personal-data requests.
Security
The service uses access controls and security measures to protect records. No system can remove every risk. Contact the library promptly if you suspect unauthorised access to your account or data.
Cookies and optional analytics
Read the cookie catalogue or change your analytics choice at any time. Refusing analytics does not prevent access to the catalogue.
Changes to this notice
The version above identifies this notice. Changes to the notice or cookie policy require a new cookie decision; changes to the configured analytics recipients also prompt you again.