Introduction

The General Department of Digital Economy (“we”, “us”, or “our”) has built the CamInv platform as an electronic invoicing system that enables business to create, send and receive invoice electronically, optimizing financial workflows. We operate this website, https://e-invoice.gov.kh To provide our Services, we take your privacy seriously and are committed to providing a safe online experience. We believe in being transparent about our practices, which is why we have provided this Privacy & Cookies Policy (“Policy”) to explain how we collect, use and disclose your information. This updated Policy gives you more control over your information and more clearly explains how we use it.

Information that we collect

• The contents of personal data obtained by us are your name, e-mail address, mobile phone number, etc. The purposes of processing are to provide you with feedback on incidents (including, but not limited to, questions, bugs or complaints) you raise when using our services, to provide you with updates on changes to our services (including bug fixes, new features and revised content) where you have already engaged with us by raising an incident, and to inform you when we launch new services that address the same capability as our previous services where you have engaged with us in the past.
• Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
• You are free to refuse our request for your personal data and are not subject to a legal obligation to provide such data, with the understanding that we may be unable to provide you with some of your desired services.

Why we collect your information

The legal basis for processing of your personal data includes (i) processing is necessary for the performance of a contract to which the data subject is a party, (ii) processing is necessary for compliance with a legal obligation which the data controller is subjected to, and (iii) processing is necessary for the legitimate interests of the data controller unless such interests are overridden by the interests or rights of the data subject. To be more precise, we have the purpose of legitimate interest of notifying you of any troubles (including but not limited to any security incidents).

How long we retain your information

We only retain collected information for as long as necessary to provide you with your requested service or comply with statutory retention period. What data we store, we will protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.

Sharing your information

In case where we provide third parties with personal data to the extent permissible by applicable laws, the recipients or the types of recipients are our group companies and service providers.

Accessing your information

• You can demand access to information on collected personal data concerning you, and you have the rights to receive, in a commonly used and machine-readable format, the information you have provided. You can also demand that your personal data be erased or rectified and processing of it restricted in cases where you have legitimate grounds.
• If you have consented to your personal data being processed by us, you can withdraw that consent at any time. Such withdrawal of consent shall not affect the lawfulness of processing based on the consent before its withdrawal.
• You have the rights to object to processing of your personal data if we use it based on a weighing of interest. In that case, we no longer use your personal information, unless we have an overriding interest in doing so. You have the rights to request the correction, deletion, or restricted processing of your personal information.

Keeping your information secure

We build security into our service to protect your information from unauthorized access, alteration, disclosure or destruction.

• We use encryption to keep your data private while in transit
• We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorized access to systems
• We use strong access control security measures to restrict access to GDDE employees, contractors and other third parties who need that information in order to process it.

Contact us

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information policy. If you have any questions about how we handle user data and personal information, feel free to contact us.

This policy is effective as of 12 Dec 2024.