Privacy Privacy Policy
“`html Privacy Policy Last Updated: October 26, 2023 Welcome to retirementkitas.com. This Privacy Policy outlines how Retirement KITAS Indonesia (“we,” […]
“`html
Privacy Policy
Last Updated: October 26, 2023
Welcome to retirementkitas.com. This Privacy Policy outlines how Retirement KITAS Indonesia (“we,” “us,” or “our”) collects, uses, processes, stores, and protects your Personal Data when you use our website and services related to Indonesian visa applications, particularly for retirement KITAS. We are committed to protecting your privacy and ensuring the security of your Personal Data in compliance with the Indonesian Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi – “UU 27/2022 PDP”) and the General Data Protection Regulation (GDPR) for our clients located in the European Union.
1. Data We Collect
We collect various types of Personal Data to provide our visa application services effectively. This data may include, but is not limited to:
- Identity Data: Full name, date of birth, place of birth, nationality, gender, passport number, passport issue and expiry dates, passport photo, visa history, and other government-issued identification details.
- Contact Data: Residential address, email address, phone number (mobile and landline).
- Financial Data: Bank account statements, proof of funds, income statements, and other financial records required for visa eligibility.
- Biographical Data: Marital status, family details, educational background, professional history (if relevant for specific visa types).
- Health Data: Medical certificates, health declarations, or other health-related information required by Indonesian immigration authorities for visa applications.
- Communication Data: Records of your correspondence with us via email, phone, or chat.
- Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access our website.
- Usage Data: Information about how you use our website, products, and services.
We primarily collect data directly from you when you fill out forms, communicate with us, or use our services. Some technical and usage data may be collected automatically as you interact with our website.
2. How We Use Your Data
We use your Personal Data for the following purposes:
- To process your visa applications and related documentation with Indonesian immigration authorities.
- To communicate with you regarding your application status, requirements, and updates.
- To provide customer support and respond to your inquiries.
- To fulfill our contractual obligations to you.
- To comply with legal obligations and regulatory requirements in Indonesia and other relevant jurisdictions.
- To improve our website, services, and user experience.
- For internal record-keeping and administrative purposes.
- To send you marketing communications about our services, only if you have provided explicit consent.
3. Legal Basis for Processing
Our legal bases for processing your Personal Data are as follows:
- Performance of a Contract: To fulfill our obligations to you when providing visa application services.
- Legal Obligation: To comply with Indonesian immigration laws, financial regulations, and other legal requirements.
- Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications. You have the right to withdraw your consent at any time.
- Legitimate Interests: For our legitimate business interests, such as improving our services, preventing fraud, ensuring network and information security, provided these interests do not override your fundamental rights and freedoms.
- Public Interest/Vital Interests: In specific cases, particularly concerning health data required for visa processing, where it is necessary for reasons of substantial public interest or to protect your vital interests.
4. Data Sharing and Disclosure
We may share your Personal Data with the following parties:
- Indonesian Government Authorities: Primarily with the Directorate General of Immigration of Indonesia and other relevant government bodies for visa processing.
- Service Providers: Third-party service providers who assist us in operating our business, such as payment processors, IT support, cloud hosting providers, and couriers. These providers are obligated to protect your data and only use it for the purposes specified by us.
- Professional Advisors: Lawyers, accountants, and other professional advisors.
- Legal Requirements: When required by law, court order, or governmental regulation.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your Personal Data may be transferred to the acquiring entity.
We do not sell your Personal Data to third parties.
5. Data Retention
We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purpose of processing. For instance, data related to visa applications and financial transactions will be retained for periods mandated by Indonesian law (e.g., 5-7 years for financial records) or for the duration of any potential legal claims.
When your Personal Data is no longer required, we will securely delete or anonymize it.
6. Data Security
We implement robust technical and organizational measures to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Using SSL/TLS encryption for data in transit on our website.
- Access Controls: Restricting access to Personal Data to authorized personnel only, based on the principle of least privilege.
- Firewalls and Network Security: Implementing firewalls and other network security protocols.
- Regular Audits: Conducting regular security assessments and vulnerability scans.
- Staff Training: Providing regular data protection and privacy training to our employees.
While we strive to protect your Personal Data, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
7. Your Data Protection Rights
Depending on your location and applicable laws (UU 27/