Privacy Policy
Effective Date: 17 October 2024
PT SECOM INDONESIA ("Company", "we", "our", or "us") is committed to protecting the privacy and personal data of individuals in accordance with applicable laws and regulations, including Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and international standards such as ISO/IEC 27001.
This Privacy Policy outlines how we collect, use, disclose, and safeguard personal data in the course of our business operations.
1. Purpose
This Policy establishes our principles and practices for the protection of personal and sensitive data. It reflects our commitment to ensuring the confidentiality, integrity, and availability of personal data processed by the Company and its subsidiaries.
2. Scope
This Policy applies to all employees, management, contractors, vendors, and authorized users who access or process personal data on behalf of the Company. It covers data collected from customers, employees, business partners, and other stakeholders.
3. Principles of Data Protection
Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and in a transparent manner.
Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes.
Data Minimization: Only data necessary for the intended purpose is collected.
Accuracy: Reasonable steps are taken to ensure data is accurate and up to date.
Storage Limitation: Data is retained only as long as necessary for the purposes for which it was collected.
Integrity and Confidentiality: Data is secured against unauthorized access, loss, or destruction.
Accountability: We are responsible for and able to demonstrate compliance with data protection obligations.
4. Legal Basis for Processing
Consent from the data subject
Performance of a contract
Compliance with legal obligations
Protection of vital interests
Legitimate interests pursued by the Company
5. Data Collection and Consent
We obtain clear and informed consent where required by law.
Special care is taken when processing data of children or minors, including obtaining parental or guardian consent as necessary.
6. Data Subject Rights
Under applicable laws, individuals have the right to:
Access their personal data
Request correction or deletion of inaccurate or outdated data
Object to or restrict processing under certain conditions
Withdraw consent at any time
Request data portability in a structured, commonly used, and machine-readable format
Requests can be submitted to our Data Protection Officer (contact details below).
7. Data Security and Breach Response
Encryption and access controls
Regular security assessments
Incident response and breach notification procedures in compliance with legal requirements
8. Third-Party Processors
When engaging third-party service providers to process personal data on our behalf, we ensure:
Binding agreements are in place
Compliance with applicable data protection laws
Adequate safeguards are implemented
9. Training and Awareness
We provide regular training to employees, contractors, and relevant stakeholders to ensure awareness and compliance with data protection obligations.
10. Roles and Responsibilities
Data Protection Officer (DPO): Oversees compliance, manages data protection risks, and serves as the point of contact for data subjects and regulators.
Employees and Users: Must comply with this Policy and report any data protection concerns or incidents.
11. Compliance and Enforcement
Non-compliance with this Policy may result in disciplinary action and legal consequences in accordance with applicable laws and internal regulations.
12. Policy Review
This Policy is reviewed annually or as needed to reflect changes in legal, regulatory, or operational requirements. Updates will be communicated to all relevant parties.
Contact Us
For questions or concerns regarding this Policy or your personal data, please contact our Data Protection Officer at:
Address: Mangkuluhur City Tower One, 8th Floor, Jl. Jend. Gatot Subroto Kav. 1-3, Jakarta Selatan 12930, Indonesia