Privacy Privacy Policy
Privacy Policy Effective Date: October 26, 2023 Welcome to investorkitas.com, operated by Investor KITAS Indonesia. We are a visa agency […]
Privacy Policy
Effective Date: October 26, 2023
Welcome to investorkitas.com, operated by Investor KITAS Indonesia. We are a visa agency specializing in Indonesian visa services. Your privacy is paramount to us, and we are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, store, and share your personal data when you use our website and services. We comply with the provisions of Law No. 27 of 2022 concerning Personal Data Protection (UU 27/2022 PDP) in Indonesia, and the General Data Protection Regulation (GDPR) for clients residing in the European Union.
Data We Collect
To provide our visa services, we collect various types of personal data. This includes:
- Personal Identification Data: Full name, date and place of birth, nationality, gender, marital status, passport details (number, issue/expiry date, place of issue, passport photo), national identification numbers (if applicable), and visa history.
- Contact Information: Email address, phone number, residential address, and mailing address.
- Professional and Educational Data: Occupation, company name, job title, employment history, educational background, and professional qualifications relevant to visa applications.
- Financial Information: Bank account details (for refunds or specific visa types), transaction IDs for payments made for our services. We do not store full credit card details.
- Health Information: Limited health data such as medical certificates or declarations as required by Indonesian immigration authorities for specific visa categories (e.g., ‘fit to work’ certificates).
- Biometric Data: While we do not directly collect or store biometric data (like fingerprints or facial scans), we facilitate its submission to the Indonesian government or designated partners as part of the visa application process.
- Usage Data: Information about your interaction with our website, including your IP address, browser type, device information, pages visited, time spent on pages, and referring URLs. This data is collected via cookies and similar technologies.
Purpose of Data Collection
We collect your personal data for the following primary purposes:
- Visa Application Processing: To prepare, submit, and manage your visa applications with the relevant Indonesian government and immigration authorities.
- Service Delivery: To provide you with accurate consultation, processing, and support throughout your visa application journey.
- Communication: To contact you regarding your application status, respond to your inquiries, provide updates, and send important service-related notifications.
- Legal and Regulatory Compliance: To fulfill our obligations under Indonesian immigration laws, anti-money laundering regulations, and other applicable legal requirements.
- Payment Processing: To process payments for our services and manage refunds as necessary.
- Service Improvement: To analyze website usage and service performance to enhance our offerings and user experience.
- Marketing (with Consent): To send you relevant updates, newsletters, and promotional materials about our services, only if you have provided explicit consent. You can withdraw this consent at any time.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Generally, we will retain your data for the duration of your visa application process, and for a subsequent period of up to 7 years to comply with legal obligations (e.g., immigration record-keeping, financial audits) or to resolve potential disputes. After this period, your data will be securely deleted or anonymized.
Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your data with:
- Indonesian Government and Immigration Authorities: This is essential for the processing and approval of your visa applications.
- Third-Party Service Providers: We engage trusted third parties to perform functions on our behalf, such as payment processors, IT and hosting providers, document delivery services, and professional advisors (e.g., lawyers, accountants). These providers are contractually bound to protect your data and only use it for the purposes we specify.
- Affiliated Companies: If Investor KITAS Indonesia operates as part of a larger group, your data may be shared with affiliated entities for operational purposes, provided they adhere to this Privacy Policy.
- Legal Requirements: We may disclose your data if required to do so by law, court order, or governmental regulation, or to protect our rights, property, or safety, or that of others.
- International Transfers: For EU clients, your data will be transferred outside the EU to Indonesia for visa processing. We ensure that such transfers are protected by appropriate safeguards, such as standard contractual clauses (SCCs) approved by the European Commission, to ensure your data receives an adequate level of protection.
Your Rights as a Data Subject
Under UU 27/2022 PDP and GDPR, you have the following rights regarding your personal data:
- Right to Information: The right to be informed about the collection and use of your personal data.
- Right to Access: The right to request access to the personal data we hold about you.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): The right to request the deletion of your personal data under certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected).
- Right to Restriction of Processing: The right to request that we limit the processing of your personal data in certain situations.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to Object: The right to object to the processing of your personal data, particularly for direct marketing purposes.
- Right to Withdraw Consent: The right to withdraw your consent at any time where processing is based on consent.
- Right to Lodge a Complaint: For EU clients, the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
To exercise any of these rights, please contact us using the details provided below.
Data Security
We implement robust technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure servers, firewalls, and regular security audits. Our staff are trained on data protection principles and are bound by strict confidentiality obligations. While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the “Effective Date” at the top. We encourage you to review this policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy, our data practices, or wish to exercise your data subject rights, please contact our Data Protection Officer at:
Email: sales@balipremiumtrip.com
Investor KITAS Indonesia (investorkitas.com)