PT MOL Indonesia (including its affiliates as well as the subsidiaries thereof, collectively referred to as "PT MOL", "Company", or "We", "Our", "Us") is committed to protecting the rights to privacy of Our Customers and we take Our data protection responsibilities with the utmost seriousness. We require the service provider, contractor, supplier, distributor, and other business partners as well as the employees thereof (collectively referred to "You", "Your" or "Customer") to comply with the provisions as set out under this Privacy Policy. This Privacy Policy sets out the details of the information that We may collect from Our Customers and how We may use said information. Please read this Privacy Policy thoroughly.

Processing Activity

PT MOL may collect, maintain, or use the Personal Data which includes but is not limited to:

Aktivitas Pemrosesan — PT MOL dapat mengumpulkan, menjaga, atau menggunakan Data Pribadi yang termasuk namun tidak terbatas pada:

Personal Identification Data (Data Identifikasi Pribadi) — Full name, e-mail address, gender, home address, phone number, date of birth, nationality, signature, utility bills, photographs, and video or voice recording of You.
Sensitive and Biometric Personal Data (Data Pribadi yang bersifat Sensitif dan Biometrik) — PT MOL may process Sensitive Personal Data when permitted by the applicable laws and regulations or upon Your consent, such as biometric information — for instance, to verify Your identity by comparing facial scan data extracted from Your selfie or video with the photo in Your government-issued identity document.
Government Identifiers (Identifikasi Pemerintahan) — Government-issued identity documents such as passports, national identification number, national identity card details, and driver license numbers.
Institutional Information (Identifikasi Kelembagaan) — Proof of legal formation, such as Deed of Establishment and its amendments that include personal identification data about the Board of Directors.
Financial Information (Informasi Keuangan) — Bank account information, payment card information, the name of the issuer, the identification number of the account or payment card, verification code, expiration date, virtual account data, credit scoring data, source of funding, and source of wealth.
Transaction Information (Informasi Transaksi) — Information about the transaction You make on Our services, such as the name of the recipient, purchases or orders, interests, types of services sought, and details of payments or transfers made.
Employment Information (Informasi Pekerjaan) — Job title, department, and any employment-related details.
Communications (Komunikasi) — Survey responses, communications with Us, including but not limited to call recordings with Our customer services team.
Business Contact Information (Informasi Kontak Bisnis) — E-mail address, country, religion, billing addresses, shipping addresses, labels, phone numbers, and contact list.

1. Interpretation

"Applicable Law" shall mean all laws and regulations applicable in the Republic of Indonesia on data protection (or are relevant to the transfer of Personal Data) such as Law Number 27 of 2022 on Personal Data Protection ("UU PDP").

"Data Breach" shall mean any loss; or unauthorized use, copying, modification, disclosure, destruction of, or access to; Personal Data.

"Data Protection Authority" shall mean a public institution that is directly responsible to the President of the Republic of Indonesia to ensure the Personal Data Protection and the compliance of the Company toward the laws and regulations in relation to Data Protection.

"Direct Marketing" shall mean a form of marketing technique of a product conducted by direct communication between the seller and the buyer without any intermediary.

"Enforcement Authority" shall mean any public authority empowered by applicable Indonesian Law to implement and enforce the law.

"Legitimate Interest" shall mean one of the many obligations of the Company that shall be performed by taking into account the purpose, necessity, and balance between the interests of the Company and the rights of the Customer, in accordance with Article 20 paragraph (2) of UU PDP.

"Personal Data" shall mean any information relating to an identified or identifiable Customer ("Personal Data Subject") transferred under this Privacy Policy.

"Personal Information" shall mean any information that the Customer voluntarily submits to the Company, which identifies the Customer personally, including contact information, such as name, address, e-mail address, company name, phone number, and other information about the Customer or the business thereof.

"Processing" shall mean any operation or set of operations that are performed on Personal Data or on sets of Personal Data, whether or not by automated means. Processing includes but is not limited to the collection, use, transfer and disclosure of Personal Data.

"Sensitive Personal Data" shall mean Personal Data classified by law as sensitive data, which the Company may only Process upon the Customer's explicit consent or as the law may require.

2. To whom We may disclose or transfer the Personal Data

2.1. Mitsui O.S.K. Lines, Ltd. (PT MOL Indonesia) company's ecosystem, including but not limited to Our parent company, and Our foreign affiliates / subsidiaries located overseas (if any).

2.2. Our Business Partners — We may disclose Your Personal Data to the companies that We have partnered with to offer or enhance products and services for the Customers or prospective Customers, including but not limited to financial institution partners, telecommunication companies, sponsors, co-branded partners and other third parties that We conduct joint marketing or promotion with.

2.3. Third parties required by law — We may be required to disclose or share Your Personal Data in order to comply with legal or regulatory obligations. This includes any law enforcement agency, court, regulator, government authority or other third party where We believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect Our rights, and the rights of any third party or individuals' personal safety, or to detect, prevent, or otherwise address fraud, security, or safety issues.

2.4. Professional Advisory — Including but not limited to lawyers, technicians, auditors, appraisers who are connected and assist in running the business in the scope of bringing or defending any legal or tax claims.

2.5. Succession of Business — If there is any transaction between companies pertaining to Our business to which this Privacy Policy is applicable, such as acquisition, merger or change of business entity, Personal Data may also be transferred to the successor of the business to the extent permitted by applicable Laws.

3. Assignee of rights and obligations

Third parties as Our assignee, in the event of any reorganization, merger, business transfer, whether in whole or in part, sale, purchase, joint venture, assignment, transfer or other disposition of all or any portion of Our business, assets or stock or similar transaction; will comply with this Privacy Policy to respect Your Personal Data.

4. International transfer of Personal Data

We may disclose or transfer Your Personal Data to third parties or servers located overseas (if any), which the destination countries may or may not have the same data protection standards. We take steps and measures to ensure that Your Personal Data is securely transferred and that the receiving parties have in place suitable data protection standards or other derogations as allowed by laws. We will request Your consent where consent to cross-border transfer is required by law.

5. Rights as Personal Data Subject

Subject to the laws and regulations applicable in the Republic of Indonesia, You are entitled to the rights mentioned below in relation to Your privacy and the protection of Your Personal Data:

Right to Access — You have the right to request and obtain confirmation of Your Personal Data being processed as well as the copies thereof.
Right to Rectify — You have the right to rectify Your Personal Data which are incomplete, inaccurate, misleading, or not up-to-date, as well as to add to it.
Right to Delete — You have the right to request that We delete or de-identify Your Personal Data that We Process, unless otherwise required for Us to comply with Our legal obligation or to establish, exercise, or defend legal claims.
Right to Object — You have the right to object, for reasons relating to Your situation, to certain Processing of Your Personal Data.
Right to Restrict — You have the right to restrict or temporarily restrict the Processing of Your Personal Data, provided that there are valid grounds for doing so.
Portability Right — You have the right to request and obtain Personal Data which You have provided to Us in a structured, commonly used, and machine-readable format.
Right to Withdraw — You have the right to withdraw Your consent at any time. Exercising this right does not affect the lawfulness of the Processing based on the consent given before the withdrawal.
Right to Lodge a Complaint — You are entitled to complain to the Data Protection Authority where You believe Our Processing of Your Personal Data has been conducted unlawfully or non-compliantly.

We will not share Your personal information with any uninterested parties, except in the following circumstances:

We may share Your personal information with our affiliates when We, at Your request, render services, or respond to or process Your inquiries, or help resolve Your problems.
We may disclose Your personal information by operation of law to relevant law enforcement authorities or other government authorities as required by applicable law.
We may also disclose Your personal information when We need to investigate or prevent or take other action regarding any actual or suspected illegal activity or other misconduct, or to protect the rights, property, or safety of Us, the Customer, or others.

7. How We Use Information We Collect

We use the information We collect only in compliance with this Privacy Policy.
We never sell Your personal information to any third party.

8. Grounds for Processing Personal Information

If We ask You to provide personal information to comply with a legal requirement or to perform a contract with You, We will make this clear at the relevant time and advise You whether the provision of Your personal information is mandatory or not.
If We collect and use Your personal information in reliance on Our legitimate interests, We will make clear to You at the relevant time what those legitimate interests are.

9. Updating this Privacy Policy

We may update or amend this Privacy Policy from time to time in order to comply with the law or to meet Our changing business requirements. When We update Our Privacy Notice, We will take appropriate measures to inform You, consistent with the significance of the changes We make.

10. Our contact details

If You wish to contact Us to exercise the rights relating to Your Personal Data or if You have any queries about Your Personal Data under this Privacy Policy, please contact Us at:

PT MOL INDONESIA

Menara Astra 30th Floor, Jl. Jenderal Sudirman No. Kav. 5-6, Karet Tengsin, Kecamatan Tanah Abang, Jakarta Pusat 10220, Indonesia

Telephone: (62-21) 8665 6855

E-mail: IDADM@molgroup.com

Versi Bahasa Indonesia

PT MOL Indonesia (termasuk afiliasi dan anak perusahaannya, secara bersama-sama disebut sebagai "PT MOL", "Perusahaan", atau "Kami") berkomitmen untuk melindungi hak privasi Pelanggan Kami dan Kami bertanggung jawab sepenuhnya atas perlindungan data dengan serius. Kami mewajibkan penyedia jasa, kontraktor, pemasok, distributor, dan rekan bisnis lainnya serta karyawannya (secara bersama-sama disebut sebagai "Anda", atau "Pelanggan") untuk mematuhi ketentuan sebagaimana diatur dalam Kebijakan Privasi ini. Kebijakan Privasi ini mengatur rincian informasi yang Kami kumpulkan dari Pelanggan Kami dan bagaimana Kami menggunakan data tersebut. Silakan baca Kebijakan Privasi ini dengan menyeluruh.

Definisi

"Hukum yang Berlaku" adalah seluruh peraturan perundang-undangan yang berlaku di Republik Indonesia tentang perlindungan data, seperti Undang-Undang Nomor 27 Tahun 2022 tentang Perlindungan Data Pribadi ("UU PDP").

"Pelanggaran Data" adalah setiap kerugian; atau penggunaan, peniruan, modifikasi, pengungkapan, penghancuran, atau akses yang tidak sah; ke Data Pribadi.

"Otoritas Perlindungan Data" adalah lembaga publik yang secara langsung bertanggung jawab kepada Presiden Republik Indonesia untuk memastikan Perlindungan Data Pribadi dan kepatuhan Perusahaan terhadap peraturan perundang-undangan terkait.

"Data Pribadi" adalah setiap informasi yang berkaitan dengan Pelanggan yang teridentifikasi atau dapat diidentifikasi ("Subjek Data Pribadi") yang berpindah berdasarkan Kebijakan Privasi ini.

"Pemrosesan" adalah setiap operasi atau serangkaian operasi yang dilakukan pada Data Pribadi, baik dengan cara otomatis maupun tidak — termasuk pengumpulan, penggunaan, pemindahan, dan pengungkapan Data Pribadi.

"Data Pribadi Sensitif" adalah Data Pribadi yang diklasifikasikan oleh hukum sebagai data sensitif, yang hanya akan Diproses oleh Perusahaan setelah mendapatkan persetujuan tegas dari Pelanggan.

Hak-hak sebagai Subjek Data Pribadi

Dengan tunduk pada peraturan perundang-undangan yang berlaku di Republik Indonesia, Anda memiliki hak-hak berikut:

Hak untuk Mengakses — meminta dan mendapatkan konfirmasi mengenai Data Pribadi Anda yang sedang diproses serta salinannya.
Hak untuk Melakukan Perbaikan — memperbaiki Data Pribadi Anda yang belum lengkap, tidak tepat, keliru, atau belum diperbarui.
Hak untuk Menghapus — meminta agar Kami menghapus atau melakukan de-identifikasi Data Pribadi yang Kami Proses.
Hak untuk Menolak — menolak, atas dasar alasan yang berkaitan dengan keadaan Anda, dilakukannya Pemrosesan tertentu atas Data Pribadi Anda.
Hak untuk Membatasi — membatasi atau sementara membatasi Pemrosesan Data Pribadi Anda.
Hak Portabilitas — meminta dan mendapatkan Data Pribadi yang telah Anda berikan kepada Kami dalam format yang terstruktur dan dapat dibaca mesin.
Hak untuk Mencabut — mencabut persetujuan Anda kapan pun.
Hak untuk Mengajukan Pengaduan — mengajukan pengaduan ke Otoritas Perlindungan Data.

Detail kontak Kami