Privacy Privacy Policy
“`html Privacy Policy for balivisagermany.com Effective Date: October 26, 2023 Welcome to balivisagermany.com, operated by Juara Holding. We are an […]
“`html
Privacy Policy for balivisagermany.com
Effective Date: October 26, 2023
Welcome to balivisagermany.com, operated by Juara Holding. We are an Indonesian visa agency dedicated to assisting clients, including those from the European Union, with their visa applications for Indonesia. Your privacy is paramount to us. This Privacy Policy outlines how we collect, use, process, store, and protect your personal data, in compliance with Indonesia’s Personal Data Protection Law (UU 27/2022 PDP Indonesia) and the European Union’s General Data Protection Regulation (GDPR) where applicable to EU clients.
Who We Are (Data Controller)
Balivisagermany.com, operated by Juara Holding, acts as the Data Controller responsible for your personal data collected through our website and services. Our contact details are provided at the end of this policy.
Data We Collect
To provide our visa services, we collect various types of personal data. The specific data collected will depend on the visa type and requirements, and may include:
- Identity Data: Full name, date of birth, place of birth, gender, nationality, marital status, passport details (number, issue/expiry dates, place of issue), national ID number (if applicable), previous visa history.
- Contact Data: Email address, phone number, residential address, mailing address.
- Financial Data: Bank account details, payment card details (processed securely via third-party payment gateways; we do not store sensitive payment card information directly).
- Biographical Data: Occupation, employer details, educational background, travel history, purpose of visit, intended duration of stay, accommodation details in Indonesia.
- Sensitive Personal Data: In specific cases required for certain visa types, we may collect health information (e.g., medical certificates), biometric data (e.g., fingerprints, facial scans if mandated by immigration authorities), or religious beliefs (if explicitly stated in your passport or visa application requirements). We process such data with explicit consent or as strictly necessary for legal obligations.
- Technical Data: IP address, browser type and version, device information, operating system, time zone setting, location data, and other technology on the devices you use to access our website.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
Purpose and Legal Basis for Data Processing
We collect and process your personal data for the following purposes and under the following legal bases:
- To Provide Visa Services: To process your visa application, communicate with Indonesian immigration authorities, embassies, or consulates, and fulfill our contractual obligations to you. (Legal Basis: Performance of a Contract, Legal Obligation).
- Communication: To respond to your inquiries, provide updates on your application status, and deliver customer support. (Legal Basis: Performance of a Contract, Legitimate Interest).
- Legal and Regulatory Compliance: To comply with Indonesian immigration laws, anti-fraud regulations, and other applicable legal requirements. (Legal Basis: Legal Obligation).
- Website Improvement: To analyze website usage, improve our services, and enhance user experience. (Legal Basis: Legitimate Interest, Consent for non-essential cookies).
- Marketing: To send you promotional materials or newsletters about our services, only with your explicit consent. (Legal Basis: Consent).
- Security: To maintain the security and integrity of our systems and prevent fraud. (Legal Basis: Legitimate Interest).
For sensitive personal data, processing is strictly based on your explicit consent, or where necessary for reasons of substantial public interest (e.g., public health), or where required by law for specific visa types.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain client data for a period of up to five (5) years after the completion of our services to comply with legal obligations (e.g., immigration records, tax laws) and for potential dispute resolution. Technical and usage data may be retained for shorter periods as appropriate. We securely delete or anonymize your data when it is no longer required.
Data Sharing and Cross-Border Transfers
We may share your personal data with the following parties:
- Indonesian Immigration Authorities: Essential for processing your visa application.
- Embassies/Consulates: Relevant foreign diplomatic missions as required for visa processing.
- Third-Party Service Providers: Such as payment processors, IT and system administration services, hosting providers, analytics providers, and courier services, who assist us in operating our business. These providers are contractually bound to protect your data and only process it according to our instructions.
- Legal and Regulatory Bodies: When required by law, court order, or governmental request.
- Affiliates: Within the Juara Holding group of companies, for internal administrative purposes and service provision.
As an Indonesian visa agency, your data will be transferred to and processed in Indonesia. If you are an EU client, this constitutes a transfer of data outside the EU/EEA. We ensure such transfers are protected by appropriate safeguards, such as standard contractual clauses approved by the European Commission, to ensure your data receives an adequate level of protection consistent with GDPR.
Your Rights
Under UU 27/2022 PDP Indonesia and GDPR, you have several rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain circumstances (e.g., if it’s no longer necessary for the purpose).
- Right to Restriction of Processing: Request us to limit the processing of your data under certain conditions.
- Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.
- Right to Complain: Lodge a complaint with a supervisory authority (e.g., Kominfo in Indonesia, or your relevant Data Protection Authority in the EU).
To exercise any of these rights, please contact us using the details below. We will respond to your request in accordance with applicable laws.
Data Security
We implement robust technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include data encryption, access controls, secure networks, regular security assessments, and staff training on data protection. In the event of a personal data breach, we have procedures in place to assess and address the breach, and to notify you and relevant authorities as required by UU 27/2022 PDP Indonesia (within 3×24 hours) and GDPR (within 72 hours), where applicable.
Cookies and Tracking Technologies
Our website