Privacy
Last Updated: 2024-01-11 21:48:00
You are expected to make decisions regarding your personal data. This Privacy Notice explains how PT Exploreindonesia Indonesia, its subsidiaries, affiliates and jointly controlled entities ("Exploreindonesia", "we", "us", or "our") process your Personal Data. Process includes the collection, recording, holding, organization, structure, storage, retention, adaptation, change, retrieval, consultation, use, disclosure, deletion or destruction of Personal Data ("Processing"), either through our website www.Exploreindonesia.com and the Exploreindonesia mobile application (each a “Site” or “Application”).
This Privacy Notice applies to Exploreindonesia users, applicants, vendors, suppliers and partners ("You", "Your").
Please take a moment to understand this Privacy Notice and contact us if you have any questions.
1. Personal Data We Collect
Personal Data means any information about you or that can be used to identify you. This also includes information that stands alone or in combination with other information about you, such as your name, address, date of birth, occupation, telephone number, email address, picture, bank account and credit card details, gender, or government-issued identifier, and financial information (“ Personal Data ”).
We collect and process Personal Data, as data controller or processor (as applicable), in the ways listed below:
1.1 Data Collected When You Use the Site or Application
If you are a User
We collect Personal Data that identifies or can be used to identify, contact, or locate you. Without this data, we cannot provide all the services you request on the Site. The Personal Data we collect, includes but is not limited to:
(i) Full name
(ii) Email address
(iii) Telephone number
(iv) Date of birth
(v) Gender
(vi) Your identification number or passport
(vii) Your order ID (BID)
(viii) Your booking details (such as hotel name, hotel location and length of stay)
(ix) Your travel preferences
(x) Details of your airline's frequent flyer membership
(xi) Your Review
In some situations, we will ask users to provide government-issued documents as part of the know-your-customer process if necessary under applicable law or our Terms & Conditions to identify you and process requests and/or additional services such as certain financial services, processes refunds, insurance claims and order cancellations.
If you are a vendor or supplier
In order for the Site and its features to function, we collect Personal Data that identifies or can be used to identify, contact, or locate persons or properties or businesses related to the services provided by Vendors on the Site. We also collect other Personal Data necessary to carry out payment obligations between you and us, including related tax obligations.
If you use payment and/or transaction services on the Site
We will collect certain Personal Data related to the payment services and/or transactions you use. Such data includes (but is not limited to) payment card numbers or account identifiers, payment card or account holders, sender and recipient details, and transaction history.
If you apply for a job on our Site
We will collect your employment history, resume, and educational qualifications as part of the talent application, onboarding, and consideration/acceptance processes.
1.2 Data Collected from Your Device
Each time you use the Site, we will collect Personal Data in the form of technical data about your device and device usage such as information about web pages viewed, session duration, internet device identity (ID), and may include:
Geographic location: we may collect information about your actual location, in order to provide you with location-specific offers available on the Site. We may also determine your approximate location from your IP address, GPS, and other information provided by your mobile device.
Log Information: when you use the Site, we will collect information that we refer to as “log information”. This log information may be collected even if you do not create an account on the Site. This log information may include (but is not limited to) IP address, browser type, operating system, country, pages visited, your mobile operator, device information, as well as other internet usage related information. We use this log information to provide you with a better experience when using the Site.
Cookies and similar technologies: Cookies are small pieces of data stored on your computer or mobile device to help us track your internet usage. We use cookies in certain email notifications that we send after a purchase/order for goods/services on the Site has been made. Please disable the cookie option if you want us to stop the cookie feature, and please note that if you disable cookies, you may not be able to access all or part of the Site or use all or part of the functionality through the Site.
Device Information and Installed Applications: data and information from your mobile phone and/or from applications installed on your device may be collected to provide a segmented risk profile and produce aggregated statistical information only when necessary, including when necessary for examinations related to Exploreindonesia's financial services . To protect your identity, we remove all personal identifiers (if any) and make them anonymous. Metadata processed in this way cannot be used to reproduce the original data collected.
1.3. Data We Collect from Third Parties
In general, we collect personal data directly from data subjects, except in certain cases where we collect Personal Data from third parties (“Third Parties”), such as:
Companies and/or organizations acting as vendors and other parties who carry out any processes on our behalf, provide services on the Site, provide services to us, or with whom we collaborate within the framework of contracts or other obligations;
Your advisors (including, but not limited to accountants, auditors, attorneys, financial advisors, or other professional advisors) who have been authorized by you;
Any person you notify as your authorized representative; or
Any person, authority, regulator or third party to whom we are permitted or required by law to disclose.
Personal Data obtained from your employer, as part of your registration for our business or corporate services, which has been provided with appropriate permission from the employee.
Personal Data is collected in connection with certain financial and historical information when you register, access, add, and/or connect (as applicable) a payment card, loan product, insurance, or other financial services product or account on the Site. This Personal Data includes, but is not limited to, payment card or account transaction history, payment card or account details, and mapping and/or status and condition of payment cards or accounts from relevant payment or financial service providers or other third parties.
In such cases, collection will occur after you provide acknowledgment/guidance to the relevant third party, or subject to receipt of your explicit consent prior to such collection.
1.4. Third Party Personal Data You Provide to Us
You may provide us with Personal Data relating to other third party individuals (including when you add third party individual data as airline passengers or hotel visitors). In such event, you warrant to us that you have obtained properly documented consent from the relevant third party individual and hereby provide consent on behalf of such individual to our collection, use, disclosure and processing of his or her Personal Data. If we are unable to collect your Personal Data, we may not be able to provide our services to you.
2. How We Collect, Process, Use or Disclose Your Personal Data
2.1. Use of Personal Data
We may process and use your Personal Data based on your request or the Terms of Use that you have accepted and agree to be bound by, including but not limited to the following purposes ("Purpose"): identifying you as a user or vendor, which includes registration, maintenance, and management of your account on our Site; offering you travel and lifestyle packages that suit your preferences; verify your account, transactions and/or registration as may be required at our discretion before providing services on the Site; manage, operate and administer the Site;
contacting you regarding your use of and access to the Site and managing questions and requests you submit through the Site; customize your experience when using the Site; measuring and improving your customer experience and satisfaction, including managing your reward points, providing direct marketing or personalization activities, and providing or offering services from us or our business partners and vendors;
monitor and analyze your activities, demographic data, behavior, search queries, response times for various services provided on the Site, and any Personal Data you provide to the Site to support and improve the performance, user experience, growth and functionality of the Site. We will anonymize your Personal Data (or use other methods in accordance with applicable law) before we process it for these purposes; detect and prevent money laundering, terrorism financing, fraud, abusive behavior, and malicious or illegal activities, including complying with applicable laws, responding to legal requests, and protecting our rights;
Publish your reviews of our services as well as products listed on the Site;
Implementing the provisions of the Exploreindonesia Terms & Conditions;
resolve disputes, collect outstanding payments, and resolve problems; And
For other purposes that we notify you of when we collect Personal Data.
2.2. How We Use Your Personal Data for Marketing Activities:
Digital marketing which includes, but is not limited to, social media, display advertising, Search Engine Optimization (SEO), Search Engine Marketing (SEM), and push notifications, for example, using open graph techniques, and so on;
Conventional marketing purposes which include, but are not limited to, sending emails or communications regarding new products, special offers, Exploreindonesia products that may be relevant to you, newsletters, updates, promotional materials, special privileges, congratulations on celebrations, surveys, and/or other information you may find interesting;
Registration for your use of, access to, and creation of accounts/accounts on the sites/applications of subsidiaries and/or companies affiliated with us; And
Migrate your reviews on our Site to our subsidiary sites/applications and/or affiliated companies ("Migration Process"). We may communicate such marketing to you through various means, where applicable (including via SMS, WhatsApp, push notifications or email).
Please note that you can opt out of receiving marketing materials from us, including the Migration Process, by following the unsubscribe instructions set out in our marketing materials or by contacting us using the contact details set out below, and we will respect your wishes. However, please remember that unsubscription will take effect within 7 (seven) Business Days after you successfully unsubscribe from the service.
2.3. Processing Basis
In addition, we may collect, process, use or disclose your Personal Data, to the extent necessary, based on the applicable legal basis in accordance with this Privacy Notice, as follows:
Consent: We generally collect, use, disclose or process your Personal Data in accordance with this Privacy Notice with your consent when you access our Site and/or place an order with us.
Contract: Your Personal Data may be processed to fulfill contractual obligations when you engage in transactions or orders with us, as regulated by our Terms and Conditions and this Privacy Notice when using our services available on the Site/Application.
Legal Obligations: In some circumstances, we may process your Personal Data to comply with legal obligations and requirements imposed by applicable laws, government authorities, or regulatory agencies.
Vital Interests: We may process your Personal Data when necessary to protect your or another person's vital interests.
Legitimate Interests: Personal Data may be processed based on our legitimate interests, such as improving our services, managing security and preventing fraud, while taking into account your rights and interests, as described in this Privacy Notice.
3. Sharing Your Personal Data
We may share your Personal Data with other companies, organizations and individuals, including our subsidiaries and affiliates ("Third Parties"), who have agreed to process your Personal Data in a secure manner and in accordance with the standards outlined in this Privacy Notice in in connection with the provision of our services to you, as well as for the following and other purposes to the extent permitted by applicable law:
if you are a user, to help facilitate orders or other interactions between users and/or vendors;
if you are a user, for the purpose of enabling us and/or vendors, to perform or provide services/features on the Site;
if you are a vendor, for the purpose of enabling users to request, receive, and complete orders or reservations from users to you;
to Third Parties related to verification, authentication, risk assessment, fraud prevention, product development and maintenance as we or other Third Parties deem necessary before providing you services, including all activities related to preventing money laundering, terrorism financing, and thorough checking of information business and customers;
in connection with a transaction process in the form of a merger, consolidation, change of control or ownership, restructuring, and/or sale of assets of an Exploreindonesia business company, your Personal Data may be disclosed and transferred as part of the transaction (even if the transaction ultimately does not proceed);
in connection with our services, we share Personal Data with providers and vendors of website hosting, data analysis, marketing, promotions, credit card transaction processing, credit worthiness assessments, and other related services;
if you are a user, to help facilitate the refund or insurance claims process with our vendors or service providers; and/or if you are a user, to help facilitate the verification process with third parties that provide services on our Site
We will notify you if we need to and seek your consent if we need to collect, use or process your Personal Data for purposes other than those expressly stated in this Privacy Notice.
4. Cross-Border Data Transfer
The services provided through the Site can be used worldwide. To make that possible, you acknowledge and provide consent that your Personal Data may be transferred to or accessed by entities throughout the world. Your Personal Data may be transferred from the country (“Home Country”) in which you are located when using our Services to another country (“Recipient Country”).
When we transfer your Personal Data from the Origin Country to the Recipient Country, we will diligently comply with all legal and regulatory obligations relating to your data to help ensure the protection of your data. This includes establishing a legitimate reason for such transfer and implementing appropriate measures to maintain an equivalent level of protection for your Personal Data. In addition, we will ensure that the receiving party in the Receiving Country is bound to protect your Personal Data in a manner consistent with the standards established by applicable law. In all cases, we will take appropriate steps to ensure that your Personal Data remains subject to a standard of protection comparable to the requirements under the laws of your country.
5. Rights regarding your Personal Data
In accordance with applicable laws and regulations, you have the following rights regarding your Personal Data:
You can request information about the processing of your Personal Data and obtain a copy of that Personal Data.
You can create user accounts based on the information you provide. By providing such information, registering, and creating your account, you also warrant that the information you provide is true and accurate, current, and complete.
In some cases, you have the right to request correction and/or deletion of your Personal Data.
Under certain circumstances, you can request restrictions or raise objections to the processing of your Personal Data.
You can withdraw your consent to the processing of your Personal Data, provided that our processing is conditional on your consent.
You can request to receive or transfer your Personal Data to another organization in a machine-readable format, where your data is processed based on your consent or as part of the performance of a contract.
If your data privacy rights are violated or you suffer losses due to unlawful processing of your Personal Data, you have the right to lodge a complaint with the relevant data privacy authority.
When you are given the option to share your Personal Data with us, it is always your choice. If you previously provided consent to processing and decide to withdraw it, we will respect your decision in accordance with our legal obligations.
However, not sharing your Personal Data with us or withdrawing your consent, or disagreement with our Privacy Notice, may affect our ability to perform actions necessary for the purposes outlined in or limit your use of the Application or Site.
Please note that all requests will go through a careful screening and verification process. To confirm your identity and authority to make a request, we may ask you to provide supporting information or documentation. Once verified, we will process your request within the time limits specified by applicable law.
6. Changes and Updates to This Notice
From time to time, Exploreindonesia may revise this Privacy Notice to reflect changes in laws and regulations, our usage practices, the features of our Site, and/or advances in technology. If we make revisions that change the way we collect or use your Personal Data: we will notify you of such changes via a general notice published on the Site, or via your email address registered in your account, such changes will be posted in a Notice This Privacy Notice and its effective date will be noted at the beginning of this Privacy Notice, and your continued use of the Site, communications with us, or access and use of the services after any change in this Privacy Notice will be deemed your agreement to this Privacy Notice and all the change.
Your use of the Exploreindonesia service, Application, and/or Site after the effective date of any modification, update, or change in this Privacy Notice, regardless of whether you have reviewed such terms or not, will be deemed to constitute your agreement to be bound by such changes.
7. Deletion of Your Personal Data
To the extent permitted by applicable law, you may have the right to request that we delete your Personal Data that we hold from our systems. You can submit a deletion request to us via the contact details listed below.
We, without unreasonable delay or within the time period provided for in applicable law, will make reasonable efforts to delete your Personal Data or will make reasonable efforts to remove any means or personal identification by which such Personal Data can be linked to you as an individual, If:
the purpose of collecting Personal Data is no longer served by storing such Personal Data; we are not permitted or required by applicable law to retain such Personal Data; and/or in cases required by applicable law, based on your request to delete your Personal Data.
Please note that by asking us to delete your Personal Data, we may be unable to continue providing you with some of our services, and you agree that we will not be liable to you for any loss or damage arising out of or in connection with the termination of such services.
8. Storage of Your Personal Data
Unless we delete your Personal Data from our systems after receiving a request from you, your Personal Data will remain retained by us for as long as your account exists, and as long as necessary to provide you with our services, and/or for our legitimate business interests, or during storage is required or permitted by applicable law.
We will delete your Personal Data after 5 (five) years or a longer period as required by applicable laws and regulations, from the date you terminate/delete your account.
9. Protection of Your Personal Data
We will protect your Personal Data by maintaining reasonable security measures, including physical, technical and organizational measures, to prevent unauthorized access, collection, use, disclosure, copying, modification, deletion or similar risks. It is important to remember that although we have several safeguards in place to protect your information, no information on the internet is completely secure, and we cannot guarantee the security of your Personal Data.
If we experience a data breach relating to your Personal Data, to the extent required by applicable law, we will notify you through our channels, either directly or indirectly, to provide sufficient information regarding the data breach and will work to protect against misuse of your Personal Data.
10. Links to Other Sites
This site may contain links to other websites. Please note that we have no control over such other websites. Please remember that we are not responsible for the privacy Notices or practices of such other websites and we encourage you to read the privacy Notices of each website you visit that collects your Personal Data.
11. Complaints
If you have a complaint regarding our treatment of your Personal Data, please contact us using the Contact Details set out below. We will treat your complaint in a confidential manner. We will contact you within a reasonable time after receiving your complaint to discuss it and to detail options for how your complaint can be resolved.
If you have a complaint regarding the treatment of your Personal Data that is not resolved by us, you may be able to lodge a complaint with the relevant regulatory authority. All Personal Data we collect during the processing or resolution of your complaint will be used solely for that purpose.
12. Contact Details
If you have questions or complaints regarding this Privacy Notice or if you wish to access and/or correct your Personal Data, please contact the relevant Data Protection Officer (DPO) for your country:
Exploreindonesia Group DPO and Legal Compliance team
Email: [email protected]
Address: -
Explore Indonesia
13. Language and Interpretation
This Privacy Notice is subject to translation into various languages. In the event of any discrepancy between the English version of this Privacy Notice and its translation in another language, the English version will take precedence.
Any capitalized terms that are not defined in this document will have the same definition as outlined in the Exploreindonesia Terms and Conditions, as well as in this Privacy Notice.
