‘Privacy Data Policy

At Selaras Group (“Selaras”), we are committed to protecting the privacy and personal data of you, our users (“User” or “Users”). This Privacy Data Policy explains how we collect, use, and safeguard personal information in compliance under Indonesian Regulations, including Indonesian Law No. 27 of 2022 concerning Personal Data Protection.

1. Data Controller and Data Processor
   Selaras Group is the Data Controller, responsible for determining the purposes and means of processing personal data. We may work with third-party service providers who act as Data Processors and process data on our behalf under contractual obligations to ensure GDPR compliance.
   Contact Information:
   Selaras Group Headquarters: Jakarta: Epiwalk 5th floor Unit B522, Kawasan Rasuna Epicentrum, Jalan H.R. Rasuna Said, RT 2/RW 5, Kelurahan Karet Kuningan, Kecamatan Setiabudi, Kota Jakarta Selatan, DKI Jakarta 12940
   Data Protection Officer (“DPO”): info@selarasgroup.com
2. Personal Data We Collect
   We collect the following types of personal data from our users:
   
   Identification data : Name, date of birth, gender.
   Contact information : Email address, phone number, postal address.
   Technical data : IP address, browser type, and device identifiers.
   Transactional data : Payment information, purchase history.
   Usage data : Information about how users interact with our website and services.
   Marketing data : Preferences and interests for marketing communication.
3. How We Use Personal Data
   We collect and use personal data for the following purposes:
   1. Service delivery: To provide our products and services, process orders, and handle payments.
   2. Communication: To respond to user inquiries and provide updates related to our services.
   3. Improvement of services: To monitor and improve our website and user experience.
   4. Legal compliance: To comply with legal obligations, such as tax and accounting regulations.
   5. Marketing purposes: If users have provided explicit consent, we may send promotional materials or information about new products and services.
4. Legal Basis for Processing
   We process personal data based on the following legal grounds:
   i. Contractual necessity: Data processing is necessary to fulfill the terms of a contract with the user.
   ii. Legitimate interest: To improve our services, safeguard our platform, or prevent fraud.
   iii. Consent: When the user has provided explicit consent for marketing communications or other specified purposes.
   iv. Legal obligations: To comply with applicable legal requirements
5. Data Retention
   We retain personal data only for as long as is necessary for the purposes outlined in this policy or as required by law. Data may be stored for longer periods where necessary to meet legal obligations (e.g., tax or accounting purposes) or in case of legal claims.
6. Data Sharing
   We may share personal data with:
   1. Third-party service providers: For payment processing, marketing, and IT support.
   2. Legal authorities: When required by law or to protect the rights and safety of Selaras, its employees, or users.
   3. Affiliates: Within Selaras Group to streamline operations and provide better service to our users.
7. International Data Transfers
   If personal data is transferred outside of the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or binding corporate rules, to ensure GDPR compliance.
8. User Rights Under Indonesian Privacy Data Law
   Users have the following rights:
   i. Right to obtain information: About the processing of personal data.
   ii. Right to access: Their personal data.
   iii. Right to rectification: To correct inaccurate or outdated data.
   iv. Right to deletion: To have their personal data deleted.
   v. Right to withdraw consent: To revoke consent for data processing.
   vi. Right to stop processing: To object to or request the cessation of personal data processing.
   To exercise any of these rights, users can contact our Data Protection Officer (DPO) at info@selarasgroup.com.
9. Security Measures
   In performing the services and in carrying out the other tasks allocated to it in this Agreement, Selaras shall in accordance:
   a. Implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access control protocols;
   b. Do all things that a reasonable and prudent entity would do to ensure that all User data are protected at all times from accidental, unauthorized or unlawful access, processing, use or transfer by a third party or loss, misuse, damage or destruction by any person, including adopt and implement all appropriate technical and organizational measures and controls;
   c. Ensure that it does not deliberately or negligently misuse, lose, damage, destroy, corrupt, alter or erase the User’s data on the User’s system or on its own equipment or systems;
   d. Not access or attempt to access the User systems without the prior written consent of the User.
   e. Procure that no unauthorized third party will, as a result of any act or omission of Selaras or its Personnel, obtain access to any of the User data or User systems;
   f. Apply security procedures, measures and controls to guard against the misuse, loss, damage, destruction, corruption or alteration of the User data in the possession or control of (or accessed by) the User or its personnel;
   g. ensure that it does not deliberately or negligently misuse, lose, damage, destroy, corrupt, alter or erase the User data on the User systems or on its own equipment or systems; and
   h. not disclose or share passwords, authentication tokens or credentials supplied by the User to access the User systems to any person other than its personnel with a need to know and revoke or remove such access immediately upon any such personnel no longer having the need to know or leaving the User.
10. Cookies
    We use cookies and similar technologies to enhance the user experience, analyze website performance, and facilitate targeted advertising. Users can control their cookie preferences through their browser settings
11. Updates to this Privacy Policy
    We may update this Privacy Policy periodically to reflect changes in our practices or applicable regulations. We will notify users of any significant changes via email or by posting a notice on our website.
12. Complaints
    If users have any concerns or complaints about how we handle their personal data, they may contact our DPO at info@selarasgroup.com. Users also have the right to file a complaint with a Data Protection Authority if they believe their data has been handled inappropriately.
    
    The Parties agree to comply with all the provisions set out in this Agreement and understands the importance of adhering to these terms in ensuring the protection of private data, maintaining high standards of data security, and fulfilling legal obligations related to data protection. This Agreement remains in effect until terminated in accordance with its terms. The Parties acknowledge that failure to comply with the requirements may result in termination of the Agreement and other legal remedies available to the User.