Privacy Privacy Policy

“`html Privacy Policy Last Updated: October 26, 2023 Welcome to balitouristvisaduration.com (“we,” “our,” or “us”), an Indonesian visa agency dedicated […]

💬 WhatsApp +62 811-3941-4563 Send Enquiry →

“`html

Privacy Policy

Last Updated: October 26, 2023

Welcome to balitouristvisaduration.com (“we,” “our,” or “us”), an Indonesian visa agency dedicated to assisting you with your visa applications for Bali, Indonesia. Your privacy is paramount to us, and we are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, store, and disclose your personal information in compliance with the Indonesian Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi – UU 27/2022 PDP) and the General Data Protection Regulation (GDPR) for our clients residing in the European Union (EU).

1. Data We Collect

To provide our visa services, we collect various types of personal data. The specific data collected will depend on the visa type and the requirements of the Indonesian immigration authorities. This may include:

Identity Data: Full name, date of birth, gender, nationality, passport details (number, issue/expiry date, place of issue, passport photo, signature), marital status.
Contact Data: Email address, phone number, residential address.
Travel Data: Intended travel dates, flight details, accommodation details in Bali, previous travel history.
Financial Data: Payment information (processed securely via third-party payment gateways; we do not store full credit card details), bank statements (if required for visa solvency proof).
Technical Data: IP address, browser type and version, operating system, time zone setting, location data, and information about your visit to our website (e.g., pages viewed, time spent). This is primarily collected via cookies and similar technologies.
Sensitive Data: In rare cases, and only if explicitly required by immigration authorities for specific visa types, we may collect health information or biometric data. We will always seek your explicit consent for such data.

2. Purpose of Data Collection

We collect and process your personal data for the following purposes:

Visa Application Processing: To submit, manage, and track your visa application with the relevant Indonesian government authorities.
Communication: To communicate with you regarding your application status, respond to inquiries, and provide customer support.
Service Improvement: To analyze website usage, improve our services, and enhance user experience.
Legal and Regulatory Compliance: To comply with Indonesian immigration laws, UU 27/2022 PDP, GDPR, and other applicable legal obligations.
Billing and Payment: To process payments for our services.
Marketing: To send you promotional materials or updates about our services, but only with your explicit consent.

Our legal basis for processing your data includes the necessity for the performance of a contract (providing visa services), compliance with legal obligations, our legitimate interests (e.g., improving services, preventing fraud), and your explicit consent where required.

3. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, visa application data and related communications will be retained for a period of up to 5 years after the completion of the service to comply with potential immigration audit requirements, assist with future visa applications, or address any post-service inquiries. After this period, your data will be securely deleted or anonymized, unless a longer retention period is required or permitted by law.

4. Data Sharing and Disclosure

We will not sell, rent, or trade your personal data to third parties. Your data may be shared in limited circumstances:

Government Authorities: We share necessary personal data with Indonesian immigration authorities, embassies, or consulates as required for your visa application.
Service Providers: We may share data with trusted third-party service providers who assist us in operating our website, processing payments, or delivering our services (e.g., IT support, email services). These providers are contractually bound to protect your data and only use it for the purposes specified by us.
Legal Requirements: We may disclose your data if required by law, court order, or governmental regulation, or to protect our rights, property, or safety, or the rights, property, or safety of others.
International Transfers: As an Indonesian agency, your data will be processed in Indonesia. For EU clients, we ensure that such international transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other legally recognized mechanisms under GDPR.

5. Your Rights

Under UU 27/2022 PDP and GDPR, you have significant rights regarding your personal data:

Right to Information: The right to be informed about the collection and use of your personal data.
Right of Access: The right to request a copy of the personal data we hold about you.
Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal data, subject to certain legal obligations.
Right to Restriction of Processing: The right to request that we limit the way we use your personal data.
Right to Object: The right to object to the processing of your personal data in certain situations.
Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.
Right to Lodge a Complaint: For EU clients, you have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. For Indonesian clients, you have the right to seek compensation for damages caused by data processing violations.