【Indonesia】

Indonesia Privacy Policy is an integral part of our Global Privacy Policy, and both documents must be read together. The provisions set out herein are supplementary to the provisions of the respective sections with the same numbers and same titles of the Global Privacy Policy unless otherwise specifically stipulated in such section below.

 

【Personal Data We Collect】

In addition to the personal data listed in the section “Personal Data We Collect” in the Global Privacy Policy, we may also request the following additional personal data from you:

 

Category	Description
Identity data	Tax ID, signature, religion, letter of domicile, bank account (bank book photo), family background (name, relationship, age, education, occupation, and address of parents, siblings, and spouse), BPJS card, social media profile, travel history (history of travelling abroad, when, and how long), and vehicle registration number.
Contact data	Emergency contact and contact referrals.
Resume and affiliation data	Training certification, skill certification, workplace organization chart (including superintendent name, contact information), reference letter from previous employer, pay slip detail (up to 3 months), and business owned.

 

Moreover, we may also request certain personal data that may be classified as specific personal data (sensitive data), as follows:

Category	Description
Identity data	Ethnicity, family background (in relation to those that concerns personal data of children), bank book (in relation to the salary information) police clearance certification, and SPT (yearly tax report).
Health data	Medical history, vaccination certificate, smoking habit, and blood type.

 

We may conduct the collection of the above personal data (including sensitive data) from time-to-time when it is necessary and as may be requested by our clients (potential employers) to fulfil any of the data processing purpose as stated in the “How We Use Your Personal Data” section of the Global Privacy Policy, including for our clients’ recruitment process purposes.

 

【How We Use Your Personal Data】

We process your personal data based on the following legal grounds/bases:

-        Consent: where you have provided your consent for us to process your personal data. Specifically for sensitive data, we will conduct our processing activities based on the explicit lawful consent you provided when consenting to the Global Privacy Policy and this Indonesian Privacy Policy Annex.

-        Contract: where the processing of your personal data is carried out for the fulfilment of the concluded service contract or for the implementation of pre-contractual measures.

-        Legal obligations: where the processing of your personal data is required or authorized by applicable laws.

-        Legitimate interest: where we use your information to achieve a legitimate interest to provide our services.

 

【Data Transfer Outside of Country】

We will comply with data protection measures as well as any reporting requirements set out by the applicable laws and regulations when transferring your personal data to third parties outside Indonesia.

 

【Security】

In addition to security measures outlined under the Global Privacy Policy, we store your personal data in encrypted form to protect against the loss, unauthorized access or alteration, or misuse of such information.

 

【Data Subject’s Rights】

In addition to the rights set out under the Global Privacy Policy, you may also have the following rights: right to be informed, right to termination and disposal, right to object to automated decision making, right to restrict processing, right to file a lawsuit, and right to data portability.

 

We will endeavour to respond to any of your requests to exercise your rights as soon as possible or otherwise required by law.

 

If you are not satisfied with our use of your personal data or our response to any exercise of these rights, you have the right to complain to the relevant data protection authority.

 

【Contact Us】

We may communicate with you with regard to any data breach incident by electronic method (such as e-mail), if it occurs. You hereby acknowledge and agree to the foregoing method of communication.

 

If you have any question or request, you can contact us rgfidn.pdpl.CDD@rgf-hragent.asia