1. Introduction

PT Chandra Asri Pacific Tbk, its respective affiliates, subsidiaries, and jointly controlled entities (collectively referred to as "Chandra Asri," "We," or "Us") respects the privacy of our users ("You"). This Privacy Notice explains how we collect, use, store, maintain, (under certain conditions) disclose, and protect  personally identifiable information that You provide while using and/or registering on our website  ("Website") and for other purposes as specified herein, to ensure that your Personal Data is protected and processed in accordance with any applicable laws in Indonesia concerning Personal Data Protection and its implementation regulations ("PDP Law").

For this Privacy Notice, “Personal Data” means any information or data of any person who is identified or may be identified individually or combined with other information either directly or indirectly, through electronic or non-electronic systems.

By visiting, using and/or registering yourself on our website, you are deemed to have read, comprehended and agreed to all the contents contained in this Privacy Notice. If you do not agree with any part or all of this Privacy Notice, you can leave the Website.

2. Types of Personal Data Collected

• We may collect the following types of Personal Data from You:
• General information, such as name, postal address, phone number, e-mail address, and nationality.
• Educational background, such as an education certificate and an education transcript.
• Information related to work or professional experiences, such as Curriculum Vitae (CV), previous positions, and employer details.
• Copy of ID Card (KTP).
• Other information as required by Chandra Asri, with your prior consent.

In addition, when You use the Website, We may collect certain information automatically through cookies. This information may include your IP address, browser type, operating system, referring URL, browsing activity on the Website, device information, and usage data (e.g., pages viewed, time spent on the Website).

3. Personal Data That We Collect, Store, and Use

We use your Personal Data for the following purposes, as permitted by PDP Law:

• To operate and improve the Website and provide You with a better user experience. 
• To monitor your use of our systems, including our website.
• To facilitate communication including responding to your inquiries and requests.
• To send You information about Chandra Asri, such as company news, events, and product updates (You can unsubscribe at any time). marketing communications are sent only with your consent.
• To assess, manage, and process your job application.
• To operate and manage our business operations, including participation in surveys.
• To measure and improve your experience when using the Website. 
• To adjust features or user experience on the Website.
• To comply with legal and regulatory obligations. including disclosure to law enforcement or government agencies when required by law.
• We will notify You of other purposes when collecting and/or using Personal Data.

4. How We Process Your Personal Data

We have implemented procedures and safeguards to properly manage Personal Data, including its collection, usage, disclosure, retention, and disposal.

We process your Personal Data, including any sensitive information, for specific purposes with your consent, to fulfil contractual obligations, to comply with Indonesian laws and regulations, to protect your vital interests in urgent situations, and to maintain proper business operations and system improvements.

We take appropriate steps to safeguard your Personal Data against loss, misuse, or unauthorized access, including:

• Ensuring Website security.
• Staff training on Personal Data processing obligations.
• Identification of data incidents and risks.
• Restricting staff access to Personal Data.

5. Disclosure of Personal Data

We may disclose or transfer your Personal Data to:

• Our affiliated companies.
• Third-party service providers.
• Professional advisors.
• Banks.
• Public and governmental authorities.
• Other third parties in connection with our business operations.

These third parties are contractually and legally obligated to keep your Personal Data confidential and secure.

We may also disclose or transfer your Personal Data as required by law or to protect the rights, property, or safety of Chandra Asri or others.

If We transfer your Personal Data, We will ensure appropriate safeguards are in place to provide adequate protection.

6. Data Retention

We will retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

We retain your Personal Data:

• If We have a contractual or business relationship with You.
• As long as required to comply with applicable laws and regulations.
• For a reasonable period to analyse Website trends and improve services.

After the retention period expires, your Personal Data will be deleted or destroyed in accordance with our retention policy.

7. Consent, Withdrawal of Consent, and Your Rights

By accessing, browsing, registering, or using our website, or by clicking "confirm" or "agree," You consent to Chandra Asri and its affiliated companies collecting, using, disclosing, transferring and/or processing your Personal Data as described herein.

You may withdraw your consent at any time by providing written notification and stating your reasons. Upon confirmation, We will stop processing your Personal Data, unless required by law or legitimate business purposes.

If You withdraw consent, We may not be able to continue providing services or access, and You agree not to hold Us liable for any resulting loss or damage.

Your rights include:

• Right to access your Personal Data and obtain a copy.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to withdraw consent.
• Right to restrict processing under certain conditions.
• Right to object to processing with significant legal impact.
• Right to file a claim and seek compensation for violations.
• Right to data portability.

You may exercise these rights by contacting Us using the details provided below.

8. Security

We protect Personal Data under our control by maintaining reasonable security safeguards, including SSL (Secure Socket Layer) encryption.

We implement appropriate technical and organizational measures to protect Personal Data from unauthorized access, disclosure, alteration, or destruction. However, no security system is completely secure, and We cannot guarantee absolute security.

9. Cookies

We use cookies and other tracking technologies to improve our website. Please refer to our Cookies Notice for further details.

10. Access and Correction of Personal Information

You must ensure the accuracy and completeness of Personal Data provided to Us. If You believe your Personal Data contains errors, you may correct it immediately or submit a request to Us.

If costs arise from such requests, you may be required to pay a reasonable fee (subject to prior consent). We will verify your identity before granting access or making corrections.

11. Enforceability

This Privacy Notice forms an integral part of the Terms of Use. All provisions in the Terms of Use apply to this Privacy Notice.

12. Updates

This Privacy Notice may be updated from time to time without prior notice to comply with legal developments or operational changes.

By continuing to use the Website, you agree to the updated Privacy Notice. The most recent version will supersede previous versions.

13. Third party

Our website may contain links to third-party websites. We are not responsible for their data practices. Please review their respective privacy policies before providing Personal Data.

14. Contact Us

If you have any questions about this Privacy Notice or your privacy rights, please contact us at:

• Address: PT Chandra Asri Pacific Tbk., Wisma Barito Pacific Tower A 7th Floor, Jl. Letjend. S. Parman Kav. 62-63, Slipi, Palmerah Jakarta 11410 Indonesia
• Email: data.privacy@capcx.com