Privacy Privacy Policy
“`html Privacy Policy for balivoacost.com (Bali VOA Cost) Effective Date: 26 October 2023 Welcome to balivoacost.com (“Bali VOA Cost,” “we,” […]
“`html
Privacy Policy for balivoacost.com (Bali VOA Cost)
Effective Date: 26 October 2023
Welcome to balivoacost.com (“Bali VOA Cost,” “we,” “us,” or “our”). We are an Indonesia visa agency committed to helping you navigate the visa application process. Your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data when you use our website and services. We adhere to the principles of Indonesia’s Personal Data Protection Law (UU 27/2022 PDP) and, where applicable, the European Union’s General Data Protection Regulation (GDPR).
1. Data Collected
To provide our visa services, we collect various types of personal data. The specific data collected will depend on the visa type and the services you request, but generally includes:
- Identity Data: Full name, date of birth, gender, nationality, passport number, passport issue and expiry dates, place of birth, passport photo, and other biometric data required for visa processing.
- Contact Data: Email address, phone number, residential address, and mailing address.
- Travel Data: Intended travel dates, flight details, accommodation details in Indonesia, and purpose of visit.
- Financial Data: Billing address and, if processed directly by us, payment card details (though we primarily use secure third-party payment processors).
- Health Data: In specific cases where required by Indonesian immigration authorities for certain visa types (e.g., medical declarations), we may collect health-related information. This will only be collected with your explicit consent.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
We collect this data directly from you when you fill out forms on our website, communicate with us via email or phone, or indirectly through cookies and similar technologies when you browse our website.
2. Purpose of Data Collection and Legal Basis
We process your personal data for the following purposes and under the following legal bases:
- To Process Visa Applications: To submit your visa application to the relevant Indonesian immigration authorities.
- Legal Basis (GDPR): Performance of a contract with you, Legal obligation.
- To Communicate with You: To provide updates on your application status, respond to your inquiries, and provide customer support.
- Legal Basis (GDPR): Performance of a contract with you, Legitimate interests (to respond to queries).
- To Process Payments: To facilitate payment for our services.
- Legal Basis (GDPR): Performance of a contract with you, Legal obligation.
- To Comply with Legal Obligations: To meet requirements of Indonesian immigration laws, anti-money laundering regulations, and other applicable laws.
- Legal Basis (GDPR): Legal obligation.
- To Improve Our Services and Website: To understand how our services are used, identify areas for improvement, and ensure website security.
- Legal Basis (GDPR): Legitimate interests (to improve our services and keep our website secure).
- Marketing (with Consent): To send you promotional materials, newsletters, or special offers if you have explicitly opted in to receive them.
- Legal Basis (GDPR): Consent.
- For Sensitive Data: Processing of health or biometric data (e.g., passport photo) when strictly required for visa processing will always be based on your explicit consent and necessity for a substantial public interest (immigration purposes).
3. Data Retention
We will retain your personal data for no longer than is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this means we will keep your data for the duration of the visa application process and for a period thereafter as required by Indonesian immigration laws (e.g., 3-5 years for audit purposes or to assist with potential future visa applications). Once the retention period expires, your personal data will be securely deleted or anonymized.
4. Data Sharing and Disclosure
We may share your personal data with the following parties:
- Indonesian Immigration Authorities: This is essential for processing your visa application.
- Third-Party Service Providers: We use trusted third-party service providers for functions such as payment processing, website hosting, analytics, email delivery, and customer support. These providers are contractually bound to protect your data and only process it according to our instructions.
- Legal and Regulatory Authorities: We may disclose your data if required by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Professional Advisors: Lawyers, accountants, auditors, and insurers who provide professional services to us.
- International Transfers (for EU Clients): If you are an EU client, your data will be transferred to Indonesia for visa processing. We ensure that appropriate safeguards are in place, such as standard contractual clauses (SCCs) approved by the European Commission, to protect your data during such transfers.
We do not sell your personal data to third parties for their marketing purposes.
5. Your Rights as a Data Subject
Under UU 27/2022 PDP and GDPR, you have certain rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data under certain conditions.
- Right to Restriction of Processing: Request that we limit the processing of your personal data under certain conditions.
- Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format, or to