Last Updated: July 1, 2025
PT Hitachi Channel Solutions Indonesia (“we”, “us”, “our”) values your privacy and strives to protect your personal data or personal data relating to the individuals connected to your business based on the Law No. 27 Year 2022 Regarding Personal Data Protection and its amendment from time to time.
This Privacy Notice explains how we collects, uses, stores, and protects your personal data when you access our website, application and related our services. By using our website, application and our services you acknowledge that you have read and understood this Privacy Notice and agree to our practices regarding your personal data.
“Personal Data” means data regarding individuals who are identified or can be identified separately or in combination with other information, either directly or indirectly through an electronic or non-electronic system and includes General Personal Data and Specific Personal Data.
What Personal Data We Collect
When you use our website and application, we may collect and process the following categories of personal data:
- General Personal Data:
- Identification Information: Name, date of birth, gender, government-issued ID numbers (if applicable).
- Contact Details: Address, telephone number, and email address.
- Communication Records: Any information you provide in your communications with us.
- Usage Information: Details about how you interact with our website (e.g., browsing patterns, IP address, device information).
- Location information, we will receive information about your location from your mobile device, including a unique identification contained in your device
- Specific Personal Data:
- Banking and Payment Data: If applicable, for services that require a transaction.
How We Use Your Personal Data
We process your personal data for the following purposes:
- Contractual Purposes: To perform our obligations and provide the services you request.
- Maintenance & Service Updates: To send notifications about updates, maintenance, or other important information regarding our website.
- Customer Support: To respond to your inquiries and provide technical support.
- Legal and Regulatory Compliance: To comply with legal obligations and regulatory requirements.
- Authority-related purposes: Responding to and complying with legal requests from regulators or other authorities.
- Due diligence purposes: For know-your-customer (KYC) due diligence and customer registration purposes.
- Marketing and Promotions: To inform you about our new products, services, or promotional offers (only where you have given explicit consent).
- Data Analysis and Improvement: To analyze website usage and improve our services.
- Security and Fraud Prevention: To protect our systems and your personal data.
- Audit and investigations: investigating any acts or defaults (or suspected acts or defaults) and auditing compliance with applicable laws and/ or internal policies.
- Processing Personal Data for vital interests: Processing your Personal Data to protect your vital interests such as in the event of medical emergency situations during the course of our relationship with you or where necessary to protect the safety of persons.
- Internal administration with affiliated entities: Supporting internal administration with our affiliated entities.
Legal Bases for Processing
Our processing of your personal data is based on one or more of the following legal grounds:
- Consent: Where you have provided your consent.
- Contractual Obligations: To fulfil our contractual obligations to you.
- Vital Interests: In cases where processing is necessary to protect your life or health.
- Legal Obligations: Where required by law.
- Legitimate Interests: Where it is necessary for our legitimate interests, provided that such interests do not override your rights and freedoms.
Sharing Your Personal Data
We may share your personal data with:
- Affiliated Companies: Other companies within our group, including those outside your country, for purposes related to our services.
- Service Providers, supplier, third party: Third-party providers who assist us in operating our website and delivering services (e.g., IT services, customer support, analytics).
- Financial Institutions: When processing transactions or invoicing.
- Legal and Regulatory Authorities: As required to comply with legal obligations, court orders, or to protect our rights.
- Professional Advisors: Such as auditors and legal consultants.
- Governmental or regulatory authorities: Your Personal Data may be shared with government or regulatory authorities for compliance with local laws, record keeping, business registration, or license applications. In emergencies, it may be shared to ensure safety. It may also be shared with law enforcement, in Indonesia or abroad, for crime prevention or research purposes.
We ensure that any third party with whom we share your personal data is required to maintain confidentiality and comply with data protection standards.
Your Rights
You have certain rights regarding your personal data, including:
- Right to be Informed: About how your personal data is collected and used.
- Right of Access: To request a copy of your personal data.
- Right to Rectification: To correct any inaccurate or incomplete data.
- Right to End Processing, Deletion, and Erasure: to request to end the processing, erase, and/or delete Personal Data
- Right to Delay or Limit Personal Data Processing: To Request for delay or limit the processing your Personal Data proportionally with specific purposes and prohibited to use out of scope this specific purposes
- Right to Data Portability: To request your personal data be moved or transferred from our system to another system
- Right to Object to Automated Decision-Making: To object to decisions made solely based on automated processing
- Right to Withdraw Consent: If you have provided consent for processing, you can withdraw it at any time.
To exercise any of these rights, please contact us using the contact details provided above. Please note that in certain situations, we may be unable to comply with your request due to legal or contractual obligations.
Data Retention
We will retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Notice or as required by law. Once your data is no longer needed, we will securely delete, destroy, or anonymize it.
Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:
- Access restrictions based on need-to-know.
- Regular staff training on data protection practices.
- Use of firewalls, anti-virus software, and encryption.
- Administrative and technical controls to restrict access to Personal Data on a ‘need to know’;
- Physical security measures at our facilities.
While we endeavor to always protect our systems against unauthorized access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others. In the event where unwanted intrusion or data breaches happen, the Personal Data may be accessed, used and modified in an unauthorized manner that may affect your rights to Personal Data protections. However, we, in our best effort, will always try to prevent and mitigate such unwanted consequences and apply necessary remedies.
Cross-Border Data Transfers
Your personal data may be transferred to and processed in jurisdictions outside of your own, including countries that may not have the same data protection laws as your country. In such cases, we will ensure that appropriate safeguards are in place to protect your data in line with applicable laws.
Automated Decision-Making
Where permitted by law, we may use automated systems to process your personal data to facilitate our services. If such automated decision-making has legal or significant effects on you, we will provide you with meaningful information about the logic involved and the potential consequences.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this notice periodically to stay informed about our data protection practices.
The date of last revision of the Privacy Notice can be found on the top of this Privacy Notice.
Severability
If any provision of this Privacy Notice is declared invalid, illegal or unenforceable for any reason by law or other public policy, such invalidity shall be limited to the invalid or unenforceable provision and the remaining provisions of this Privacy Notice shall remain in full force and effect.
Governing Law and Jurisdiction
This Privacy Notice is governed by and construed in accordance with the laws Republic of Indonesia. Any disputes arising out of this Privacy Notice will be subject to the exclusive jurisdiction of Badan Arbitrase Nasional Indonesia (BANI)
Contact Us
If you have any questions or concerns regarding this Privacy Notice or our handling of your personal data our you want to exercise you right, please contact us at:
PT Hitachi Channel Solutions Indonesia
Jakarta Mori Tower 21st Floor, Unit 21-03,
Jl Jend Sudirman Kav. 40-41, Bendungan Hilir, Tanah Abang, Jakarta 10210
Email: pdp@hitachi-ch.co.id
