Privacy Policy

Data Protection and Privacy Practices of AERONTOGEL Platform

$ Effective Date: January 15, 2024 | Compliance: GDPR, Indonesian PDP | Version: 3.2

Privacy Commitment

At AERONTOGEL, operated by RIMBA AERON LINK TERPERCAYA INDONESIA RAYA, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our analytics platform and services.

We recognize that privacy is a fundamental right, and we are dedicated to maintaining the trust and confidence of our users. This policy applies to all users of our Services, including website visitors, registered users, and customers.

Important: By using the AERONTOGEL platform, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

We collect several types of information from and about users of our Services:

1.1 Information You Provide Directly

  • Account Information: Name, email address, contact details, company information, and payment information when you register for an account
  • User Content: Data, information, and content you upload, submit, or process through the Platform
  • Communications: Correspondence with our support team, feedback, and survey responses
  • Profile Information: Preferences, settings, and configuration data for your account

1.2 Information Collected Automatically

  • Usage Data: Information about how you interact with our Services, including feature usage, session duration, and navigation patterns
  • Technical Data: IP address, browser type, operating system, device information, and unique device identifiers
  • Log Data: Server logs, error reports, and performance data
  • Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

1.3 Information from Third Parties

  • Business Partners: Information from our partners when you access our Services through their platforms
  • Service Providers: Data from analytics providers, payment processors, and other service providers
  • Public Sources: Information from publicly available sources for business intelligence purposes

2. How We Use Your Information

We use the information we collect for various purposes, including:

2.1 Service Provision and Operation

  • Providing, maintaining, and improving our Services
  • Processing transactions and managing accounts
  • Authenticating users and ensuring platform security
  • Providing customer support and responding to inquiries
  • Personalizing user experience and content

2.2 Analytics and Business Intelligence

  • Analyzing usage patterns to improve Services
  • Developing new features and functionalities
  • Conducting research and analysis for product development
  • Measuring platform performance and reliability

2.3 Communication and Marketing

  • Sending service-related announcements and updates
  • Providing information about new features and offerings
  • Conducting surveys and gathering feedback
  • Marketing and promotional communications (with opt-out option)

2.4 Legal and Security Purposes

  • Complying with legal obligations and regulations
  • Protecting rights, property, and safety of users and the platform
  • Investigating and preventing fraud, security breaches, and abuse
  • Enforcing our Terms and Conditions and other agreements

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Performance of Contract: Processing necessary for providing our Services under our Terms
  • Legitimate Interests: Processing for our legitimate business interests, balanced against your rights
  • Consent: Processing based on your explicit consent for specific purposes
  • Legal Obligation: Processing necessary to comply with legal requirements

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 With Your Consent

We share information with third parties when you give us explicit consent to do so.

4.2 Service Providers and Partners

We engage trusted third-party service providers to perform functions and provide services to us, including:

  • Cloud Infrastructure: Data storage and hosting services
  • Payment Processing: Secure payment transaction processing
  • Analytics Services: Usage analysis and business intelligence
  • Customer Support: Help desk and customer relationship management
  • Marketing Services: Email delivery and marketing automation

4.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, we may transfer your information to the successor entity.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.5 Protection of Rights

We may share information to protect the rights, property, or safety of AERONTOGEL, our users, or others.

5. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

We implement appropriate safeguards for international data transfers, including:

  • Standard contractual clauses approved by regulatory authorities
  • Binding corporate rules for intra-group transfers
  • Other legally approved mechanisms for data transfer

6. Data Security

We implement comprehensive security measures to protect your information:

6.1 Technical Safeguards

  • Encryption: End-to-end encryption for data in transit and at rest
  • Access Controls: Strict access controls and authentication mechanisms
  • Network Security: Firewalls, intrusion detection, and DDoS protection
  • Regular Audits: Security assessments and penetration testing

6.2 Organizational Measures

  • Security Policies: Comprehensive security policies and procedures
  • Employee Training: Regular security awareness training for staff
  • Incident Response: Established incident response procedures
  • Third-Party Assessments: Vendor security assessments and due diligence

6.3 Compliance Standards

We maintain compliance with international security standards, including:

  • ISO 27001 Information Security Management
  • SOC 2 Type II Security and Availability
  • GDPR Data Protection Requirements
  • Indonesian Personal Data Protection Regulations

7. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

  • Account Data: Retained while your account is active and for a reasonable period thereafter
  • Usage Data: Typically retained for 24 months for analytics purposes
  • Financial Data: Retained as required by financial regulations (typically 7 years)
  • Backup Data: Retained in secure backups for disaster recovery purposes

7.2 Deletion Procedures

Upon account deletion or expiration of retention periods, we securely delete or anonymize your information using industry-standard methods.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 Access and Portability

  • Right to Access: Request copies of your personal data
  • Right to Portability: Request transfer of your data to another service provider

8.2 Correction and Deletion

  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data under certain circumstances

8.3 Restriction and Objection

  • Right to Restriction: Request restriction of processing your data
  • Right to Object: Object to processing of your data for specific purposes

8.4 Consent Withdrawal

  • Right to Withdraw Consent: Withdraw previously given consent at any time

8.5 Complaint Rights

  • Right to Complain: Lodge complaints with data protection authorities

To exercise these rights, please contact us using the information provided in Section 12.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use information about you, including:

9.1 Types of Cookies Used

  • Essential Cookies: Necessary for platform functionality and security
  • Performance Cookies: Collect information about platform usage and performance
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Help us understand how users interact with our Services

9.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect platform functionality.

10. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

11. Third-Party Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to third-party practices. We encourage you to review the privacy policies of any third-party services you use.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer
RIMBA AERON LINK TERPERCAYA INDONESIA RAYA
Email: [email protected]
Address: Jakarta, Indonesia
Phone: +62 21 1234 5678

We typically respond to privacy inquiries within 30 days.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Services after changes constitutes acceptance of the updated policy.

14. Regional Specific Provisions

14.1 European Economic Area (EEA) Users

For users in the EEA, we process personal data in compliance with the General Data Protection Regulation (GDPR). Our data protection representative in the EU can be contacted at [email protected].

14.2 California Residents

California residents have specific rights under the California Consumer Privacy Act (CCPA). Please see our separate California Privacy Notice for details.

14.3 Indonesian Users

For users in Indonesia, we comply with Indonesian Personal Data Protection regulations. Our Data Protection Officer for Indonesia is available at [email protected].

Privacy Commitment

At AERONTOGEL, we believe that privacy is fundamental to trust. We are committed to transparent data practices, robust security measures, and respecting your privacy rights. This Privacy Policy reflects our dedication to protecting your information while delivering powerful analytics solutions.

Last Updated: January 15, 2024