Privacy Policy for Personal Data Processing- General Provisions
This personal data processing policy is prepared in accordance with the requirements of Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 (hereinafter referred to as the “Personal Data Law”) and defines the procedures for processing personal data and measures to ensure the security of personal data implemented by PT.LASERME BALI GROUP (hereinafter referred to as the “Operator”).
1.1. The Operator considers the observance of human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family confidentiality, as its most important objective and condition for conducting its activities.
1.2. This policy regarding the processing of personal data (hereinafter referred to as the “Policy”) applies to all information the Operator may receive about visitors to the website https://balance-massage.id.
2.
Basic Concepts Used in the Policy2.1. Automated processing of personal data – processing of personal data using computer technology.
2.2. Blocking of personal data – temporary suspension of personal data processing (except when processing is necessary to clarify personal data).
2.3. Website – a set of graphical and informational materials, as well as computer programs and databases, ensuring their availability on the internet at the network address https://balance-massage.id.
2.4. Personal data information system – a set of personal data contained in databases and the information technologies and technical means ensuring their processing.
2.5. Anonymization of personal data – actions resulting in the inability to identify the ownership of personal data to a specific User or other subject of personal data without additional information.
2.6. Processing of personal data – any action (operation) or set of actions (operations) performed with or without automated means with personal data, including collection, recording, organization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction of personal data.
2.7. Operator – a state body, municipal body, legal or natural person who organizes and/or carries out the processing of personal data, as well as defines the purposes of personal data processing, the composition of personal data to be processed, and actions (operations) performed with personal data.
2.8. Personal data – any information related directly or indirectly to a specific or identifiable User of the website https://balance-massage.id.
2.9. Personal data permitted by the subject of personal data for dissemination – personal data to which the subject of personal data provides unrestricted access by giving consent for processing in accordance with the Personal Data Law (hereinafter referred to as “data permitted for dissemination”).
2.10. User – any visitor to the website https://balance-massage.id.
2.11. Provision of personal data – actions aimed at disclosing personal data to a specific person or group of persons.
2.12. Dissemination of personal data – any actions aimed at disclosing personal data to an indefinite circle of persons (transmitting personal data) or at making personal data accessible to an indefinite circle of persons, including making personal data public in mass media, posting on information and telecommunications networks, or otherwise providing access to personal data.
2.13. Cross-border transfer of personal data – the transfer of personal data to the territory of a foreign state to a foreign state authority, a foreign individual, or a foreign legal entity.
2.14. Destruction of personal data – any actions resulting in the irrevocable destruction of personal data with no possibility of further recovery in the personal data information system and/or the destruction of physical media containing personal data.
3.
Operator’s Main Rights and Obligations3.1. The Operator has the right to:
• receive accurate information and/or documents containing personal data from the personal data subject;
• continue processing personal data without the subject’s consent in the case of withdrawal of consent or a demand to cease processing, provided there are legal grounds specified in the Personal Data Law;
• independently determine the composition and list of measures necessary and sufficient to ensure compliance with the obligations provided by the Personal Data Law and other regulations, unless otherwise provided by the Personal Data Law or other federal laws.
3.2. The Operator is obligated to:
• provide the personal data subject, upon request, with information regarding the processing of their personal data;
• organize personal data processing according to the current legislation of the Russian Federation;
• respond to inquiries and requests from personal data subjects and their legal representatives as required by the Personal Data Law;
• submit necessary information to the authorized body for the protection of personal data subjects’ rights within 10 days from the receipt of such a request;
• publish or otherwise provide unrestricted access to this Personal Data Processing Policy;
• take legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, provision, and dissemination, as well as from other unlawful actions;
• cease the transmission (distribution, provision, access) and processing of personal data and destroy personal data in the manner and cases stipulated by the Personal Data Law;
• fulfill other obligations provided by the Personal Data Law.
4.
Main Rights and Obligations of Personal Data Subjects4.1. Personal data subjects have the right to:
• Receive information regarding the processing of their personal data, except as provided by federal law. The information is provided by the Operator in an accessible form and must not contain personal data related to other subjects, except in cases where there are legal grounds for such disclosure. The list of information and the procedure for obtaining it is established by the Personal Data Law;
• Request the Operator to clarify, block, or delete their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing, and take measures to protect their rights as provided by law;
• Set a condition of prior consent for processing personal data for the promotion of goods, works, and services in the market;
• Withdraw consent to the processing of personal data and demand cessation of processing;
• File a complaint with the authorized body for personal data protection or in court regarding unlawful actions or inaction by the Operator in processing their personal data;
• Exercise other rights provided by the legislation of the Indonesia.
4.2. Personal data subjects are required to:
• Provide accurate data about themselves to the Operator;
• Notify the Operator of updates (changes) to their personal data.
4.3. Individuals who provide inaccurate information about themselves or information about another subject without their consent bear responsibility under the legislation of the Indonesia.
5.
Principles of Personal Data Processing5.1. Personal data processing is carried out on a lawful and fair basis.
5.2. Processing is limited to specific, pre-defined, and lawful purposes. Processing incompatible with the purposes of collecting personal data is not allowed.
5.3. The combination of databases containing personal data processed for incompatible purposes is not permitted.
5.4. Only personal data relevant to the purposes of processing are subject to processing.
5.5. The content and scope of processed personal data correspond to the stated purposes of processing, without excessive data being processed.
5.6. Personal data processing ensures accuracy, sufficiency, and, if necessary, relevance to the processing purposes. The Operator takes measures to delete or clarify incomplete or inaccurate data.
5.7. Personal data storage is conducted in a form that allows identifying the subject, no longer than required for processing purposes unless a longer period is required by federal law or contract. Once processing purposes are achieved or necessity ceases, data is destroyed or anonymized unless otherwise required by federal law.
6.
Purposes of Personal Data ProcessingPurpose of ProcessingInforming the User via email.
Personal DataFull name, email address, phone numbers.
Legal BasisOperator’s founding documents.
Types of Personal Data ProcessingCollection, recording, organization, accumulation, storage, destruction, and anonymization. Sending informational emails.
7.
Conditions for Personal Data Processing7.1. Processing is carried out with the data subject’s consent.
7.2. Processing is necessary for purposes established by international agreements or laws of the Russian Federation or to fulfill functions assigned to the Operator by law.
7.3. Processing is necessary for justice administration, court order execution, or other obligations under Russian law.
7.4. Processing is necessary to execute a contract involving the data subject as a party, beneficiary, or guarantor.
7.5. Processing is necessary to protect the Operator’s or third parties’ lawful interests or to achieve public purposes, provided that the data subject’s rights and freedoms are not violated.
7.6. Publicly available personal data is processed per the data subject’s consent.
7.7. Processing is carried out for personal data to be published or disclosed per federal law.
8.
Collection, Storage, Transfer, and Other Processing MethodsThe security of processed personal data is ensured through legal, organizational, and technical measures.
8.1. The Operator ensures data confidentiality and takes measures to prevent unauthorized access.
8.2. Personal data is not shared with third parties except as required by law or with the subject’s consent.
8.3. Users may update personal data by notifying the Operator via email: balance.home.service@gmail.com with “Data Update” as the subject.
8.4. The data processing period depends on the processing purposes unless a longer period is specified by contract or law.
8.5. Information collected by third parties is stored and processed per the User Agreement and Privacy Policy of these services. The Operator is not responsible for the actions of these third parties.
8.6. Restrictions on the transfer, processing, or conditions of processing do not apply to personal data processed for public or state interests.
8.7. The Operator ensures confidentiality in data processing.
8.8. Storage of personal data allows for identifying the subject no longer than required for processing.
8.9. Processing termination may occur if the processing purpose is achieved, consent expires, consent is withdrawn, or illegal processing is detected.
9.
Actions Performed by the Operator with Personal Data9.1. The Operator performs data collection, recording, organization, accumulation, storage, updating, extraction, usage, transfer, anonymization, blocking, deletion, and destruction.
9.2. Automated processing of personal data is performed.
10.
Cross-Border Transfer of Personal Data10.1. Before starting cross-border data transfers, the Operator must notify the authorized body.
10.2. The Operator must obtain information from foreign recipients regarding data protection.
11.
Confidentiality of Personal DataThe Operator and others with data access must not disclose data without the subject’s consent, except as required by federal law.
12.
Final Provisions12.1. Users may obtain explanations regarding data processing by contacting the Operator via email: balance.home.service@gmail.com.
12.2. Changes to this Policy will be reflected in this document, effective until a new version replaces it.
12.3. The current version is publicly available at https://balance-massage.id/privacy.