Patra Jasa Personal Data Protection (PDP) Notice

PT Patra Jasa is a company operating through three business pillars, namely Property & Development, Hotels & Resorts, and Services. Having first operated in the hospitality industry in 1975, PT Patra Jasa expanded its business into property and multi-services.

As a subsidiary of one of the largest State-Owned Enterprises (SOEs) in Indonesia, PT Pertamina (Persero), PT Patra Jasa’s credibility and experience in providing the best services are unquestionable. PT Patra Jasa has several projects, including 9 hotel units and 2 hotel operatorships spread across several provinces in Indonesia, 9 property investment & development projects consisting of apartments and residential properties, as well as excellent multi-service offerings, hereinafter referred to as “We”.

This PDP Notice applies to all visitors and/or users of Our website as Personal Data Subjects (hereinafter referred to as “You”).

PT Patra Jasa fully recognizes that Personal Data is an important asset. Therefore, We are committed to maintaining the confidentiality and protection of Your Personal Data.

PT Patra Jasa implements appropriate protection policies and practices in accordance with the Personal Data Protection Law.

Please read and understand this PDP Notice carefully so that You understand how Your Personal Data is processed.

 

1. Scope of the PDP Notice

This PDP Notice governs the policies and practices implemented by PT Patra Jasa as a Personal Data Controller in obtaining, correcting, updating, disseminating, displaying, publishing, transferring, disclosing, deleting, and destroying (hereinafter referred to as “Processing”) Your Personal Data.

 

2. Rights of Personal Data Subjects

As a Personal Data Subject, You have the right to:

1. Obtain information regarding the clarity of identity, legal basis, purpose of requesting and using Personal Data, and accountability of the party requesting the Personal Data.
2. Complete, update, and/or correct errors and/or inaccuracies in Personal Data concerning You.
3. Access and obtain a copy of Personal Data concerning You in accordance with applicable laws and regulations.
4. Terminate the processing, delete, and/or destroy Personal Data concerning You in accordance with applicable laws and regulations.
5. Withdraw consent previously granted to the Personal Data Controller for the processing of Personal Data concerning You.
6. Object to decisions based solely on automated processing, including profiling, which produce legal consequences or have a significant impact on the Personal Data Subject.
7. Postpone or restrict the processing of Personal Data proportionately in accordance with the purposes of Personal Data processing.
8. Obtain and/or use Personal Data concerning You from the Personal Data Controller in a form consistent with a commonly used structure and/or format or one that can be read by electronic systems.
9. Use and transmit Personal Data concerning You to another Personal Data Controller, provided that the systems used can communicate securely in accordance with Personal Data Protection (PDP) principles and applicable laws and regulations.

You are also entitled to other rights in accordance with applicable laws, including but not limited to the Personal Data Protection Law.

 

3. Personal Data Processed

We obtain and collect information that identifies and/or can identify an individual, either independently or when combined with other information, directly or indirectly, through electronic and/or non-electronic systems.

The Personal Data collected and processed is Your Personal Data provided directly by You based on Your consent when visiting Our website through applications or website portals managed by Us, such as www.patra-jasa.com.

Personal Data required by Us includes general and specific Personal Data relevant to the products You use, including but not limited to the following:

1. General Data, such as:
   1. Full name.
   2. Gender.
   3. Mobile phone number.
   4. Email address.
   5. Office or residential address.
   6. Population Identification Number (KTP/NIK).
2. Specific Data, such as:
   1. xxxxx (if applicable).

 

4. Purposes of Personal Data Processing

We collect Personal Data for various purposes permitted under the applicable laws and regulations of the Republic of Indonesia.

In processing Your Personal Data, We have the following purposes for processing Personal Data (“Purposes”):

1. For marketing purposes related to products offered by Us, including sending promotions, information about new products, news, surveys, and updates regarding Our business;
2. To comply with applicable laws and regulations;
3. To provide Services to You;
4. To resolve issues related to access to the Services;
5. To maintain, improve, develop, test, and personalize Our website network to meet Your needs and preferences;
6. To process Personal Data for the purpose of creating Your profile as a Personal Data Subject;
7. To invite You to events organized by Us.

 

5. Storage of Personal Data

We are committed to storing Your Personal Data with the best possible protection. Certain Personal Data may also be managed, processed, and stored by third parties cooperating with Us, while remaining subject to obligations regarding access and effective supervision in accordance with applicable laws and regulations.

We retain Your Personal Data for the Personal Data Processing Purposes described above, unless such retention is required or permitted under the applicable laws and regulations of the Republic of Indonesia.

We will cease processing Your Personal Data after determining that the grounds for collecting such Personal Data are no longer applicable and that further processing is no longer required for legal or business purposes.

 

6. Processing of Personal Data

The legal bases for processing Personal Data by Us include:

1. Valid and explicit consent from the Personal Data Subject for one (1) or more specific purposes communicated by Us to the Personal Data Subject;
2. Fulfillment of contractual obligations where the Personal Data Subject is a party to an agreement, or fulfillment of the Personal Data Subject’s request prior to entering into an agreement;
3. Fulfillment of Our legal obligations in accordance with applicable laws and regulations;
4. Fulfillment of other legitimate interests, taking into account the purposes, necessity, and balance between Our interests and the rights of the Personal Data Subject.

You hereby acknowledge that, where required under applicable Personal Data Protection regulations, Personal Data may be processed in the following circumstances:

1. For applicable legal purposes and/or to respond to ongoing legal proceedings.
2. To protect Our safety, the safety of Personal Data Subjects, or the safety of others, or for legitimate interests in the context of:
   1. National security.
   2. Law enforcement proceedings.
   3. State administration.
   4. Supervision of the financial services sector, monetary system, payment systems, and financial system stability.
   5. Aggregated data and its processing for statistical purposes and scientific research in connection with state administration.
   6. Emergency situations officially declared by the Government.
3. For internal audit purposes within Our organization and affiliates.
4. If necessary, in connection with legal proceedings brought against Us, Our officers, employees, affiliates, or other related third parties.
5. To establish, exercise, protect, defend, and enforce Our legal rights.
6. In processing Personal Data, We may cooperate with other parties acting as Joint Controllers or Personal Data Processors.
7. In connection with the Processing of Personal Data with Our affiliated companies, We will only provide such information in good faith and in summary form based on legitimate legal interests.
8. To disclose Your Personal Data to third parties for the purpose of providing Services to You and assisting the Government of the Republic of Indonesia and its supporting institutions in carrying out state functions.
9. In certain circumstances, We may need to process specific Personal Data, such as information relating to health, genetics, biometric identifiers, and other required information. Where We require Your explicit consent to process such data, We will provide details regarding the processing of Personal Data at the time of collection and request Your consent.

 

7. Access to Personal Data

We are committed to fulfilling Your right to access Personal Data collected and processed. In responding to requests for access to Personal Data, We may refuse a request if it meets one or more of the following conditions:

1. It may endanger the physical or mental security of You as the Personal Data Subject and/or another person.
2. It may result in the disclosure of another person’s Personal Data.
3. It conflicts with national defense and security interests.

For further information regarding requests to access Personal Data, You may contact Us through the communication channels provided below.

 

8. Correction and Updating of Your Personal Data

If You identify any errors in Your Personal Data caused by inaccuracies, or if such Personal Data needs to be updated, You may request Us to correct, complete, and/or update the Personal Data under Our management by contacting the communication channels provided below.

We will make the correction within 3 x 24 (three times twenty-four) hours from the time We receive the request for data updating/correction submitted by You.

In the event of inaccuracies in the Personal Data provided by You, We reserve the right to discontinue Services based on Our knowledge and consideration.

We encourage You to actively ensure the accuracy and updating of Your Personal Data.

 

9. Security and Confidentiality of Your Personal Data

The security and confidentiality of Your Personal Data are priorities for Us. We are committed to applying Our best efforts to protect and secure Personal Data against unauthorized access, collection, processing, analysis, storage, disclosure, correction, and deletion.

We continuously update these measures to ensure that they remain aligned with current technology and best practices. Although We strive to maintain the highest security standards, please note that no system is completely secure.

In the event of unauthorized access or unlawful activities affecting the confidentiality of Personal Data beyond Our control, We will notify You at the earliest opportunity so that the risks arising from such an incident can be mitigated. You are responsible for maintaining the confidentiality of Your Personal Data, including safeguarding username, password, email, and OTP (One-Time Password) from any unauthorized person, and for maintaining and taking responsibility for the security of the devices used.

 

10. Deletion and Destruction of Personal Data

In accordance with applicable laws and regulations or Our data retention policy of 10 (ten) years, or upon Your request, We may delete and/or destroy Your Personal Data so that it can no longer identify You, except where retention is required to fulfill legal obligations or for future evidentiary, taxation, audit, and accounting purposes.

After We delete and/or destroy Your Personal Data, We will send a notification to You via email at customer.care@patra-jasa.com.

 

11. Changes to the PDP Notice

We may update Our PDP Notice from time to time. Therefore, You are encouraged to review this page periodically for any changes. We will inform You of any changes by posting them on this page. Such changes will become effective immediately after they are posted on this page.

In relation to Our use of Your Personal Data, You have the right to:

1. Request a copy of Personal Data.
2. Request correction of inaccurate data or completion of incomplete Personal Data.
3. Submit a complaint to the relevant Data Protection authority or other independent regulator regarding the use of Personal Data.
4. Request deletion of Personal Data where such data is no longer required for the specified purposes or where there is no other legal basis for processing, unless otherwise restricted by applicable provisions.

You may submit such requests at any time by providing a reasonable notice through the communication channels provided by Us.

 

12. Withdrawal of Consent

You may withdraw Your consent to the processing of Personal Data for promotional/marketing purposes by contacting Us via email at customer.care@patra-jasa.com.

 

13. Cookie Policy

We use cookies to improve Your experience when browsing the website, provide personalized advertisements or content, and analyze Our traffic.

This website uses cookies to distinguish You from other visitors to this website. This helps Us provide a better experience when You use the website and also enables Us to improve the quality of Services provided through the website.

You may choose to enable or disable some or all cookies. However, disabling certain cookies may affect Your browsing experience.

 

14. Contact Us

If You have any questions regarding this PDP Notice, complaints regarding Our Services, or matters relating to the handling of legal disputes, please contact Us through the following communication channels:

 

Call Center
Email	customer.care@patra-jasa.com