Privacy Privacy Policy
Privacy Policy Effective Date: 26 October 2023 Welcome to balivisaaus.com (“Bali Visa AUS,” “we,” “us,” or “our”). We are an […]
Privacy Policy
Effective Date: 26 October 2023
Welcome to balivisaaus.com (“Bali Visa AUS,” “we,” “us,” or “our”). We are an Indonesian visa agency committed to helping individuals obtain the necessary visas for their travel to Indonesia. Your privacy is of paramount importance to us. This Privacy Policy outlines how Bali Visa AUS collects, uses, discloses, and protects your personal data when you use our website and services. We are committed to complying with applicable data protection laws, including Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU 27/2022 PDP) and the General Data Protection Regulation (GDPR) for our clients residing in the European Union.
1. What Data We Collect
To provide our visa services, we collect various types of personal data. This may include:
- Identity Data: Full name, date of birth, place of birth, nationality, gender, passport number, passport issue and expiry dates, passport copies, visa application forms, photographs, and other identification documents.
- Contact Data: Email address, phone number, residential address, and mailing address.
- Travel Data: Intended travel dates, flight details, accommodation details in Indonesia, and purpose of visit.
- Financial Data: Payment details (e.g., credit card information, bank transfer details). Please note that we do not store full credit card details on our servers; these are processed securely by third-party payment gateways.
- Sensitive Data: In specific cases, and only when strictly necessary for your visa application (e.g., health information for certain visa types, religious beliefs for specific cultural visas), we may collect sensitive personal data. We will always seek your explicit consent before collecting such data.
- Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
- Usage Data: Information about how you use our website, products, and services.
2. How We Use Your Data (Purpose)
We use your personal data for the following purposes and under the following legal bases:
- Processing Visa Applications: To facilitate and process your visa applications to Indonesia, including communication with relevant Indonesian government authorities (e.g., Immigration Department, Ministry of Foreign Affairs). (Legal Basis: Performance of a contract, Legal Obligation).
- Communication: To communicate with you regarding your application status, respond to your inquiries, and provide customer support. (Legal Basis: Performance of a contract, Legitimate Interest).
- Service Improvement: To improve our website, services, and user experience. (Legal Basis: Legitimate Interest).
- Legal Compliance: To comply with our legal obligations, including anti-money laundering and know-your-customer regulations. (Legal Basis: Legal Obligation).
- Marketing: To send you promotional materials, updates, or offers related to our services, only if you have explicitly opted-in to receive such communications. (Legal Basis: Consent).
3. Legal Basis for Processing
Our legal bases for collecting and using your personal data depend on the specific context in which we collect it:
- Performance of a Contract: When processing your visa application, we need your data to fulfill our contractual obligations to you.
- Legal Obligation: We may process your data when it is necessary to comply with a legal obligation, such as requirements by Indonesian immigration law or financial regulations.
- Consent: We will obtain your explicit consent for specific processing activities, especially for sensitive data or marketing communications. You have the right to withdraw your consent at any time.
- Legitimate Interests: We may process your data based on our legitimate interests (or those of a third party) where your interests and fundamental rights do not override those interests.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period for different types of personal data may vary depending on the nature of the data and the specific legal or operational requirements. For example, data related to visa applications will be kept for a period mandated by Indonesian immigration laws, typically several years after the visa issuance or rejection. We regularly review our data retention practices to ensure compliance and minimize the amount of data we hold.
5. How We Share Your Data
We may share your personal data with the following categories of recipients:
- Government Authorities: Primarily with the Indonesian Directorate General of Immigration, Indonesian embassies, consulates, and other relevant government bodies to process your visa application.
- Service Providers: Third-party service providers who perform services on our behalf, such as payment processors, IT and system administration services, data hosting, and professional advisors (e.g., lawyers, accountants). These providers are contractually bound to protect your data and only use it for the purposes specified by us.
- Affiliates: If Bali Visa AUS operates as part of a larger group, your data may be shared with affiliated companies for internal administrative purposes or service delivery.
- Legal Requirements: When required by law, court order, or governmental regulation, or if we believe such action is necessary to protect and defend our rights or property.
We implement appropriate safeguards for international data transfers, particularly for EU clients under GDPR, ensuring that transfers are based on adequate protection mechanisms such as standard contractual clauses or similar legal frameworks.
6. Your Rights
Depending on your location and applicable data protection laws (UU 27/2022 PDP, GDPR), you have the following rights regarding your personal data:
- Right to Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to Be Forgotten”): To request the deletion of your personal data under certain circumstances.
- Right to Restriction of Processing: To request that we limit the processing of your data under certain conditions.
- Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
- Right to Object: To object to the processing of your personal data in certain situations, including for direct marketing.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
- Right to Lodge a Complaint: To lodge a complaint with a supervisory authority regarding our processing of your personal data.
To exercise any of these rights, please contact us using the details provided below.
7. Data Security
We implement robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Using SSL/TLS encryption for data in transit.
- Access Controls: Restricting access to personal data to authorized personnel on a need-to-know basis.
- Regular Audits: Conducting periodic security assessments and vulnerability scans.
- Staff Training: Providing regular data protection and security awareness training to our employees.
- Physical Security: Implementing physical security measures for our data storage facilities.
Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
8. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand user behavior. Cookies are small data files stored on your device. You can manage your cookie preferences through your browser settings. For more detailed information, please refer to our separate Cookie Policy (if applicable).
9. Third-Party Links
Our website may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party websites you visit.
10. Children’s Privacy
Our services are not intended for individuals under the age of 18 without parental or guardian consent. We do not knowingly collect personal data from children without appropriate legal basis. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to remove that information from our servers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically for