PT Kawasan Industri Terpadu Batang ("KITB") is fully committed to protecting the privacy and security of Personally Identifiable Information (PII) or Personal Data. This Privacy Notice is established to fulfill the Company's compliance with Information Security Management System (ISMS) standards ISO/IEC 27001:2022, applicable laws and regulations (including the Personal Data Protection Law), and contractual requirements.
This page aims to inform tenants, vendors, business partners, and visitors regarding KITB's practices in the collection, processing, storage, and disclosure of Personal Data within the scope of industrial estate operations.
Legal Basis for Personal Data Processing
In processing Personal Data, KITB is required to have a valid legal basis. KITB may rely on one or more legal bases as stipulated under Law No. 27 of 2022 on Personal Data Protection, including:
- Consent
- Contractual necessity with the Personal Data Subject
- Compliance with legal obligations
- Performance of tasks in the public interest, public services, or exercise of authority
- Protection of vital interests
- Legitimate interests
Purpose of Personal Data Processing
We process Personal Data based on lawful grounds, including for data collection purposes, contractual obligations, compliance with legal requirements, and legitimate business interests. Such information is used exclusively to:
- Evaluate, facilitate, and manage partnerships, land leasing, and procurement of goods and services.
- Ensure physical and operational security within the KITB area.
- Conduct official correspondence and fulfill business administrative requirements.
- Provide services and respond to inquiries submitted by you.
- Communicate with you regarding products, programs, or events available at KITB, including news and marketing information that may be of interest.
- Fulfill audit, regulatory, and other legal obligations.
Personal Data We Process
In order to fulfill the purposes of Personal Data processing, we may collect Personal Data and documents containing Personal Data directly from you or through authorized third parties, in accordance with applicable laws and regulations.
We collect Personal Data in a limited and specific manner, only covering information that is relevant and necessary for our services.
Your Personal Data will be stored and processed only for as long as necessary to achieve the intended purposes. Afterward, the data will be securely deleted or destroyed.
If you discontinue the use of our services, or if your consent is withdrawn, KITB will only retain, use, and/or disclose your Personal Data as required by applicable laws.
The types of Personal Data we process may vary depending on the purpose and activity, including:
- Full Name
- Biometric Data (Facial Image)
- Mobile Phone Number
Note: You are required to provide accurate and up-to-date information. KITB reserves the right to request additional documentation for verification purposes.
Personal Data Security
KITB ensures that all collected Personal Data is protected against unauthorized access, modification, disclosure, or destruction.
The Company implements both technical and administrative measures aligned with information security controls to maintain data confidentiality, integrity, and availability, in accordance with applicable laws and contractual obligations.
Processing of Personal Data by Third Parties
We do not sell or lease Personal Data to third parties. Personal Data may only be shared with third parties (such as auditors, consultants, IT service providers, or law enforcement authorities) under the following conditions:
- For the purpose of delivering services or supporting operational activities on behalf of KITB, where such parties are bound by Non-Disclosure Agreements (NDAs).
- To comply with legal, regulatory, or court requirements.
Personal Data Retention
We retain Personal Data only as long as necessary to fulfill its intended purpose, comply with legal or regulatory retention requirements, and resolve disputes.
Once the data is no longer required, it will be securely deleted or destroyed in accordance with the Company's standard data disposal procedures.
User Rights
You have rights as a Personal Data Subject ("Data Subject Rights") in accordance with the Personal Data Protection Law and applicable Company policies, including:
- The right to obtain information.
- The right to access and/or obtain copies of Personal Data.
- The right to complete, update, and/or correct inaccurate Personal Data.
- The right to terminate Personal Data processing.
- The right to erase Personal Data.
- The right to data portability.
- The right to interoperability.
- The right to withdraw consent (where processing is based on consent).
- The right to delay or restrict processing proportionally.
To exercise your rights, you may submit a request through KITB's ISMS Team.
Collection of Personal Data
We collect Personal Data lawfully when you:
- Access the "Contact Us" page on our system.
- Enter into any agreement with us.
- Contact us via telephone, in-person meetings, social media platforms, email, or other communication channels.
- Participate in customer surveys or provide feedback voluntarily.
- Provide data obtained from legitimate third-party sources, including but not limited to identity verification providers, banking/payment partners, and data analytics providers.
All Personal Data is processed in accordance with applicable laws and Personal Data Protection principles.
Storage of Personal Data
We securely store your Personal Data within our systems and retain it only for as long as necessary to fulfill its intended purposes. After the retention period, the data will be deleted.
To protect your Personal Data, we implement internationally recognized Information Security Management System standards ISO/IEC 27001:2022, ensuring data confidentiality, integrity, and availability through appropriate controls and mitigation measures.
We continuously strive to enhance data security by adopting the latest technologies and complying with applicable regulations, while prioritizing the protection of your Personal Data at the highest standards.
Changes and Updates to the Privacy Notice
We may review and update this Privacy Notice periodically to ensure continued compliance with changes in data protection laws, security standards, or business processes.
Any updates will be officially communicated through our designated communication channels.
Third-Party Website Privacy Policies
This Privacy Notice applies only to websites and applications directly provided by KITB.
If you access external websites, you are advised to review their respective privacy policies.
Contact Us
For inquiries, exercising data subject rights, or reporting information security and privacy incidents, please contact the KITB ISMS Team:
- Email: [email protected]
- Address: Jl. Tol Semarang Batang KM 371 +800, Ketanggan, Gringsing, Batang, Central Java 51281