This Privacy Policy is prepared in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and applies to the following websites operated by PT Rancang Akses Digital ("we", "us", or "our") as the Personal Data Controller:
Your privacy matters to us. This policy explains what personal data is collected, the legal basis and purpose for collecting it, how it is protected, and what rights you have as a data subject.
1. Information collected
These websites do not collect personal data by default (such as your name, email address, or contact information), unless you voluntarily contact us, make a purchase, or apply to a Call for Contributors.
The legal basis for processing personal data in all cases described below is your explicit, voluntarily given consent (Article 20 paragraph (2) letter a of the PDP Law). You may withdraw this consent at any time, and doing so does not affect the lawfulness of processing carried out before the withdrawal.
a. Transactions via Mayar
If you purchase a product or service from us, the transaction is processed through Mayar, the payment and checkout provider we use.
Mayar may collect:
- Your name
- Your address
- Your phone number
- Your email address
This information is used to process the transaction, handle shipping (where applicable), and communicate with you about your order. We do not use it for tracking or profiling beyond what the transaction requires, and we do not share it with any third parties other than Mayar as our payment service provider.
b. Filling Google Forms
We may occasionally invite you to contribute to one of our projects or ask you to fill out an evaluation form, collecting your personal data using Google Forms such as:
- Your name
- Your email address
- Your mobile number
As the data controller, we do not share your information with any third parties. Google Forms is operated by Google, which is also based in the United States, so this data may be processed outside Indonesia.
2. Third-party services that may collect data
These sites also use third-party services that may collect technical or usage data:
a. Cloudflare
Used for security, performance, and DDoS protection. It may log:
- IP address
- Browser and device information
- Pages visited and access time
b. Google Fonts
Fonts may be served via Google Fonts. Google may record your IP address when loading font files.
3. Cookies
Cookies are used for:
- Basic functionality
- Performance and security via Cloudflare
These sites do not use tracking cookies from third-party marketing tools. No consent banner is needed as no personal or identifying cookies are set.
4. Your rights as a data subject
Under the PDP Law, you have the right to:
- Obtain information about the clarity of identity, legal basis, purpose, and accountability of the party requesting your personal data (Article 5)
- Complete, update, or correct your personal data if it is inaccurate or incorrect (Article 6)
- Access and obtain a copy of your personal data (Article 7)
- Terminate processing, delete, and/or destroy your personal data (Article 8)
- Withdraw your consent to the processing of your personal data (Article 9)
- Object to decisions based solely on automated processing that produce legal effects on you (Article 10)
- Delay or restrict the processing of your personal data proportionally (Article 11)
- Sue and receive compensation for violations in the processing of your personal data (Article 12)
- Obtain and use your personal data in a commonly used, machine-readable format, or transfer it to another data controller (data portability, Article 13)
If you are in a region covered by other data protection regulations such as GDPR or CCPA, equivalent rights under those frameworks also apply to you.
To exercise these rights, please contact us at the email below. We will respond without undue delay and help direct you to the relevant third-party service if needed.
5. Data security
We implement reasonable technical and organizational measures to prevent unauthorized access, alteration, leakage, or deletion of personal data, in accordance with Article 39 of the PDP Law. This includes the use of Cloudflare's security services, encrypted connections (HTTPS/TLS), and internal access restrictions on data we store ourselves.
6. Personal data protection failure notification
In the event of a failure to protect personal data (a data breach), we will provide written notice to you no later than 72 hours after we become aware of the incident, in accordance with Article 46 of the PDP Law. This notice will include the type of personal data affected, the time and circumstances of the incident, and the steps taken to address and remediate it.
7. International data transfers
The service provider we use for Google Forms and Google Fonts, namely Google, is based in the United States. In accordance with Article 56 of the PDP Law, we only transfer personal data abroad to providers that maintain an equivalent level of data protection, and on the basis of the explicit consent you give when filling out such a form.
8. Data retention
If you complete a transaction via Mayar, your data will be retained until:
- You request data deletion
- We stop using Mayar as our payment service provider
If you fill out any Google Forms we provide, your data will be retained until:
- You request data deletion
- We delete that particular Google Forms
Contact
If you have any questions about this privacy policy, or wish to exercise your rights as a data subject, feel free to reach out:
Imprint
These sites are operated by:
PT Rancang Akses Digital
Jakarta, Indonesia
Acting as the Personal Data Controller under the PDP Law
[email protected]
radikal.id
These are websites created to showcase our profile, projects, and professional work related to accessibility and digital design.
