CJ Indonesia respects your privacy and is committed to protecting it through our compliance with the prevailing laws and regulations in the relevant jurisdiction Law no 27 of 2022 and this Privacy and Cookie Notice.

By agreeing to this Notice, you acknowledge that you have read and understood this Notice and agree to its terms and you explicitly agree and consent to us to process your Personal Data (as defined in the Applicable Laws) in accordance with this Notice.

This Notice is our policy which describes how CJ Indonesia obtains, collects, stores, controls, uses, analyzes, repairs, updates, displays, publishes, discloses, transfers, protects, deletes, retains, destructs or otherwise processes your Personal Data (“Personal Data Processing”) when you access or use, in any manner, any content, products, or related activities, including offline events and through the internet domains owned or operated by CJ Indonesia, which include, but are not limited to: cj.co.id

Please read this Notice thoroughly to ensure that you understand our Personal Data protection practices. If you do not consent to the Personal Data Processing as described in this Notice, please do not use our services or access our platforms.

You may withdraw your consent to the Personal Data Processing at any time by providing us with a reasonable notice in writing using the contact details set out below. Upon withdrawal of such consent, you may no longer be able to use our services. Withdrawal of your consent may result in termination of the service, deletion of account or termination of your contractual relationship with us, with all rights and obligations that arise remaining fully satisfied.

If you provide us with any third parties’ Personal Data, you hereby represent and warrant that any necessary consent has been obtained from such third parties and you hereby agree on behalf of such third parties to their Personal Data Processing. We may request you for evidence of such consent at any time.

 

Article 1 (Purpose of Collecting and Processing Personal Data)

1. CJ Indonesia collects only basic Personal Data necessary to provide its services, and seeks your consent when collecting aliitional information for services tailored to your tastes and interests. If you are a registered user, not providing optional information will not restrict your use of services. If you are not a registered user, you may refuse to give your consent, in which case you will not able to purchase items at CJ Indonesia.
2. CJ Indonesia does not collect any sensitive Personal Data such as your race or ethnicity, religion and philosophical beliefs, country of origin, political opinions, criminal record, medical.

Classification	Purposes	Details
Required	Customer management	To confirm your consent on registration To fulfill legal obligations, suspend services to those who violate the terms and conditions and Applicable Laws, and restrict malicious use To give notifications and to confirm communication channel to deal with customer service To confirm your request for account registration and withdrawal, and to manage, maintain, fulfill, and settle contracts To provide services to registered customers
	Contract fulfilment and billing for your use of services	To acquire accurate transaction information for billing and shipping To deal with your complaints on services To operate the customer service center and enable you to redeem and accumulate reward points To provide refunds and collect payment information for your purchases of goods or services
Optional	Marketing activities and development of new services	To provide personalized services, convenience, and benefits To notify you of upcoming events, special offers, etc. To analyze your use of services and marketing trends (individual and group statistics), and develop new services To conduct marketing activities for CJ Indonesia and its affiliates To send periodical newsletters To promote services and products offered by CJ Indonesia or its affiliates To provide information on promotions and opportunities for participation of event(via e-mail, social media account, etc,), send URLs for app installation, etc.
	Use of other services	To participate in events on the CJ Indonesia website and on social media
Other	Information collected/generated during use of services or business processing	To analyze your interests and patterns of use for marketing campaigns, and conduct statistical analysis and research to develop services To prepare for intrusion of Personal Data and preserve records for customer dispute resolution To proceed with payment for your purchase To prevent fraudulent, participate event For user analysis of services and products

 

Article 2 (Personal Data CJ Indonesia Collects and Methods of Collection)

CJ Indonesia collects the following Personal Data.

Classification	Methods	Collected/Processed Information
Required	When you register (at CJ Indonesia)	Password, E-mail Address, Age Group, Name
	When you purchase an item at CJ Indonesia online	Shipping Information: Name, Contact No., Address, E-mail Address Payment Information When you pay by credit card: IP Address, Payment Information such as Credit Card No. When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
	When you purchase as a guest	Shipping Information: Name, Contact No., Address, E-mail Address, Guest Password Payment Information When you pay by credit card: IP Address, Payment Information such as Credit Card No. When you pay via a payment gateway: IP Address, Payment Information such as Credit Card No.
Optional	When you agree to the use of your information for marketing activities	Date of Birth, Gender
	When you submit a beauty profile	Skin Tone, Skin Type, Skin Concern, Hair Color, Hair Type, Hair Concern, Eye Color
	Participate in Event(ex, Beauty Tester)	Name, Contact No., Address, E-mail Address
	When you participate in an event on the SNS of CJ Indonesia.	SNS ID, SNS nickname, SNS profile image, Address, Contact No.
	For CJ Indonesia When you agree to receive shopping or event information	When you agree to receive shopping or event information via E-mail Address: E-mail Address When you agree to receive shopping or event information via APP PUSH: PUSH token
	[For guest] When you agree to receive newsletter	Email address, newsletter reception/opening record
	When you agree to join CJ Indonesia Affiliate, Reward(Cash Out), participate Affiliate Exclusive event.	Join : SNS ID that you selected, Country of your activity, Categories that you are interested in Reward : PayPal ID event : Name, Contact No., Address, E-mail Address
Other	Information collected/generated during use of services or business processing	Service Usage History (Usage Time and Purchase History of Items and Services) History of Payment/Account Suspension/Visits, IP Address, Cookies Device Information (Type, OS Version Number, Model No,Device identification information)

CJ Indonesia seeks your consent for optional information collected when you participate in an event, make an inquiry, and use specific services.)

 

Article 3 (Outsourcing of Personal Data Handling)

CJ Indonesia outsources certain services to the following companies. In accordance with the Applicable Laws, essential terms and conditions are stipulated in contract with the entrusted companies to safeguard your Personal Data.

Company Name (Service Provider)	Entrusted Services
KCP (Reconsignment: DHL, ePost, QXPRESS INC)	Collecting Shipping Information and Shipping Purchased Products & Giveaways for Events
Transcosmos Korea	Customer Service Operation & Customer Consultation
KR Partners	Payment Processing
KSNET	Payment Processing
CJ OLIVE NETWORKS, 3TOP	Building up and operating IT system

 

Article 4 (Sharing Personal Data with Third Parties)

• CJ Indonesia processes your Personal Data only for the reasons specified on ‘Purpose of Collecting and Processing Personal Data’ and does not use the information or share with third parties for any other purpose.

  Company Name (Service Provider)	Purpose	Sharing Information	Sharing Period
  Paypal	Application of Seller Protection Policy by Paypal	Name(First name, Last name) Detail Address, City, State/Province, Zip/Postal Code, Country,	Purpose of Collecting and Processing Personal Data is fulfilled

• However, subject to the Applicable Laws, your Personal Data can be shared for the following reasons.
  • When you give your consent.
  • When it is necessary to proceed with payment for service provision.
  • When Personal Data is shared in an unidentifiable form (so that such data can no longer under any circumstances and in any way be classified as or fall within the definition of Personal Data) for statistics, academic, and market research.
• When it is required by the Applicable Laws.
• When it is required by investigating authorities for investigation in compliance with the Applicable Laws.
• Other reasons permitted by the Applicable Laws.

 

Article 5 (Retention, Processing Period, and Disposal of Personal Data)

• CJ Indonesia shall cease the processing of your Personal Data and dispose your Personal Data when: (a) the purpose of processing is fulfilled and/or the Personal Data is no longer necessary for the achievement of the purposes of the processing; (b) there is a request from you to end the processing and/or to delete your Personal Data; (c) you withdraw your consent; and (d) your Personal Data is obtained and/or processed by unlawful means, unless provided otherwise by the Applicable Laws. However, if longer retention is required by the Applicable Laws or you agree to extended retention and processing period of your information, the data is securely stored and used only for the intended purposes.
  1. If longer retention and processing period are required by the Applicable Laws (not limited to followings).
     • Record of Contracts and Subscription Withdrawal: 5 Years
     • Record of Payment and Provision of Goods: 5 Years
     • Record of Customer Complaint and Dispute Resolution: 5 Years
     • Date and Time of Visit: 5 Years (Excluding the date and time of your last visit to confirm the period of service)
  2. To minimize any loss or damages from repetitious account withdrawal and re-registration and to enable you to reactivate your account as required, your data will be destroyed immediately after your account is withdrawn.
  3. Valid commercial credit (such as reward points) is retained until it expires.
• Your information is disposed of or deleted by the following methods depending on its form.
  1. Personal Data stored on paper is shredded or incinerated
  2. Electronically stored Personal Data is securely disposed of and is not retrievable.

 

Article 6 (International Transfer of Personal Data)

CJ Indonesia may process your Personal Data at multiple locations, both in your jurisdiction and outside your jurisdiction by fulfilling the requirements set out in the Applicable Laws, including but not limited to coordinating with the authorized agency or institution in your jurisdiction, if required. We may also transfer your Personal Data to our affiliates and third party partners outside your jurisdiction for purposes as set out in this Notice. Subject to the mandatory requirements under the Applicable Laws, CJ Indonesia shares customer behavioral information and Personal Data with advertising providers for targeted advertising as follows. The details of Personal Data transferred to overseas countries are as follows

Recipient	Sharing information	Relocated countries	Date and method of transfer	Purpose	Sharing Period
Google Analytics	Encrypted membership number, user's web/app service visit, search, and inquiry history	USA	Transmission through the network at the time of service use	Statistical analysis of service use	Until Membership Withdrawal
Google Ads
Facebook	Encrypted membership number, user's web/app service visit, search, and inquiry history	USA	Transmission through the network at the time of service use	Customer activity information collection, Customized recommendation	Until Membership Withdrawal
Twitter
Snapchat
Tik Tok
Rakuten

 

Article 7 (Children's Privacy)

Our website is not intended for or directed to children under the age of 18 (or the age of children otherwise prescribed by the Applicable Laws)13.. We do not knowingly collect Ppersonal informationData directly from children under the age of 183 without parental and/or guardianship consent. If we become aware that a child under the age of 183 has provided us with Ppersonal informationData, we will delete the information from our records.

 

Article 8 (Additional Information for California Residents)

Based on CCPA, The California Privacy Rights Act of 2020 or "CPRA" (Cal. Civ. Code § 1798.100 et seq.) has strengthened regulations on business operators by expanding consumer’s right to privacy to be closer to the European Union’s GDPR.

If you reside in California, this section applies to you and describes our data practices today and in the preceding 12 months.

• We collect the following categories of personal data: identifiers (such as your name, email, or IP address); commercial information (such as records of products you purchased); characteristics of protected classifications under California or U.S. federal law (such as your age or gender); internet or electronic network activity (such as information about your activity on our website); geolocation data (such as your city of residence); audio, electronic, visual, or similar information (such as phone recordings when you call our customer service channels); and inferences drawn from your personal data to create a profile (such as your shopping preferences). For examples of the precise data points we collect and the sources of such collection, please see the Information We Collect section above. We use personal data for the business or commercial purposes described in the Use of Information section above. We disclose personal data for the business purposes described in the Disclosure of Information section above. Additionally, in the preceding 12 months, we have disclosed the following categories of personal data for business purposes to the following categories of recipients:

  Category of Personal Data	Categories of Recipients
  Identifiers	Partners that provide advertising and marketing services, data analytics providers, payment processors, fulfillment partners, customer support partners, Internet service providers, operating systems and platforms, other users, cloud service providers, technical maintenance and system security providers
  Commercial Information	Data analytics providers, partners that provide advertising and marketing services, payment processors, fulfillment partners, customer support partners, fraud prevention partners, and cloud service providers
  Characteristics of Protected Classifications under California or U.S. federal law	Partners that provide advertising and marketing services, other users, and customer feedback platforms
  Internet or other electronic network activity information	Partners that provide advertising and marketing services, data analytics providers, Internet service providers, operating systems and platforms, cloud service providers, and technical maintenance and system security providers
  Geolocation data	Partners that provide advertising and marketing services, data analytics providers, Internet service providers, and operating systems and platforms

• Your Privacy Rights
  • Right to Know(Access) about Personal Data Collected and Disclosed You have the right to request that we disclose certain information to you about our collection, use, and disclosure your Personal Data.
  • Right to Request Correction of Inaccurate Personal Data You have the right to request we correct any inaccuracies of your Personal Data we maintain about you. Once we receive and confirm your verifiable Consumer request, we will correct (and direct our Services Providers and/or Third Parties to correct) the Personal Data we maintain about you.
  • Right to Request Deletion of Personal Data You have the right to request that we delete the Personal Data that we have collected and retained about you. Once we receive and confirm your Consumer request, we will delete (and direct our Services Providers and/or Third Parties to correct) your Personal Data from our records, unless an exception applies.
  • Right to Opt-Out of the Sharing of Personal Data The CPRA defines "sell" as the disclosure of Personal Data to a Third Party for monetary or other valuable consideration. The CPRA defines "share" as the disclosure of Personal Data to a Third Party for cross-context behavioral advertising. We do not sell Personal Data and will not sell Personal Data without providing you with prior notice and an opportunity to opt-out, as required by law. We use services that provide interest-based advertising to you, and our websites and applications use cookies or similar technologies to share Personal Data, including information about your behavior, with our advertising partners to do so. [**Insert name of CJ entity] only allows our advertising partners to collect your Personal Data in this way with your consent.
  • Right to Request Non-discrimination You have the right not to receive discriminatory treatment for exercising any of your rights.

 

Article 9 (Additional Information for EEA residents)

Pursuant to the General Data Protection Regulation or “GDPR”, if you are a resident of the European Economic Area (“EEA”), this section applies to you and we process your Personal Data under the following lawful bases:

• Your consent
• The performance of the contract between you and the Site
• Compliance with our legal obligations
• To protect your vital interests
• To perform a task carried out in the public interest
• For our legitimate interests, which do not override your fundamental rights and freedoms

Where we have collected and processed your Personal Data with your consent, you may withdraw your consent at any time.

• Your Privacy Rights
  • Right to Access your Personal Data You have the right to access to your Personal Data so that you can verify the processing of your Personal Data and its lawfulness.
  • Right to Request Data Portability You have the right to request a copy of your Personal Data in electronic form and to transfer that use on a third party’s services.
  • Right to Request Correction of Inaccurate Personal Data You have the right to request we correct any inaccuracies of your Personal Data we maintain about you. Once we receive and confirm your verifiable Consumer request, we will correct (and direct our Services Providers and/or Third Parties to correct) the Personal Data we maintain about you.
  • Right to Request Erased of Personal Data You have the right to demand that the Data Controller erase the Personal Data relating to you without delay. We shall delete Personal Data in the event of the achievement of the purpose of Personal Data Processing, withdrawal of consent by the information subject, etc.
  • Right to Request Restriction of Data Processing You have the right to restrict the processing of Personal Data about you if any of the following applies to you. If you request a restriction on data processing, the controller can only keep your data.
    You have challenged the accuracy of the Personal Data
    • If the processing is unlawful and you request the restriction of processing of your Personal Data instead of objecting to erasure.
    • We no longer need the Personal Data, but you need the Personal Data for the exercise or defense of legal claims.
    • Until we determine whether the legitimate interests of the controller are overridden by the legitimate interests of the data subject.
  • Right to Object to Processing of Personal Data(including automated decision-making) You have the right to object at any time to the processing of your personal data, including automated decision-making (including profiling), and also include processing for marketing.
  • Other rights pursuant to the Applicable Laws

 

Article 10 (How to Request Your right)

• You may exercise your rights by:
  Email us : cjinfo.co.id
  Please note that we need to verify your identity based on your email and name before we can process [your CPRA and GDPR related request]. We will send you a confirmation of your identity via the email address you provide in the form below, so please include the email address you actually use (we do not accept requests for representation). If you are a verifiable California resident, you may only request your rights twice within a 12-month period. Registered user can raise a complaint to the supervisory authority or agency about the processing Personal Data of [**Insert name of CJ entity] pursuant to the Applicable Laws.
  Download "Request Your rights" (CPRA)
  Download "Request Your rights" (GDPR)
  Please do not include any Personal or Sensitive information beyond what is requested in the email or associated form.
• Registered customers can always correct and delete their information.
  • Personal Data Inquiry and Revision
    - To Inquiry and Revise your Personal Data : My Account > My Profile > Edit My Profile
  • You can always Consent or Withdraw Optional Consent
    - To Consent or Withdraw your Optional Consent : My Account > My Profile
  • You can always Close your Account
    - To Close your Account : Account > Edit My profile > Close Account or My Account > Deactivate Account > Close Account When you close your account, CJ Indonesia will immediately take any necessary action such as prompt disposal of Personal Data.
• Responses to your rights requests and reply statistics Under the CPRA, [**Insert name of CJ entity] is required to annually disclose its processing of Personal Data for the preceding 12 months. CJ Indonesia provides these reports once a year based on the previous 12 months. Currently, there have been no guarantee claims submitted to CJ Indonesia Global.
  * As a request under the GDPR only.
  ** Requests that cannot be validated due to failed identity verification or that cannot be processed under the Applicable Laws. These requests are not included in the totals above.

 

Article 11 (Notice of Financial Incentives)

We offer various financial incentives. For example, we may provide discounts or other benefits to customers who sign up to receive our marketing emails. When you participate in a financial incentive, we collect Personal Data from you, such as identifiers like your name and email address. You can opt in to a financial incentive by following the sign-up instructions, and you may opt out of the program by contacting us at [insert relevant email address]. In some cases, we may provide additional terms and conditions for a financial incentive, which we will provide to you when you sign up. The value of your Personal Data is reasonably related to the value of the offer or discount presented to you.

 

Article 12 (Your Rights as a Registered User)

You may have various rights with respect to your Personal Data and its confidentiality. As Personal Data subjects under the Applicable Laws, your rights shall include the following: (a) right to update your Personal Data; (b) right to request access to obtain a copy of your Personal Data (reasonable fees may be applicable); (c) right to request deletion of your Personal Data; (d) right to withdraw your consent to the processing of your Personal Data by [**Insert name of CJ entity]; and (e) right to request the deletion of your account at CJ Indonesia. If you wish to apply for the exercise of your rights, you may submit a data subject right request to us, including a request for deletion of your Personal Data.

• Registered customers can always view, revise, and request their Personal Data.
  • Personal Data Inquiry and Revision

    Team: Digital Global Business Team	Inquiry: Customer Service Center
    Via e-mail	cjinfo.co.id
    email address	62+021 5299 5000

    • Contact No., E-mail Address, Password: My Account > My Profile > Edit My Profile
    • Contact the customer service center or specified team above.
  • information which you can request CJ Indonesia to provide.
    • your Personal Data which CJ Indonesia retains.
    • status of your consents for collecting, processing and sharing your Personal Data.
    • status of sharing your Personal Data with service provider and third parties
  • When you make a request to correct erroneous information on your profile, the relevant Personal Data will not be used or provided until corrections are applied. In case incorrect information is provided to third parties, CJ Indonesia will immediately notify them of the correct information and instruct them to apply to their services.
  • If you are a registered user, you may request CJ Indonesia to provide or get access to your Personal Data, in which case CJ Indonesia will reply your request within 3 x 24 (three times twenty-four) hours.
• You can always withdraw your consent to the Privacy Policy on collecting, processing, and sharing your Personal Data. When you close your account, CJ Indonesia will immediately take any necessary action such as prompt disposal of Personal Data.
  • To close your account: Account > Edit My profile > Close Account or My Account > Deactivate Account > Close Account
• Notwithstanding Articles 1 and 2 above, requests to view or correct your Personal Data may be restricted for the following reasons.
  • In case of threats to the life, rights, interests, or assets of you or a third party
  • In case of significant disruptions to the service providers
  • In case of breaches of the Applicable Laws
• CJ Indonesia restricts membership and its service for children under 18 years of age.
• Registered user can raise a complaint to the EU supervisory authority or other relevant agency in your jurisdiction about the processing of Personal Data of CJ Indonesia.
• In addition to your rights as registered user as specified above, you are also entitled to exercise your rights pursuant to the Applicable Laws.

 

Article 13 (Personal Data Manager and Team)

To protect your Personal Data and deal with any relevant issues, CJ Indonesia has designated an officer in order to protect your Personal Data. Feel free to contact us with any inquiries regarding Personal Data. The officer will immediately and sincerely reply to your inquiries. For inquiries other than Personal Data, please contact cjinfo.co.id.

Position	Name	E-mail Address
CPO
DPO (if applicable)
Representative (if applicable)

 

Article 14 (Matters on the operation of automatic collection devices and opt-out thereof)

• Automatic Cookie collection
  CJ Indonesia uses collected ‘cookies’ to provide a more personalized experience on the website. Cookies are small text files sent to your browser by the web server you visit and stored in the hard disk of your device (such as your desktop, smartphone, tablet PC, etc.) when you use services on CJ Indonesia’s website or mobile app. Cookies identify the device you are using but not you as an individual. Cookies expire when you close the browser or sign out.
  The data collected by cookies can be used for the following purposes:
  • To analyze the frequency and time of your visits, figure out your interests and patterns of use, and target your visits and events you participate in
  • To track your most viewed items and provide services tailored to your interests for a more personalized experience on the website
  • To analyze customer behavior for service improvement initiatives
    You have a right to accept or disable cookies. You can accept all cookies, choose to be notified every time a cookie is issued, or disable all cookies. If you choose not to accept cookies, the website may not function properly and certain services will not be provided. Every browser or device is different, please check the browser or device settings menu to learn how to change your cookie settings and preferences.
    Block/allow personalized ads via web browser
    • Internet Explorer (Internet Explorer 11 for Windows 10)
      • In Internet Explorer, select the Tools button, then select Internet Options
      • Select the Privacy tab, select Advanced under Settings, then Block or Allow Cookies
    • Microsoft Edge
      • In Edge, click the "…" mark in the upper right corner, then click Settings.
      • After clicking "Privacy, Search and Services" on the left side of the settings page, select whether to prevent tracking and the level in the [Tracking Prevention] section.
      • Choose whether to “Always use ‘Strict’ Tracking Protection when browsing In Private.”
      • In the [Privacy] section below, choose whether to “Send a ‘do not track’ request.”
    • Chrome
      • In Chrome, click the top right "⋮" mark (Customize and control Chrome), then click the Settings.
      • Click “Show advanced settings” at the bottom of the Settings page and click Content Settings in the [Privacy] section.
      • In the Cookies section, check the box for “Block third-party cookies and site data.”
• Weblogs analytics using Google Analytics
  CJ Indonesia Corporation uses Google Analytics, a weblog analysis tool provided by Google, Inc. (“Google”). Weblog analysis refers to the analysis of the customer’s use of website services. Google processes the information on behalf of CJ [**Insert name of CJ entity] Corporation and analyzes your website usage. CJ Indonesia Corporation does not process any personally identifiable information in this process. If you do not want Google to process your data, you can opt out of this by downloading and installing add-ons for your web browser at tools.google.com/dlpage/gaoptout.
  [How to opt out]
  • For Chrome: Click [Download Browser Add-on to block Google Analytics] > Click [Add to Chrome] > When pop-up window is displayed, click [Add Extension] > Click Done.
  • For IE (Internet Explorer): Click [Download Browser Add-on to block Google Analytics] > Click [Agree and Install] > Click [Run] or [Save] on the window displayed at the bottom > Click [Restart Later] or [Restart Now], as the changed setting will only be applied after restarting the browser > Upon clicking [Restart Now], the pop-up on how to use the add-on will appear. Then, click [Use] > Done.
  For more information on Google Analytics’ processing of information, please visit support.google.com/analytics/answer/6004245 If you want to stop log analysis through an external analysis tool, you can cancel the setting through the guidance page below. https://support.google.com/analytics/answer/181881?hl=en

 

Article 15 (Matters on Collection, Use, Provision and Rejection of Behavioral Information)

• CJ Indonesia collects and uses behavioral information in order to provide customized services and benefits optimized to information subjects, online customized advertisements, etc. during the service use process.
• CJ Indonesia collects behavioral information as follows.

  Items of collected behavioral information	How to collect behavioral information	Purpose of collecting behavioral information	Retention/use period and subsequent information processing method
  Number of views on Join, Product Info, Shopping Bag, Place Order, and Purchase Completion pages	Automatic collection and transmission when using user website/app service	Collect customer activity information and provide customized recommendations	Destroy after storage until membership withdrawal

• CJ Indonesia allows online customized advertisement operators to collect and process behavioral information as follows.
  • Advertisers who wish to collect and process behavioral information: Google Ads, Facebook, Twitter, Snapchat, TikTok
  • How to collect behavioral information: Automatic collection and transmission when users visit our website or run our apps
  • Items of behavioral information collected and processed: User's web/app visit history, search history, purchase history
  • Retention/use period: Until membership withdrawal and consignment contract termination subject to the Applicable Laws
  • If you wish to opt-in or opt-out, you can adjust your preferences by accessing the cookie settings link below:
    • Google Ads : https://support.google.com/adsense/answer/142293?hl=en
    • Facebook : https://www.facebook.com/settings/?tab=ads
    • Twitter : https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads
    • Snapchat : https://values.snap.com/privacy/privacy-policy
    • TikTok :https://www.tiktok.com/legal/privacy-policy
• The information subject can inquire about behavioral information, exercise the right to refuse, and complaints of damage through the contact information below.
  Privacy Officer (CPO/DPO):
  Contact: CJ Indonesia Customer Service Center [021 5299 5000]

 

Article 16 (Measures to Protect Personal Data)

CJ Indonesia establishes the following technical/organizational measures to ensure the security of your Personal Data and prevent the loss, leakage, theft, and damage of your Personal Data due to cyberattack.

The confidentiality of your Personal Data is of utmost importance to us. We will use our best efforts to protect and secure your Personal Data from access, collection, use or disclosure by unauthorized persons and from unlawful processing, accidental loss, destruction and damage or similar risks. However, as the transmission of data over the internet is not completely secure, we cannot fully guarantee that such Personal Data will not be intercepted, accessed, disclosed, altered or destroyed by unauthorized third parties, due to factors beyond our control.

• Technical Measures
  • Your Personal Data is protected by your password. Important Personal Data and your password are encrypted before storage.
  • To prevent any damage from computer viruses and intrusion of Personal Data, vaccine programs are employed and updated on a regular basis.
  • Encryption algorithms are used to safely transfer yourPersonal Data over networks.
  • To prevent the leakage of your Personal Data due to cyberattack and to detect illegal intrusion, vulnerability assessments are conducted on a regular basis and intrusion detection systems are installed.
• Organizational Measures
  • The number of individuals who deal with Personal Data is limited to a minimum extent and periodic trainings are provided to the relevant employees.
  • The authority to access Personal Data is provided in accordance to the procedures of the Personal Data Processing system and is periodically examined and withdrawn if needed.
  • Internal procedures are established to conduct inspections on compliance with the Privacy Policy.
  • [**Insert name of CJ entity] manages and supervises the entrusted companies that process your Personal Data.
  • In the event of a failure of your Personal Data protection, CJ Indonesia will provide a written notification no later than 3 x 24 (three times twenty-four) hours to you and the relevant government agency by fulfilling the requirements under the Applicable Laws.

 

Article 17 (Report and Consultation of Intrusion of Personal Data)

You may be assisted by the authorized agency in your jurisdiction pursuant to the Applicable Laws and, if applicable, by the following organizations in case you need to consult or report any violation of use of Personal Data.

KISA	Personal Information Dispute Mediation Committee	Cyber Crime Investigation, Supreme Prosecutors’ Office	National Police Agency Cyber Bureau
(+82) 118 privacy.kisa.or.kr	1833-6972 www.kopico.go.kr	(+82) 1301 www.spo.go.kr	(+82) 182 ecrm.cyber.go.kr

 

Article 18 (Notice and Changes to the Privacy Policy)

The privacy policy stated above may be revised in compliance with government policies, Applicable Laws, and due to the security system update., and we will put out a notification online of all changes such as the addition, removal, or amendment of privacy policy with the reasons. If we decide to change this Notice, we will notify you of such changes through our official channels. You agree that you are responsible for checking this Notice periodically for the latest information on our data processing and data protection practices, and that your continued use of our services after any changes to this Notice shall be deemed as your consent to this Notice and any changes thereto.

Effective Date: 06.03.2024