Website Data Protection Notice
This Website Data Protection Notice (“Policy”) describes how PT Sika Indonesia ("Sika" or "we" or "us" or "our") as the legal entity responsible for the use of your Personal Data (Data Controller) processes the Personal Data and other information of the users ("you" or "your") in particular within the meaning of the General Data Protection Regulation ("GDPR") and Indonesia Law No 27 of 2022 on Personal Data Protection ("PDP Law") when using the website https://idn.sika.com ("Website").
All personally Identifiable information i.e. any information relating to a person, whether true or not, which, either directly or indirectly, in combination with other information, is capable of identifying such person herein after will be referred as “Personal Data”.
1. Categories of Personal Data, processing purposes, legal basis and source
a. Personal Data actively provided by you:
If you create a user account on our Website, you will be asked to provide the following Personal Data about you: Name, postal address, email address, selected password. Sika processes such Personal Data for the purpose of providing our services to you. Providing such Personal Data is voluntary. However, without providing such Personal Data, you will not be able to create a user account. The legal basis for the processing of such Personal Data is the contract on the use of the Website concluded with you (Art. 6 (1) lit. b GDPR and Art. 16 of PDP Law ).
If you register for the newsletter and consent to the receipt of newsletters and the processing of your email address for this purpose, you will be asked to provide your email address. We will use your email address for regularly sending you newsletters. Providing your email address is voluntary. However, without providing your email address you will not receive newsletters. The legal basis for the processing of your Personal Data for sending newsletters is consent (Art. 6 (1) lit. a GDPR and Art. 20 of PDP Law).
b. Other passively collected information:
In addition to the Personal Data that you actively provide, the Website may automatically collect, process and store certain information on a pseudonymous basis from your computer or other electronic device, i.e.:
- Device and usage information – that may include (i) information specific to the used device to access the Website (including, but not limited to, model, operating system, IP address, language, carrier and similar information) and (ii) information about the use of features, functions, or notifications on the device, to recognize you and to analyze trends. The legal basis for this data processing is our legitimate interest (Art. 6 (1) lit.f GDPR and Art. 20 of PDP Law), in particular monitoring and maintenance of the Website performance;
- Website analytics – such as how often a user uses the Website, aggregated usage, performance data. We use Website analytics to allow us to better understand the functionality and use of our Website. The legal basis for this data processing is our legitimate interest (Art. 6 (1) lit.f GDPR and Art. 20 of PDP Law), in particular analysis of trends, usage and activities in connection with our Website.
We also use cookies on the Website. For more information about cookies, please read our Cookie Notice available under the Cookie Preference Center at the bottom of our website page.
2. Sale of Personal Data
Sika does not sell any Personal Data.
3. Recipients
a. Transfer to service providers
Sika may engage external service providers, who act as a data processor of Sika, to provide certain services to Sika such as website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may have access to and/or may process your Personal Data.
Those external service providers will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the Personal Data and to process the Personal Data only as instructed and in accordance with applicable data protection law.
b. Other recipients
Some of our colleagues administering the Website and providing IT services may be employees of our group companies. When administering the Website our colleagues may have access to and/or may process your Personal Data. The respective transfer of your Personal Data is based on our legitimate interests. Our legitimate interests are the transmission of Personal Data within the group of companies for internal administrative and support purposes. The access is limited to colleagues on a need-to-know basis.
Sika may also transfer your Personal Data to law enforcement agencies, governmental authorities, legal counsel and external consultants in compliance with applicable data protection law. The legal basis for such processing is compliance with a legal obligation to which the Sika is subject to or are legitimate interests, such as exercise or defense of legal claims.
The updated list of data processors and third parties that we share data with is available upon request to the Company at the contact details below specified.
4. International transfers of Personal Data
The Personal Data that we collect or receive about you may be transferred to and processed by recipients which are located inside or outside the European Economic Area ("EEA") in a country that is not recognized by the European Commission as providing an adequate level of data protection, such as Indonesia. The access is limited to recipients with a need to know.
By using the Website, you consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules than those of your country.
To the extent your Personal Data are transferred to countries that do not provide for an adequate level of data protection from an EU and Indonesia law perspective, we will base the respective transfer on appropriate safeguards, and take steps to ensure that your Personal Data continues to receive a standard of protection comparable to that provided under GPDR and PDP Law..
You can ask for a copy of such appropriate safeguards by contacting us as set out in Sec. 10 (Contact us) below.
Links to social media profiles
On our website we refer with hyperlinks to social media profiles in social networks. When you actively click on a link to such a profile, your browser establishes a direct connection with servers of the respective social media network, whereby the provider obtains knowledge of your visit. If you are simultaneously logged in to the respective social network, the provider can assign the visit to the profile to your user account. In this context, Personal Data may be processed in the USA EEA, Indonesia, or other countries. For more information on the processing of Personal Data, please refer to the privacy policy of the respective social media network. The purpose of linking our website to social media profiles is to increase the visibility of our website. Clicking on a social media link takes place on the basis of your voluntary decision in accordance with Art. 6 (1)(a) GDPR and Art. 20 of PDP Law. The legal basis for any data transfer to the outside of EEA,Indonesia, and USA is also your voluntarily given consent according to Art. 49. (1)(a) GDPR and Art. 56 of PDP Law.
Social media channels
We deploy links to the various social media channels on our website, among others, Meta, LinkedIn, Twitter, Youtube., etc, to promote our business and advertise our products.
Depending on the social media channel and services used, we might have access to Personal Data you provided, such as personal information available at your social media profile. However, we do not collect or store such data, but use only data in aggregated form (e.g. number of followers, number of likes, comments or shares) for statistical and analytical purposes.
5. What rights do you have and how can you assert your rights?
If you have declared your consent for any Personal Data processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Pursuant to applicable data protection law you may have the right to request access to your Personal Data, rectification of your Personal Data, erasure of your Personal Data, restriction of processing of your Personal Data, data portability, and the right to object to the processing of your Personal Data. Please note that these aforementioned rights might be limited under the applicable national data protection law. For further information on these rights please refer to Appendix Your Rights.
You also have the right to lodge a complaint with the competent data protection supervisory authority. To exercise your rights please contact us as stated in section (5.) below or use the specific web-form “Exercise Your Privacy Rights” available on the Company’s Website.
6. How long do we keep your Personal Data?
Your Personal Data will be retained according to the minimum retention period required by applicable regulation to provide you with the services requested. Please note that we have the right to store your Personal Data to the extent necessary for defending against legal claims.
When Sikano longer needs to use your Personal Data to comply with contractual or statutory obligations or the data is no longer necessary for our legitimate interests and no other legal basis for processing the data applies, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we have to keep your information, including Personal Data, to comply with legal or regulatory obligations to which Sika is subject, e.g. statutory retention periods.
7. Minors
We do not knowingly collect Personal Data from anyone whose age is below eighteen years of age or the equivalent minimum age to provide consent in the place where you reside or access or use the services (any such person, a “minor”). No part of our services is directed to minors. If we learn that Personal Data of minors has been collected on or through our Services, then we will take the appropriate steps to delete this information from our systems. If you are a parent or guardian and discover that a minor has provided Personal Data to us, then you may alert us by contacting us as set out in Sec. 10 (Contact us) below.
8. Changes and Updates to this Policy
This Policy may be revised periodically. if we make any change to the way in which we treat your Personal Data, we may inform you of such change via email or by posting a notice in this Policy or through the Website, depending upon the significance of the change. your continued access or use of our services after any changes become effective constitutes your consent to, and agreement to be bound by, the revised Policy in relation to the user information received from you or your devices. Any revisions to this Policy will be effective as of the date indicated above.
9. Language
This Policy is made in both the English language and the Indonesian language. Both texts are equally original. In case of any inconsistency or different interpretation between the English text and the Indonesian text, the relevant Indonesian text shall be deemed to be automatically amended to conform with and to make it consistent with the relevant English text.
10. Contact us
If you have concerns or questions regarding this Website Data Protection Notice, please contact us as follows:
PT Sika Indonesia
Jalan Raya Cibinong Bekasi KM 20, Bogor Regency, West Java, Indonesia
Email: privacy@id.sika.com
Phone: 0800 140 1236
The contact details of our data protection officer are as follows:
Mulani Mulani
PT Sika Indonesia
Jalan Raya Cibinong Bekasi KM 20, Bogor Regency, West Java, Indonesia
Email: mulani.mulani@id.sika.com
Appendix I: Your Rights
(a) Right of access: You may have the right to obtain from us confirmation as to whether or not Personal Data concerning you is processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – provision of the information about the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
You may have the right to obtain a copy of the Personal Data undergoing processing.
Your requests are generally free of charge. We may charge a reasonable fee based on administrative costs in case your request is manifestly unfounded or excessive, in particular because of its repetitive character.
(b) Right to rectification: You may have the right to obtain from us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
(c) Right to erasure ("right to be forgotten"): Under certain circumstances, you may have the right to obtain from us the erasure of Personal Data concerning you and we may be obliged to erase such Personal Data.
(d) Right to Withdraw and Limit: Under certain circumstances, you may have the right to withdraw your consent for data processing of the Personal Data given and limit the processing of Personal Data proportionately in accordance with the purpose of the processing.
(e) Right to restriction of processing: Under certain circumstances, you may have the right to restrict processing of your Personal Data. In this case, the respective data will be marked and may be processed by us only for certain purposes.
(f) Right to data portability: Under certain circumstances, you may have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.
(g) Right to demand: Under certain circumstances, you may have the right to demand and receive compensation for violations of processing the Personal Data in accordance with the provisions of laws and regulations.
(h) Right to object: Under certain circumstances, you may have the right to object to us on the processing of your Personal Data on grounds relating to your particular situation, e.g., the, decision-making actions based solely on automated processing, including profiling, that have legal consequences or have a significant impact on the Personal Data. Under this condition, we can be required to no longer process your Personal Data.
Moreover, if your Personal Data is processed for direct marketing purposes, you have the right to object at any time to the processing of Personal Data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your Personal Data will no longer be processed by us for such purposes.