Global Privacy Notice for Customers and Website Users

What does this Privacy Notice apply to?

CNI Indonesia, (“we”, “us”, “our”), is fully committed to the responsible collection, use and care of the Personal Data of its customers and website users. This Global Privacy Notice for Customers and Website Users (“Privacy Notice”) provides you with information on how CNI Indonesia collects, uses, and shares Personal Data obtained through our websites, products, mobile applications, or other sites that display this Privacy Notice.  By using our websites, products, mobile applications, or other sites that display this Privacy Notice, you agree to our processing of your Personal Data in accordance with the terms of this Privacy Notice.

If you are in a jurisdiction that recognizes the concept of a Data Controller or a similar concept, the Data Controller is the CNI Indonesia which you have a customer relationship. If you have a query about how your Personal Data is being used, you can contact our Data Protection Officer (“DPO”) and their team.

Key Definitions

Terms not otherwise defined in this Privacy Notice have the following meanings:

Personal Data means any information relating to an identified or identifiable individual. For clarity, Personal Data includes any information which can be used, directly or indirectly, to identify an individual, either alone or in combination with other information.

Sensitive Personal Data means any Personal Data that, based on context, implies a high level of reasonable expectation of privacy, such as information relating to an individual’s racial or ethnic origin, political opinions, religious or other beliefs, trade union membership, criminal records/history or processing of genetic data or biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation. Depending on the jurisdiction you are based in, Sensitive Personal Data may also refer to Personal Data that, once leaked or illegally used, may cause harm to natural persons, including but not limited to information on specially designated status, financial accounts, individual location tracking, as well as the Personal Data of minors or information on social security, driver’s license, state identification, and passport numbers, precise geolocation, combination of email address, debit card, or credit card with security or access code, password, or other credentials allowing access to financial account.

processing or process means the use of Personal Data including collection, recording, organization, structuring, adaptation or alteration, analysis, retrieval, consultation, providing or blocking access to (including remote access), communication, disclosure, dissemination, aligning, copying, transfer, storage, deletion, hosting, combination, destruction, disposal, or other use or handling of Personal Data.

Data Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. In our company, the ultimate Data Controller is CNI Indonesia., our holding company.

Third Party means any natural person or legal entity, public authority, agency or any other body other than Data Subject, Data Controller, or a Service Provider.

Service Provider means any vendor, supplier or service provider who solely or jointly process Personal Data on behalf of the Data Controller and acts on the Data Controller’s instructions.

Data Subject means the identified or identifiable individual to whom the Personal Data relates.

Personal Data we process

We process your Personal Data in a number of ways including when you:

• Visit our websites, and branded pages and applications through third-party platforms;
• Register an account with us and/or purchase products through our website and/or undertake a live consultation;
• Visit one of our retail stores or counters, including if you register an account with us in store;
• Provide Personal Data to our Customer Engagement, our franchisees, direct marketing campaigns, sweepstakes, and competitions;
• Correspond with us across any of our channels (e.g. messaging platforms such as text message, live chat, social media and email); and
• Submit a review regarding our products at our websites, and branded pages and applications.

The following categories of Personal Data are followed by information about their source(s), processing purpose(s), legal bases and disclosure(s).