Skip to content
Back to the home page

Privacy Policy

Last updated:

This policy explains how PT SOLUSI TEKNOLOGI BISNIS ("the company", "we") handles personal data in connection with the website https://solusiteknologibisnis.com. It takes into account the EU General Data Protection Regulation (GDPR) and Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (UU PDP).

1. Who is responsible for your data

The controller of personal data is:

Company
PT SOLUSI TEKNOLOGI BISNIS
Registered address
Jalan Raya Semat No. 1, Desa/Kelurahan Tibubeneng, Kec. Kuta Utara, Kab. Badung, Provinsi Bali, Kode Pos: 80361
Country
Republic of Indonesia
Contact for data protection questions
info@solusiteknologibisnis.com

2. What data we handle

  • Contact form: your name, e-mail address, company name (optional) and the text of your message. With them we record the language of the page, the page address and the date and time of sending. The message is delivered to our mailbox by e-mail; the website does not keep it in a database.
  • Anti-spam check: on the page with the contact form, Cloudflare Turnstile checks that the form is used by a person and not a bot. For this check Cloudflare processes your IP address and information about your browser and device. We receive only the result of the check.
  • Limiting repeated sending: when you send the form, our server keeps your IP address in its working memory for up to 10 minutes to limit the number of messages from one address. It is not written to disk and is not included in the e-mail.
  • E-mail: if you write to us directly, your e-mail address and whatever you include in the message.
  • Technical data: every request to the website passes through Cloudflare, which delivers and protects the site; Cloudflare processes your IP address, the address requested, the date and time and information about your browser. Cloudflare may also ask your browser to report network errors that occur when loading the site (Network Error Logging). Our server does not keep a log of visits; its application and system logs record technical events and errors and are deleted automatically after 14 days.
  • Browser storage: your choice in the cookie notice is saved in your own browser. It is not sent to us. See the Cookie Policy.

We do not ask for special categories of data (for example health data) and ask you not to send any.

3. Why we use it and on what legal basis

  • To answer your enquiry and discuss a possible engagement: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business correspondence (Article 6(1)(f) GDPR).
  • To keep the website secure and working, including the anti-spam check and the limit on repeated sending from the contact form: our legitimate interest in protecting the site and our mailbox from misuse (Article 6(1)(f) GDPR).
  • To comply with legal obligations that apply to the company (Article 6(1)(c) GDPR).

Under UU PDP the corresponding grounds are the fulfilment of a request you make before entering into an agreement, compliance with legal obligations of the controller and legitimate interests. Where we ever rely on your consent, we will ask for it separately and you can withdraw it at any time.

We do not use your data for advertising, do not build profiles and do not make decisions based solely on automated processing.

4. Who receives the data

Data is handled by the company and, to the extent technically necessary, by the following service providers:

  • Cloudflare, Inc. (United States) — delivery and protection of the website: every request to the site passes through Cloudflare, which also provides the encrypted HTTPS connection; and the Turnstile anti-spam check on the contact form, for which it processes your IP address and information about your browser and device to tell people from bots. According to Cloudflare's Turnstile privacy terms, Cloudflare also uses this information as an independent controller to improve its bot detection.
  • Google LLC (United States) — Gmail, the e-mail service through which the website sends the message from the contact form (your name, e-mail address, company and message) to our mailbox.
  • Proton AG (Switzerland) — hosts the mailboxes of the domain solusiteknologibisnis.com, where messages from the form and e-mails you send us are received and kept.
  • HOSTKEY B.V. (the Netherlands) — the virtual server in Germany on which the website runs, including its technical logs.

We do not sell personal data and do not pass it to advertising networks.

Data may be disclosed to public authorities where the law requires it.

5. Transfers between countries

The company is established in Indonesia. The website runs on a server in Germany (European Union). The service providers named above also process data in other countries: Cloudflare (through its global network of data centres) and Google in the United States, Proton in Switzerland. Your data may therefore be transferred outside your country and outside Indonesia.

If you are in the European Economic Area: the website's server is located in the EU. Switzerland is recognised by the European Commission as providing an adequate level of data protection. Transfers to the United States and to Indonesia rely on the safeguards the providers offer under their terms of service and data protection terms, where such safeguards apply, and, for messages you send us, on the transfer being necessary to answer your request (Article 49(1)(b) GDPR).

Transfers outside Indonesia are made in accordance with the requirements of UU PDP.

6. How long we keep it

  • Enquiries and correspondence: for as long as it takes to handle the enquiry and any correspondence that follows from it. After that the data is deleted, unless a contract follows or the law requires it to be kept longer.
  • This applies to messages in our mailboxes (Proton). The e-mail service used to send the message (Google) also keeps a copy in the sent mail of the sending account; Google stores it under its own terms, and we delete these copies by hand from time to time — they are not removed automatically.
  • Anti-spam check: we do not keep the data processed by Cloudflare; Cloudflare keeps it under its own privacy terms.
  • IP address for limiting repeated sending: up to 10 minutes in the server's working memory.
  • Server logs: the application and system logs of our server are kept for 14 days and then deleted automatically. Our server does not keep access logs of visits. Cloudflare keeps its own logs under its own privacy policy.
  • Your choice in the cookie notice: 12 months in your browser, or until you clear it.

7. Your rights

You have the right to:

  • be informed about how your data is used and obtain access to it and a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data erased or destroyed;
  • have processing restricted or suspended;
  • object to processing based on legitimate interests;
  • receive your data in a commonly used format and transfer it to another controller;
  • withdraw consent at any time, without affecting processing carried out before the withdrawal;
  • object to decisions based solely on automated processing (we make none);
  • claim compensation for unlawful processing as provided by law.

To exercise any of these rights, write to info@solusiteknologibisnis.com. We answer without undue delay and within the time limits set by the applicable law. We may ask for information needed to confirm your identity.

8. Complaints

If you believe your data is being handled unlawfully, you may lodge a complaint with a data protection authority: in the European Economic Area, the supervisory authority of the country where you live or work; in Indonesia, the institution responsible for personal data protection under UU PDP. We would appreciate the chance to resolve the matter first.

9. Whether you have to provide data

Providing data is voluntary. Without a name, an e-mail address and a message we cannot answer an enquiry. The form can be sent only after the anti-spam check; if you prefer not to use it, write to us by e-mail.

10. Security

The website is available only over HTTPS, so the connection between your browser and the site is encrypted. It also uses security headers. The only resource it loads from a third-party server is the Cloudflare Turnstile anti-spam check, and only on the page with the contact form. Messages from the form are passed to the e-mail service over an encrypted connection. Correspondence is accessed only as far as is needed to answer you.

11. Children

The website is addressed to businesses and is not intended for children. We do not knowingly collect data from children.

12. Changes and language

We may update this policy. The current version is always on this page, with its date at the top.

This policy is published in English and Indonesian. If the versions differ, the English version prevails, unless the applicable law provides otherwise.