Privacy Notice

Last modified on: 28 October 2024

PLEASE READ THIS ENTIRE PRIVACY NOTICE BEFORE USING OUR SERVICES, DELIVER CONSENT AND/OR SUBMITTING YOUR PERSONAL DATA TO OUR SERVICES.

INTRODUCTION

Thank you for choosing and using PT Mid Solusi Nusantara and/or our related affiliates (“Mekari Group” or “We” or “Mekari”) to provide Our Services to you.
This Privacy Notice (previously referred to as Privacy Notice) (hereinafter referred to as “Privacy Notice”) is our notification to You regarding one of our policy to protect Your Personal Data in Our Services that You used (as defined below) in accordance with the applicable laws and regulations. We are highly committed to protect and secure Your Personal Data (as defined below). We are responsible for upholding the principles of data management with full integrity, so that the security of Your Personal Data is our top priority. This Privacy Notice applies to all Service users who access through and use websites, mobile applications, content, products, services and any other platforms that We manage (collectively, “Platform“) including any party who cooperates with Us, unless regulated in a separate privacy notice.

We develop a variety of services that will help You in the works relating to fields that include but are not limited to HR (Human Resources), taxation, accounting and bookkeeping, financial and payment, and may also cover other fields in the future. Our services include but are not limited to Mekari Account, Mekari Jurnal, Mekari Talenta, Mekari KlikPajak, Mekari Qontak, Mekari Sign, Mekari Stream, Mekari Mekari Flex, Mekari Pay, Mekari Capital, Mekari Expense, Mekari Kredigram, Mekari Officeless, and any other services that will be provided by Us in the future (hereinafter referred to as “Services“).

ABOUT PRIVACY NOTICE

We shall explain transparently how and why we process Your Personal Data. This Privacy Notice outlines our terms and responsibilities regarding the processing activities of Your Personal Data.

We need to emphasize that in collecting and processing Your Personal Data based on this Privacy Notice, we can act for and on behalf of and based on orders from our clients as the controllers of Your Personal Data as based on the terms of the agreement we have with the client. In these conditions, before you use Our Services and/or submit Your Personal Data to Our Services, You need to ensure that you have given full consent to the client to perform the processing of Your Personal Data through us.
By using Our Services and an order and consent from client and You as customer or user of Our Services towards this Privacy Notice, You acknowledge that You have given your consent explicitly to Us and are bound by the terms contained under this Privacy Notice. Therefore, We expect that You will read this Privacy Notice to ensure that You understand how We handle Your Personal Data and understand Our data protection practice.

This Privacy Notice explains in detail on Your Personal Data processing by Us. The purpose of this Privacy Notice are for:

1. Ensuring You understand what the Personal Data we process, the reasons why we process it and who we collaborate with to process your Personal Data;
2. Explaining how we process Your Personal Data, which we can provide an satisfactory experience for You in using our services; and
3. Explaining the rights and choices You have regarding Your Personal Data that we process and how we will protect Your Personal Data.

We hope that this Privacy Notice shall help you to understand our commitment to protecting Your Personal Data. In the event You need an explanation or have further questions, we shall be happy to serve You by referring to the “Contact” section in this Privacy Notice. In the event You do not agree with the terms and conditions of this Privacy Notice, remember that You always have the choice to use or not use Our Services.

This Privacy Notice is provided in a format that makes it easy for You to read and understand this Privacy Notice. You may refer to specific sections provided in this Privacy Notice. To make it easier for You to understand this Privacy Notice, all capitalised terms used in this Privacy Notice shall have the same meaning ascribed to them in the applicable Mekari Platform Terms of Use between Us and You.

DEFINITIONS

“Personal Data” means data concerning certain individuals that are identified or may be identified individually or combined with other Information either directly or indirectly.

“Information” means description, statements, ideas, and signs that contain values, meanings, and messages, including data, facts, and explanations that can be seen, heard, and read, presented in various packages and formats according to developments of information or communication technology whether electronically or non-electronically.

“Applicable Law” means all laws, statutes, regulations, policies, ordinances, authorizations, licenses or requirements of any court, administrative body, authority, or regulatory body, in effect from time to time during the term of this Privacy Notice.

SCOPE AND TYPE OF PERSONAL DATA WE COLLECT

The following are the scope and type of Personal Data about You that We will process in relation with Your use of the Service (as applicable, which is depending on the context or circumstance of the collection and nature of the Service that is used or transactions that are carried out):

1. Identity data, including but not limited to, name, username, gender, complete domicile address, place of birth, date of birth, self-picture photos, numbers of Indonesian identity/ driver license/ passport, taxpayer identity number, latest education, job, and others.
2. Business Data, including but not limited to business identification number or else, taxpayer identification number, business field, telephone number, complete domicile address, business entity revenue, owner/ director’s identity, and others.
3. Contact Data, including but not limited to billing address, email address, mobile phone, contact list, emergency contact Information, and others.
4. Payment Data includes details of payments or transfers made by You on Our Application, including but not limited to data relating to usage, payments, recipient details (including their account details), payment methods used, payment amounts paid, billing details, and invoice details.
5. Financial Data includes details of bank accounts and payment cards such as the type of card or payment account used, the name of the issuer of the card or payment account, the name of the holder of the card or payment account, the identification number of the account or payment card, the verification code of the payment card or account, and the expiration date such payment card or account, as applicable, virtual account data, financial history (including but not limited to payment card or account transaction history, payment card or account details, CVV code and mapping and/or status and condition of the payment card or account), income data and source, and credit scoring data.
6. Data related to Your activities when using the Service, including but not limited to, the terms You search for, display and interaction with content, input activity and transaction processing, people who communicate with You or share content with You, activity on sites and applications of Third Parties (as defined below) who use Our Services.
7. Location Information. We collect Your location Information when You use Our Services. Your location can be determined with varying degrees of accuracy using GPS, IP address, sensor data from Your device, Information about what is near Your device, such as Wi-Fi access points, cell towers, and bluetooth-enabled devices.
8. Log Data includes records on the server that receive data such as device IP address, date and time of access, Application features or pages viewed, Application work processes and other system activities, browser type, and/or third party sites or services that You used before interacting with the Services.
9. Technical Data, includes details on Your usage of Our Applications such as identification generated by the Services (user id), in app messages, in app search history, internet protocol (IP) address, data as web pages previously or subsequently viewed, duration of every visit/session, the internet device identity (ID) or media access control address, mobile advertising ID and other device Information including Information regarding the manufacturer, model, and operating system of the device You use to access the Services, and crash logs
10. Device Data includes device data, including the type of device You are using to access the Services, including hardware model, operating system and version, software, IMEI number, file name and version, language preference, unique device identifier, advertising identifier, serial number, device movement. Information, and/or mobile network Information.

PROVISION OF INCOMPLETE PERSONAL DATA

Where We need to collect Personal Data by law, or under the terms of a contract We have with client, and You either choose not to provide that Personal Data or provide Us with incomplete Personal Data when requested, We may not be able to provide Services and perform the existing agreement or those We are in the process of engaging with You.

HOW WE COLLECT YOUR PERSONAL DATA

We collect Your Personal Data in several ways, which are

1. through submission from the client as the controller of Your Personal Data;
2. through direct provision by You when You register or use the Service or when You contact Our customer service;
3. through provision by You from certain third party;
4. through the Platform, browser and device that You use.

The Information that We collect includes unique IDs, browser type and settings, device type and settings, operating system, mobile network Information including carrier name and phone number, as well as application version number. We also collect information about Your app, browser and device interactions with Our Services, including Your IP address, crash reports, system activity, and time, date as well as the referring URL of Your request.

We collect this Information when the Services on Your device contact Our servers — for example, when You install an application from the Google Play Store or during a service check for automatic updates. If You use an Android device equipped with the Platform that is provided by Mekari Group , Your device will periodically contact the Mekari Group server to provide Information about Your device and connection to Our Services. This Information includes things like Your device type, carrier name, crash reports, and the applications You have installed on Your device.

If You are not logged in to a Mekari account, We store the information We collect with a unique ID that is tied to the browser, application or device You are currently using. If You log in, We also collect Information that We store in Your Mekari account, which We consider to be personal Information.

If You provide Us with Personal Data related to other individuals (such as the Personal Data of Your spouse, family members, or any other party), You state that You have obtained the consent of the relevant individual to, and hereby agree on behalf of the individual to collection, use, disclosure and processing of their Personal Data by Us.

USE OF YOUR PERSONAL DATA

For Your Personal Data that We collect, We may use it for the following purposes or other purposes required or permitted by Applicable Law (“Purposes“):

1. providing Our Services and/or Products;
2. usage of features as available in Our Service. As an example for the Talenta Service, therefore We may use Your Personal Data in the form of selfies for attendance record purposes;
3. perform the purposes as determined by the client as the controller of Your Personal Data as based on the terms of the agreement we have with the client (which purposes the client should have informed You before You give consent to the client);
4. registering You as a user on Our Platform, and also to administer and/or manage Your account;
5. informing You on the activities that occur on Our Platform or other platforms/systems connected to Our Platform;
6. interacting directly with You and notify You of any updates or changes to the Service;
7. notifying You any Information in connection with the use of the Service;
8. carry out maintenance, improvement, troubleshooting, development and personalization/customization of the Service to meet Your needs and preferences;
9. offering, sending or providing ad, communication, and marketing that related to adjustable Services (based on the interesting and relevant attribute and demographic characteristic of your Profile), from Us and/or Our affiliates or partners (if applicable) with various ways, including but not limited to the Platform, short message service (SMS), chat application (i.e. WhatsApp), push notification, call, email, and others;
10. developing, maintaining, examining, repairing, improving, and personalising Services as well as new services to fulfill Your necessity and preference;
11. monitoring, understanding and analyzing Your activities and behavior including habits and the usage of various services available on the Platform;
12. disclosing and/or providing affiliates and/or third parties who work with Us (in this case vendors, agents, suppliers, contractors, consultants, partners and other parties who provide services to Us or You) that are: (i) technically necessary to process Your transactions; (ii) if You are participating in promotional programs that we organize with our partners; or (iii) the purpose of Our cooperation with these third parties (as applicable) such basis of which you allow the third party to offer third party services to You (as relevant);
13. handling or resolving complaints in connection with operational problems that occur on the Service;
14. to generate statistical Information and analytical data for the purposes of testing, research, analysis, product development;
15. carrying out transactions that occur within Our corporate structure such as mergers, acquisitions, or sales of assets involving Us and/or Our affiliates;
16. complying with all obligations under Applicable Law, including but not limited to responding to requests, inquiries, or directives from regulations and/or any member of government;
17. helping to improve the security and reliability of Our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, criminal activity, or misuses of Our Services, technical issues that may harm the Mekari Group, Our users, or the public, as well as to ensure the security of Our IT systems, architecture, and networks;
18. Facilitate or enable necessary verification before we provide the Services to You, including perform the Know Your Customer (KYC) process and credit scoring (if necessary);
19. Combining Your Personal Data into anonymous statistical data that we shall use for statistical analysis, which we shall have better understand our customer profiles and improve Our Services;
20. To detect and investigate all prohibited, illegal, unauthorized or fraudulent activities based on the applicable laws and regulations; and
21. other purposes that We notify You, and/or if required by Applicable Laws, as We will obtain Your approval.

We use various technologies to process Your Personal Data for the Purposes mentioned above. We use automated systems that analyze Your content to provide things like customized search results or other features tailored to how You use Our services. We also analyze Your content to help Us detect abuse such as spam, malware and illegal content.

We may combine the Information that We collect on Our Services across Your devices for the Purposes described above. Depending on Your account settings, Your activity on other sites and applications may be associated with Your Personal Data to improve the Services.

Your Personal Data will be stored for the period required to achieve the Purposes and/or a minimum of 5 (five) years, whichever is the longest.

In relation with the above purposes, You have the right to withdraw Your consent at any time through the client as the controller of Your Personal Data or contacting us in accordance with the “Contact” procedure as stated in this Privacy Notice.

DISCLOSURE OF PERSONAL DATA TO OTHER PARTIES

We will not disclose, provide access, share and/or distribute Your Personal Data without Your consent unless otherwise specified in this Privacy Notice. We will only disclose Your Personal Data to other parties (i) based on Your consent or (ii) when permitted or required by Applicable Law or (iii) instructed by a government authority, or (iv) based on a court order (as relevant).

Other than as regulated under this Privacy Notice, We may disclose, provide access, and/or share Your Personal Data if we have obtained Your consent for the relevant disclosure. If You give Your consent to Us to disclose Your Personal Data to a certain third party, then You allow Us to access and send the data to the selected third party and You release Us from any impacts arising from the processing of Your Personal Data by such third party. We suggest You to check and understand the privacy policy or notice applied by any of the third parties where You have agreed to provide Your Personal Data.

We will not sell or rent Your Personal Data to any party.
In addition to the disclosures we stated above, Your Personal Data may also be disclosed under the following conditions:

1. Social Media
   In the event You use our Platform or social media, please be aware that the Personal Data that You or other parties voluntarily disclose when using these features, may be available to the public or other users. We need to inform You that we are not responsible for the information You disclose to the public and the use of that information by us or other parties that is not subject to this Privacy Notice.
2. Third Party Websites/Links
   In the event Your Personal Data that You fill in other third party websites/links, either directly or indirectly related to Our Services, we are not responsible for the information You provide on their websites/links, because basically we cannot control third party sites. We advise You to read the privacy notices on each such website before providing Your information to the relevant third party.

YOUR RIGHTS

In relation with the processing of Your Personal Data through Our Platform, You have the right to:

1. update and/or correct errors and/or inaccuracies of Your Personal Data recorded on the Platform;
2. withdraw Your consent to process Personal Data on the Platform;
3. request and obtain a copy of Your Personal Data stored in the Mekari Group system, that will be carried out in accordance with the Applicable Law.
4. request and obtain a copy of Your Personal Data stored in the Mekari Group system, that will be carried out in accordance with the Applicable Law.
5. delete and/or destroy Your Personal Data,

In relation with Your request to withdraw Your consent, You understand and acknowledge that after Your application has been submitted to Us, You may no longer be able to use the Service. Withdrawing Your consent may result in termination of Your account or Your contractual relationship with Us, with all accrued rights and obligations shall be fully fulfilled. After receiving a notification to withdraw consent for the processing of Your Personal Data, We will inform You about the possible consequences of the withdrawal so You can decide whether You still want to withdraw the consent.

We has the right to revoke your request, if Your request is irrelevant to the Personal Data stored in Mekari Group, including but not limited to if the party requesting the Personal Data of another party where the party does not have authority over the Personal Data and/or cannot legally prove that the party has authority over the Personal Data requested; and/or We are not permitted to carry out Your request by the competent authority and/or Our internal privacy policies in accordance with the Applicable Law.

Procedures for Requesting the Exercise of Your Rights:

Please note that submitting Your rights as referred to in this Privacy Notice is a request from You to us. Please provide as much detail as possible regarding Your reasons for exercising Your rights, so that we can determine whether You have a valid basis for exercising Your rights.

In processing Your request as may be carried out, we kindly ask You to include and provide us with the necessary reasons and identification details related to Your request to confirm Your identity. This information may include filling out Your full name, domicile, telephone number, copy of Your Identity Document, and Your reasons for exercising Your rights.

All such requests must be sent via our electronic mail address privacy@mekari.com. Please note that request sent via other means other than those set out in this Privacy Notice or that do not contain the information as stated in this Privacy Notice may take us longer to process, may not be processed by us and/or we may not be able to respond within the specified time limits.

USE OF COOKIES

Cookies are small text files that are placed on Your device when You visit our websites which functions to enable theMekari features and functionality of Our site. They allow Us to recognize Your device(s) and store certain iInformation about Your preferences or past actions. By visiting Our websites, You may receive cookies from Us or from third parties who provide analytics, advertising or serve essential functional purposes. We may also place cookies in Your browser when You visit non-Mekari sites that host Our plugins or tags.

Based on its creator, cookies are categorized into first party cookies and third party cookies. First party cookies are cookies set by Us on Our website, while third party cookies are cookies set by third parties with whom we partner. The Information gathered by third parties through their cookies can be linked with other Information they have about You from other sources. The cookies third parties utilize are generally not under Our control or accessible by Us.

Based on its duration, cookies are categorized into session cookies and persistent cookies. Session cookies are temporary and designed to enhance Your browsing experience within a single browsing session, while persistent cookies are stored on Your device and remain for a specified period of time or until you manually remove them.

We use cookies for a number of purposes:

• To provide essential functions of the use of Our websites.
• To authenticate and protect You as You interact with Our websites.
• To store iInformation related to Your session, such as maintaining your choices and preferences ei.ge. Your choice of language.
• To provide You with relevant advertisement, as well as analyzing the efficacy of displayed ads such as measuring number of views or clicks.
• To provide You a personalized experience during Your interaction with Our websites.

We use the following types of cookies:

1. Essential Cookies: These cookies are necessary for the functioning of Our websites. They enable core functionalities such as security, network management, and accessibility. Without these cookies, certain features of Our websites may not function properly.
2. Analytics Cookies: These cookies help Us understand how visitors interact with Our websites by collecting and reporting visitors behavior on Our websites. They allow Us to measure and improve the performance of our websites, ensuring a better user experience.
3. Advertising Cookies: These cookies track Your online activity and allow Us to deliver relevant advertising content based on Your interests. They help Us to measure the effectiveness of Our advertising campaigns and limit the number of times You see an ad.

You may refer to below list of specific cookies used on Our websites:

We respect Your privacy and strive to provide You with control over the use of cookies on Our websites. The cookies We use are tailored according to Your preferences. You have the ability to accept or reject different types of cookies through clicking on Our cookies preference tool or Your browser settings. By managing Your cookie preferences, You can customize your experience on our websites to suit Your needs.

You understand that the majority of browsers accept cookies by default. Therefore, You might need to deliberately remove or disable cookies if You do not want them to be used. You can still use Our websites, but some features might not function properly if You refuse to allow cookies to be used.

YOUR PERSONAL DATA SECURITYYOUR PERSONAL DATA SECURITY

To protect Your Personal Data, We implement an international standard Information Security Management System based on ISO 27001 as a tool for implementing a security system for data confidentiality, integrity and availability. Therefore, Our employees have been trained to understand and follow ISO 27001 when processing Your Personal Data.

We also always try to improve the security of Your Personal Data by using the latest technology and complying with applicable regulations to meet the expectations of related parties, and to ensure continuous quality improvement. Furthermore, We consider protecting Your Personal Data as Our priority by using the highest standards to secure Your Personal Data.

Although We will try to protect Your Personal Data, We cannot guarantee the integrity and accuracy of the Personal Data that You provide through the internet, considering that sending Information through the internet is not completely secure. You are responsible for maintaining the confidentiality of Your account details, including Your password and One Time Password (OTP) to anyone, and You must always maintain and be responsible for the security of the device that You use.

You hereby agrees to release, hold harmless, indemnify, and defend Mekari Group resulting directly or indirectly from any loss, risks and/or consequences due to Personal Data that is intercepted, accessed, stolen, disclosed, altered, or destroyed by an unauthorized third party, due to factors beyond Our control and/or contrary to this Privacy Notice and the Applicable Law, including those resulting from Your error or negligence.

PRIVACY NOTICE CHANGES

We has a right review and change this Privacy Notice from time to time at our sole discretion. If there are changes to this Privacy Notice, We will inform You through notifications published on the Platform and/or website, or to Your e-mail address recorded on Our platform. You acknowledge and agree that You are responsible to check this Privacy Notice from time to time to find out the latest conditions or Information regarding the process of protecting Your Personal Data through Our Platform.

LANGUAGE

In the event that these Privacy Notice are displayed in a variety of language choices and there is a discrepancy between one language and another, the Bahasa Indonesia text will prevail.

CONTACT

If you have any questions about the processing of your Data or other questions related to this Policy, please contact us via email: policy@mekari.com