Data Security & Privacy Commitment
PT Gunatronikatama Cipta (GASI) is fully committed to protecting the privacy and security of personal data processed through our website and software applications, namely GASI Payroll System (GPS) and GASI e-PeopleCare System (GPC). We recognize our obligations under Law No. 27 of 2022 on Personal Data Protection (UU PDP), which came into effect in October 2024, and we uphold these principles in our role as a system/application provider.
In this context, we emphasize that our responsibility as a SaaS provider is to ensure that our systems are designed and operated in a manner that safeguards the confidentiality, integrity, and availability of personal data. We do not act as a Data Controller; our clients, as the contracting entities, retain full responsibility as Data Controllers and Data Processors for the lawful collection, use, storage, and deletion of personal data, including the personal data of their employees as end users of GPS and GPC. Our interaction with Data Subject will be performed through Data Controller.
Privacy Notice
This Privacy Notice applies to www.ptgasi.co.id, the domain peoplecare.id, surveys, newsletters, webinar invitations, meetings, and other similar activities, as well as any data requests made through other media used by us.
GASI is the data controller responsible for the processing of personal data related to website visitors, customers, survey participants, and other audiences. We collect internet log information, including IP addresses, browser types, access times, and referring URLs. To ensure the website is properly managed and to enhance navigation, GASI also uses cookies or web beacons to collect aggregated data (please refer to our Cookie Policy for further details).
As a Participant in Our Webinars or Meetings
Personal Data
When you register to participate in our webinars or meetings, we will request information necessary for the organization of such activities, including:
- Name – to record all individuals who have registered, regardless of whether they attend.
- Company – to understand which organizations are represented and to assess whether the webinar or meeting aligns with the intended target audience.
- Contact information – so we can send you relevant details regarding the event.
The purpose of processing this personal data is to manage your participation in our webinars or meetings and to provide the necessary event-related information. This data is collected and processed on the basis of your consent at the time of registration. You may withdraw your consent at any time, after which any stored information will be deleted within three (3) business days.
Special Categories of Personal Data
In general, we do not request special categories of personal data (e.g., data related to race or ethnicity, religious beliefs, criminal records, physical or mental health, or sexual orientation) from visitors. However, since we often provide meals during in-person events, we may ask for information regarding food allergies to minimize the risk of allergic reactions. This information is processed based on your consent and only collected if you choose to provide it. It is used solely for the purpose of event arrangements and will be retained for three (3) years before being deleted.
Recordkeeping Requirements
If you attend an event where meals are provided, GASI is legally required to retain your name and the name of the company you represent in accordance with the bookkeeping provisions under PMK No. 54/PMK.03/2021. This data is kept as part of supporting documentation for expenses related to meal provisions and will be stored for five (5) years in compliance with the regulation.
As a Participant in Our Surveys
When you participate in any of our surveys, we will request information necessary to conduct the survey. The personal data we may collect includes:
- Name – to record who has participated in the survey.
- Company, department, and job role – to gain insights into the types of organizations and roles represented by respondents.
- Job details (e.g., role, level, experience, etc.).
- Personal data included in survey responses – survey results will be anonymized, and individual responses will not be linked to any identifiable individual.
The purpose of processing this personal data is to administer the survey, promote our products and services, and identify relevant topics related to the survey themes. The legal basis is the consent you provide upon registering as a survey participant. You may withdraw your consent at any time; stored information will be deleted within three (3) business days of withdrawal.
As a Subscriber to Our Bulletin / Newsletter
You may choose to subscribe to our newsletter, as well as receive information about events and other updates. The information you provide will be stored in your profile and may include:
- Name – to manage your profile and address you in a more personalized manner.
- Email address – to send you the newsletter.
- Company, department, and job role – to ensure we deliver content that is most relevant to your professional interests.
The legal basis for sending newsletters is the consent you provide when registering as a subscriber. You may withdraw your consent at any time. Upon withdrawal, we will discontinue sending newsletters and other email communications within five (5) business days.
General Provisions
We may collect information about the company you work for; however, we will not collect your personal data from any source other than your interactions with us. Information regarding your activity will be stored in your profile and used to provide insights into how actively you engage with our website, webinars, or events, how interested you are in our services, and which topics attract your attention the most. This information may be used to tailor our communications to be more relevant to your interests.
In addition, your personal data may be used to protect our rights or property, but only in specific circumstances and always in accordance with applicable data protection laws.
Your Rights
As a registered individual, you have several rights relating to how we process your personal data. If you have any questions or wish to exercise them, you may contact us at gasi.privacy@ptgasi.co.id.
-
Right to Request Access to Your Personal Data
You may submit an access request to obtain information on whether we process your personal data in relation to newsletters and events, as well as what specific information we process if you are registered.
-
Right to Rectify Your Personal Data
If you believe that any information we hold about you is incorrect, you may request correction at any time. When you verify your newsletter subscription or register for a webinar, your profile information will automatically be updated.
-
Right to Object
If you do not want us to record your activity on our digital platforms, or track your attendance at webinars and other events as part of profiling, you may object. Upon objection, we will stop recording such information about you.
-
Right to Erasure (Right to be Forgotten)
You may withdraw your consent at any time by unsubscribing from the newsletter via the link at the bottom of our emails. We will delete your information within three (3) business days. For other erasure requests, please email
marketing_team@ptgasi.co.id.
Data Sharing and Disclosure
GASI may share personal data with law enforcement agencies, government authorities, or similar bodies when required. Additionally, we may share personal data for legitimate business purposes such as advertising and marketing, security monitoring, maintenance, billing, and audits. All data disclosures are carefully evaluated to ensure that processing and disclosure of personal data are conducted with appropriate security measures and based on a valid legal foundation.
As a data controller, GASI also processes personal data in accordance with the purposes outlined in this Privacy Notice. Under no circumstances will GASI process personal data for any purpose other than those specified herein.
Data Security
We have implemented industry-standard technological and operational security measures to protect all information provided by visitors through this website and other media we use from unauthorized access, disclosure, alteration, or destruction.
Children's Privacy
We understand the importance of protecting the privacy of children in the online environment. Our website is not designed for or intentionally directed towards individuals under the age of 18. It is not our intention to knowingly collect or retain information about anyone under 18 years of age.
Cookie Policy & Statement
When you visit GASI-owned websites and domains, cookies are placed on your computer, tablet, or any device you use. This enables GASI to analyze page traffic and improve website performance.
What Are Cookies?
Cookies are text files placed on your device when you visit a website. The primary purpose of cookies is to collect information related to your access to the site and to deliver personalized services and content to you.
Types of Cookies
First-Party and Third-Party Cookies — A cookie is classified as "first-party" or "third-party" depending on the domain that places it. First-party cookies are installed by the website you are visiting. Third-party cookies are placed by a different domain through that site.
Session Cookies — These cookies allow the website operator to track your actions during a browsing session. A browsing session begins when you open your browser window and ends when you close it. Session cookies are temporary and are deleted once the browser is closed.
What Types of Cookies We Use and Their Purpose
All cookies used on our website are either strictly necessary for the functioning of the site or are temporary cookies that do not require your consent.
- Strictly Necessary Technical Cookies — Essential for the operation of the website. They enable you to use the website's core functions and do not allow behavioral tracking or user identification.
- Functional Personalization Cookies — Enable the personalization of your experience by remembering your preferences, device settings, form entries, login credentials, and applying security measures such as re-authentication prompts.
- Third-Party Cookies — Certain cookies are placed by third parties beyond our control, such as advertising networks or web traffic analytics services.
Cookie Storage Management
Strictly necessary technical cookies are enabled by default and cannot be disabled, as they are essential for the proper functioning of the website. By continuing to browse and navigate the website, you consent to the placement of cookies based on the default settings provided. All cookies placed on the website have a maximum lifespan of 1 year.
Terms of Service Usage
By using our website, you confirm that you accept the terms of this policy and agree to comply with them. You may only use our website for lawful purposes and must not use it:
- In any way that violates applicable local, national, or international laws or regulations.
- In any unlawful, fraudulent, or deceptive manner, or for any unlawful or harmful purpose or effect.
- To harm or attempt to harm minors in any way.
- To bully, insult, intimidate, or humiliate others.
- To knowingly use or reuse any material from our website without our written consent.
- To transmit or facilitate the transmission of any unsolicited or unauthorized advertising or promotional material (spam).
- To transmit, send, or upload any data containing viruses, Trojan horses, worms, time-bombs, spyware, adware, or any other harmful programs designed to damage the operation of any computer software or hardware.
- To advocate, promote, incite, or assist any unlawful or criminal act.
You also agree not to reproduce, duplicate, copy, or resell any part of our website in contravention of our usage policy, and not to access without authority, interfere with, damage, or disrupt any part of our website, equipment, network, or software.
Governing Law
The provisions of this Cookie Policy, its subject matter, and any non-contractual disputes or claims arising from it are governed by the laws of the Republic of Indonesia. Both you and GASI agree to submit to the jurisdiction of the South Jakarta District Court (Pengadilan Negeri Jakarta Selatan).
Updates to This Privacy Notice
We may update this Privacy Notice from time to time at our discretion and in accordance with applicable regulatory changes. When we make updates, we will revise the date at the top of this page, and the modified Privacy Notice will apply from the date of revision. We encourage you to review this Privacy Notice regularly to stay informed about how we protect your information.
