Data Security & Privacy Commitment
PT Gunatronikatama Cipta (GASI) is fully committed to protecting the privacy and security of personal data processed through our Software-as-a-Service (SaaS) applications, namely GASI Payroll System (GPS) and GASI e-PeopleCare System (GPC). We recognize our obligations under Law No. 27 of 2022 on Personal Data Protection (UU PDP), which came into effect in October 2024, and we uphold these principles in our role as a system/application provider.
In this context, we emphasize that our responsibility as a SaaS provider is to ensure that our systems are designed and operated in a manner that safeguards the confidentiality, integrity, and availability of personal data. We do not act as a Data Controller; our clients, as the contracting entities, retain full responsibility as Data Controllers and Data Processors for the lawful collection, use, storage, and deletion of personal data, including the personal data of their employees as end users of GPS and GPC. Our interaction with Data Subject will be performed through Data Controller.
Privacy Notice
This Privacy Notice applies to www.ptgasi.co.id, the domain peoplecare.id, surveys, newsletters, webinar invitations, meetings, and other similar activities, as well as any data requests made through other media used by us.
GASI is the data controller responsible for the processing of personal data related to website visitors, customers, survey participants, and other audiences. We collect internet log information, including IP addresses, browser types, access times, and referring URLs. To ensure the website is properly managed and to enhance navigation, GASI also uses cookies or web beacons to collect aggregated data (please refer to our Cookie Policy for further details).
As a Participant in Our Webinars or Meetings
Personal Data
When you register to participate in our webinars or meetings, we will request information necessary for the organization of such activities, including:
Name – to record all individuals who have registered, regardless of whether they attend.
Company – to understand which organizations are represented and to assess whether the webinar or meeting aligns with the intended target audience.
Contact information – so we can send you relevant details regarding the event.
The purpose of processing this personal data is to manage your participation in our webinars or meetings and to provide the necessary event-related information. This data is collected and processed on the basis of your consent at the time of registration. You may withdraw your consent at any time, after which any stored information will be deleted within three (3) business days.
Special Categories of Personal Data
In general, we do not request special categories of personal data (e.g., data related to race or ethnicity, religious beliefs, criminal records, physical or mental health, or sexual orientation) from visitors. However, since we often provide meals during in-person events, we may ask for information regarding food allergies to minimize the risk of allergic reactions. This information is processed based on your consent and only collected if you choose to provide it. It is used solely for the purpose of event arrangements and will be retained for three (3) years before being deleted.
Recordkeeping Requirements
If you attend an event where meals are provided, GASI is legally required to retain your name and the name of the company you represent in accordance with the bookkeeping provisions under PMK No. 54/PMK.03/2021. Therefore, this data is kept as part of supporting documentation for expenses related to meal provisions. This personal data will be stored for five (5) years in compliance with the regulation.
As a Participant in Our Surveys
When you participate in any of our surveys, we will request information necessary to conduct the survey. The specific data required may vary depending on the type of survey. The personal data we may collect includes:
Name – to record who has participated in the survey.
Company, department, and job role – to gain insights into the types of organizations and roles represented by respondents.
Job details (e.g., role, level, experience, etc.).
Personal data included in survey responses – however, survey results will be anonymized, and individual responses will not be linked to any identifiable individual.
Survey Responses
The purpose of processing this personal data is to administer the survey, promote our products and services, and identify relevant topics related to the survey themes. The legal basis for processing personal data in surveys is the consent you provide upon registering as a survey participant. You may withdraw your consent at any time. If you choose to withdraw consent, the information we store will be deleted within three (3) business days.
As a Subscriber to Our Bulletin/Newsletter
You may choose to subscribe to our newsletter, as well as receive information about events and other updates. The newsletter contains information about GASI’s services that we believe may be of interest to you. The information you provide will be stored in your profile and may include details you submitted during registration, such as:
Name – to manage your profile and address you in a more personalized manner.
Email address – to send you the newsletter.
Company, department, and job role – to ensure we deliver content that is most relevant to your professional interests.
The purpose of processing this personal data is to manage and deliver the newsletter to you, as well as to enable GASI to promote its products and services. The legal basis for sending and sharing newsletters is the consent you provide when registering as a subscriber. You may withdraw your consent at any time. Upon withdrawal, we will discontinue sending newsletters and other email communications within five (5) business days.
General Provisions
We may collect information about the company you work for; however, we will not collect your personal data from any source other than your interactions with us. Information regarding your activity will be stored in your profile and used to provide insights into how actively you engage with our website, webinars, or events, how interested you are in our services, and which topics attract your attention the most. This information may be used to tailor our communications to be more relevant to your interests.
In addition, your personal data may be used to protect our rights or property, but only in specific circumstances and always in accordance with applicable data protection laws.
As a registered individual, you have several rights relating to how we process your personal data. The following provides an overview of those rights and how you may exercise them in relation to our digital channels, newsletters, webinars, and events. If you have any questions about your rights or wish to exercise them with GASI, you may contact us at gasi.privacy@ptgasi.co.id
Your Rights
As a data subject, you have the following rights regarding the processing of your personal data:
1. Right to Request Access to Your Personal Data
You may submit an access request to obtain information on whether we process your personal data in relation to newsletters and events, as well as what specific information we process if you are registered.
2. Right to Rectify Your Personal Data
If you believe that any information we hold about you is incorrect (for example, your email address or job title has changed), you may request correction at any time. When you verify your newsletter subscription or register for a webinar, your profile information will automatically be updated based on the changes you provide.
3. Right to Object
If you do not want us to record your activity on our digital platforms, or track your attendance at webinars and other events as part of profiling, you may object. Upon objection, we will stop recording such information about you.
4. Right to Erasure (Right to be Forgotten)
You may easily withdraw your consent at any time by unsubscribing from the newsletter via the link provided at the bottom of our emails. We will then delete your information related to the newsletter within three (3) business days. For other erasure requests, please email marketing_team@ptgasi.co.id
Data Sharing and Disclosure
GASI may share personal data with law enforcement agencies, government authorities, or similar bodies when required. Additionally, we may share personal data for legitimate business purposes such as advertising and marketing, security monitoring, maintenance, billing, and audits. All data disclosures are carefully evaluated to ensure that any processing and disclosure of personal data are conducted with appropriate security measures and based on a valid legal foundation.
As a data controller, GASI also processes personal data in accordance with the purposes outlined in this Privacy Notice. Under no circumstances will GASI process personal data for any purpose other than those specified herein.
Data Security
We have implemented industry-standard technological and operational security measures to protect all information provided by visitors through this website and other media we use from unauthorized access, disclosure, alteration, or destruction.
Children’s Privacy
We understand the importance of protecting the privacy of children in the online environment. Our website is not designed for or intentionally directed towards individuals under the age of 18. It is not our intention to knowingly collect or retain information about anyone under 18 years of age.
Cookie Policy & Statement
When you visit GASI-owned websites and domains, cookies are placed on your computer, tablet, or any device you use. This enables GASI to analyze page traffic and improve website performance. Cookies are used according to their nature and for the purposes described below.
What Are Cookies?
Cookies are text files placed on your device when you visit a website. The primary purpose of cookies is to collect information related to your access to the site and to deliver personalized services and content to you.
Types of Cookies (Cookie Identification)
There are various types of cookies:
First-Party Cookies and Third-Party Cookies
A cookie is classified as “first-party” or “third-party” depending on the domain that places it.
First-party cookies are installed by the website you are visiting.
Third-party cookies are placed by a domain other than the one you are accessing. When you visit a website and another entity places a cookie through that site, it is considered a third-party cookie.
Session Cookies
These cookies allow the website operator to track your actions during a browsing session. A browsing session begins when you open your browser window and ends when you close it. Session cookies are temporary and are deleted once the browser is closed.
What Types of Cookies We Use and Their Purpose
All cookies used on our website are either strictly necessary for the functioning of the site or are temporary cookies that do not require your consent.
Strictly Necessary Technical Cookies
These cookies are essential for the operation of the website. They enable you to use the website’s core functions. Without these cookies, you would not be able to use the site properly. These cookies only require the storage of information necessary to be placed on your device and do not allow behavioral tracking or user identification.
Functional Personalization Cookies
These cookies enable the personalization of your experience on the website by remembering your preferences. Specifically, they allow us to:
Adjust the website display according to your device settings (e.g., preferred language, screen resolution, operating system) during your visit;
Store information entered in forms or choices you make on the website;
Provide you with access to your account or other user-specific areas based on your login credentials; and
Apply security measures, such as prompting you to re-authenticate after a certain period of inactivity.
Third-Party Cookies
Please note that certain cookies are placed by third parties, which are beyond our control. Such third parties may include advertising networks or external service providers, such as web traffic analytics services. In many cases, these third-party cookies function as functional personalization cookies.
Cookie Storage Management
You can manage cookie storage as follows:
Strictly necessary technical cookies are enabled by default and cannot be disabled, as they are essential for the proper functioning of the website.
By continuing to browse and navigate the website—such as by clicking on elements of the site (images, links, the “search” button, etc.) or by accessing another page—you consent to the placement of cookies based on the default settings provided.
All cookies placed on the website have a maximum lifespan of 1 year.
Terms of Service Usage
By using our website, you confirm that you accept the terms of this policy and agree to comply with them. If you do not agree with these terms, please do not use our website.
We recommend that you print a copy of these terms for future reference.
Changes to This Policy
We may update these terms from time to time. Each time you wish to use our website, please review the terms to ensure you understand the conditions that apply at that time. These terms were most recently updated based on the date indicated above.
You may only use our website for lawful purposes and must not use it:
In any way that violates applicable local, national, or international laws or regulations.
In any unlawful, fraudulent, or deceptive manner, or for any unlawful or harmful purpose or effect.
To harm or attempt to harm minors in any way.
To bully, insult, intimidate, or humiliate others.
Knowingly to use or reuse any material from our website without our written consent.
To transmit or facilitate the transmission of any unsolicited or unauthorized advertising or promotional material or any other form of similar solicitation (spam).
Knowingly to transmit, send, or upload any data or material that contains viruses, Trojan horses, worms, time-bombs, keystroke loggers, spyware, adware, or any other harmful programs or similar computer code designed to damage the operation of any computer software or hardware.
To advocate, promote, incite, or assist any unlawful or criminal act (such as copyright infringement or computer misuse).
You also agree:
Not to reproduce, duplicate, copy, or resell any part of our website in contravention of our website usage policy.
Not to access without authority, interfere with, damage, or disrupt:
any part of our website;
any equipment or network on which our website is stored;
any software used in the provision of our website; or
any equipment, network, or software owned or used by any third party.
Interactive Services
From time to time, we may provide interactive services on our website, including, without limitation, customer service chat support (collectively referred to as “interactive services”). When we offer such services, we will provide you with clear information regarding the type of service offered, whether moderation is in place, and the form of moderation used (including whether it is human-led or technical).
We will make reasonable efforts to assess potential risks to users from third parties when using the interactive services provided on our website, including whether to implement moderation and what type of moderation to apply, taking such risks into consideration. However, we are under no obligation to oversee, monitor, or moderate any interactive services we provide, and we expressly exclude liability for any loss or damage arising from the improper use of any interactive service, regardless of whether the service is moderated.
Where we do provide moderation for an interactive service, we will offer you a means to contact the moderator should any issues or concerns arise.
Breach of This Policy
If we determine that a breach of this policy has occurred, we may take any action we deem appropriate. Failure to comply with this policy may constitute a material violation of the terms under which you are permitted to use our website, and may result in us taking one or more of the following actions:
Immediate, temporary, or permanent withdrawal of your right to use our website.
Issuing a written warning to you.
Initiating legal proceedings against you to seek compensation for all costs incurred on an indemnity basis (including, but not limited to, reasonable administrative and legal costs) arising from the breach.
Taking further legal action against you.
Disclosing relevant information to law enforcement authorities as we deem necessary or as required by law.
Governing Law
The provisions of this Cookie Policy, its subject matter, and any non-contractual disputes or claims arising from it are governed by the laws of the Republic of Indonesia. Both you and GASI agree to submit to the jurisdiction of the South Jakarta District Court (Pengadilan Negeri Jakarta Selatan).
You may accept, configure, or reject cookies by providing consent, adjusting your settings, or refusing the placement of cookies on your device.
Updates to This Privacy Notice
We may update this Privacy Notice from time to time at our discretion and in accordance with applicable regulatory changes. When we make updates, we will revise the date at the top of this page, and the modified Privacy Notice will apply from the date of revision. We encourage you to review this Privacy Notice regularly to stay informed about how we protect your information.
Contact Information
If you have any questions about the content of this Privacy Notice, please contact us at gasi.privacy@ptgasi.co.id
