Issued: 5 November 2024

 

Asosiasi Pengusaha Indonesia (“APINDO”), and PT Grab Teknologi Indonesia, together with its subsidiaries, affiliates, related companies, and entities controlled jointly by us (collectively referred to as the "Organizer" or "We/Us/Our”), are committed to protecting and respecting the privacy of every individual, as well as maintaining the confidentiality and integrity of any data and/or information we receive.

This Privacy Notice applies to parties who access and use the Indonesia Privacy & Security Summit website (“IPSS”) which can be accessed via the link ipss2024.com, as well as to parties who participate in IPSS activities, either in their capacity as participants, speaker, and/or sponsor (collectively, “You”).

This Privacy Notice sets out the basis for how Grab obtains and collects, processes and uses, stores, discloses, deletes and/or destroys (collectively, “Process”, “Processed”, “Processing”, depending on the context and wording used in a sentence) data and/or information that can directly or indirectly identify you, (“Personal Data”) that you provided through the IPSS website and your participation in IPSS activities, either in the capacity as a participant, speaker and/or sponsor. Specifically, this Privacy Notice includes the following provisions:

 

Types of Personal Data Collected and Processed	Contains the types of Your Personal Data that We collect and Process.
Purposes of Personal Data Processing	We will Process Your Personal Data only for purposes known to You and in accordance with Your expectations and relevant to Us.
Disclosure of Personal Data	Contains Our purposes for disclosing Your Personal Data to other parties.
Personal Data Security	We will maintain the security of Your Personal Data stored in Our storage system.
Retention, Withdrawal of Consent, Deletion and/or Destruction of Personal Data	Sets out Our basis for storing Your Personal Data and the prerequisites related to the withdrawal of consent, as well as the deletion/destruction of Your Personal Data.
Third-Party Platforms	You should acknowledge and understand that Your participation in IPSS activities is supported by platforms provided by third parties.
Miscellaneous	Contains further explanation of changes, unenforceability of provisions and differences in interpretation of language in the Privacy Notice, as well as information on how to contact Us if You have further questions in connection with this Privacy Notice.

 

We urge You to read this Privacy Notice carefully to ensure that You understand the terms under which We Process Your Personal Data.

1. Types of Personal Data Collected and Processed

We obtain and collect Your Personal Data that You provide through the IPSS website and/or when You participate in IPSS activities, which includes:

1. Full name;
2. Your job title and originating institution;
3. Your mobile phone number;
4. Your email address;
5. Your photos, video and voice recordings during IPSS activities; and/or
6. Other data and/or information that are combined and can identify You.

 

2. Purposes of Personal Data Processing

We Process Your Personal Data solely for the following purposes:

1. Handling Your invitations and requests for participation in IPSS activities;
2. Managing the participation of IPSS participants, speakers and sponsors for the successful execution of IPSS activities;
3. Reporting on IPSS activities and follow-up on IPSS activities (such as sharing presentation materials with participants of IPSS activities and information on future similar events);
4. Conducting video and voice recordings, and taking pictures (photo) of You during IPSS activities activities for IPSS socialization purposes;
5. Providing access to third party platforms used during IPSS activities that may require Your Personal Data; and/or
6. Other purposes to the extent such purposes are not prohibited by applicable laws and regulations. For the avoidance of doubt, We will inform You of such other purposes when seeking Your consent, unless otherwise provided by applicable laws and regulations.

 

3. Disclosure of Personal Data

Grab will not disclose Your Personal Data to other parties, except to the following parties:

1. Disclosure to PT Aktivasi Asia Duotama (“Activate Asia”): We need to disclose Your Personal Data to Activate Asia, as the personal data processor, for the fulfillment of the purposes referred to in Article 2 of this Privacy Notice. Therefore, in the event that Activate Asia carries out processing outside of the purposes set out by Us through this Privacy Notice, You hereby agree that You release Us from all liability of any kind for processing outside of the purposes set out by Us through this Privacy Notice carried out by Activate Asia; and
2. Disclosure to competent authorities: We may disclose Your Personal Data to parties outside of Grab, such as a competent authority, if We have a reasonable belief that such disclosure is necessary to: (i) fulfill Grab’s legal obligations under applicable laws and regulations and/or the orders of the competent authority; (ii) detect, prevent or address safety concerns; and (iii) protect against harm to the rights, property or safety of Grab or the public as permitted by applicable laws and regulations.

 

4. Personal Data Security

Grab is committed to protecting and securing Your Personal Data stored in Our storage systems from unauthorized Processing of Your Personal Data and from Processing of Your Personal Data contrary to applicable laws and regulations, accidental loss, destruction and accidental damage or similar risks, by taking and implementing reasonable legal, organizational and technical measures.

 

5. Retention, Withdrawal of Consent, Deletion and/or Destruction of Personal Data

1. Retention of Personal Data: Grab will retain Your Personal Data in Our storage systems, for as long as:
   1. The retention of Your Personal Data is necessary to fulfill the purposes referred to in this Privacy Notice;
   2. The retention of Your Personal Data is permitted or required by applicable laws and regulations;
   3. You do not request deletion/destruction of Your Personal Data that We store; and/or
   4. Your request for deletion/destruction of Your Personal Data that We retain has been rejected by Us on the basis of the considerations set out in this Privacy Notice.

2. Withdrawal of consent: You have the right to withdraw Your consent to Our Processing of Your Personal Data by submitting a consent withdrawal request through Contact Us. Please note that the withdrawal of Your consent does not affect the lawfulness of any Processing based on Your consent before such consent was withdrawn.
3. Deletion/destruction of Personal Data: If the prerequisites referred to in letter (A) points (1)-(3) above have been met, We will take the necessary steps to delete, destroy, anonymize, or prevent access to or use of Your Personal Data. With the deletion/destruction of Your Personal Data, You will potentially not be able to participate in IPSS activities. Therefore, You hereby agree that You release Us from liability in any form for all consequences arising from such deletion/destruction.
4. For the avoidance of doubt, We reserve the right to refuse the request for deletion/destruction of Your Personal Data, as referred to in letter (A) point (4) above, either in part or in full, if:
   1. Your Personal Data has been deleted/destroyed by Us in Our storage system on the basis of Your previous similar request, and/or request front the competent authority to Us;
   2. Your request is not relevant to Your Personal Data stored by Us, such as among others; if You request Personal Data of another party which You are not authorized to the Personal Data; and/or
   3. We are not permitted by the competent authority and/or applicable laws and regulations to carry out Your request.

 

6. Third-Party Platform

1. You should know and understand that the organization of IPSS activities is also supported by platforms provided by third parties. You acknowledge and agree that such third party platforms are independently managed and operated by such third parties and We will be released from any liability for the processing Your Personal Data by such third parties.
2. If You provide Your Personal Data to a third party through a third-party platform, You agree that the privacy policy/notice and terms of service on that platform shall prevail, and We shall be released from any liability for Personal Data processing activities conducted by that third party or governed by the privacy policy/notice and terms of services on that platform.

 

7. Miscellaneous

1. Amendments: Grab may review and amend this Privacy Notice at Our discretion to ensure that the terms of this Privacy Notice are consistent with future developments in IPSS activities, and/or if there are changes in relevant laws and regulations. We will notify You of such changes on the IPSS website at least (5) business days prior to the effective date of the updated Privacy Notice. You are personally responsible for reviewing this Privacy Notice periodically. Therefore, We encourage You to periodically an regularly visit the IPSS website to keep Yourself updated on this Privacy Notice from time to time.
2. Unenforceability: The invalidity and/or unenforceability of any provision of this Privacy Notice due to the enactment of any legislation or other reason shall not automatically invalidate the enforceability of the remaining provisions of this Privacy Notice.
3. Language: This Privacy Notice is made in Bahasa Indonesia and English. In the event of any discrepancy between Bahasa Indonesia and English, the interpretation of this Privacy Notice shall refer to the Bahasa Indonesia version.
4. Contact Us: If You have any questions or complaints about the interpretation and/or application of this Privacy Notice, You may contact Us at dpo.id.privacy@grabtaxi.com.