1. Introduction
PT Chandra Asri Pacific Tbk, its respective affiliates, subsidiaries, and jointly controlled entities (collectively shall be referred as “Chandra Asri,” “We” or “Us“) respects the privacy of our users (“You“). This Privacy Notice explains how we collect, use, store, maintain, (under certain conditions) disclose, and protect personally identifiable information that You provide while using and/or registering to our website (“Website“) and for other purposes as specified herein, to ensure that your Personal Data is protected and processed in accordance with any applicable laws in Indonesia concerning Personal Data Protection and its implementation regulations (“PDP Law“).

For the purpose of this Privacy Notice, “Personal Data” means any information or data of any person who is identified or may be identified individually or combined with other information either directly or indirectly through electronic or non-electronic systems.

By visiting, using and/or registering yourself on our Website, you are deemed to have read, comprehended and agreed to all the contents contained in this Privacy Notice. If you do not agree with any of part or all of the contents of this Privacy Notice, You can leave the Website.

2. Types of Personal Data Collected
We may collect the following types of Personal Data from You:

a. General information, such as name, postal address, phone number, e-mail address, and nationality.
b. Educational background, such as education certificate and education transcript.
c. Information related to work or professional experiences, such as Curriculum Vitae (CV), previous positions, and employer details.
d. Copy of ID Card (KTP).
e. Other informations as required by Chandra Asri with your prior consent.

In addition, when You use the Website, We may collect certain information automatically through cookies. This information may include your IP address, browser type, operating system, referring URL, browsing activity on the Website, device information, and usage data (e.g., pages viewed, time spent on the Website).

2. Personal Data that We Collect, Store, and Use
We use your Personal Data for the following purposes, as permitted by PDP Law:

a. To operate and improve the Website and provide You with a better user experience. This may involve analysing usage data to understand how users interact with the Website.
b. To monitor your use of our systems, including our Website.
c. To facilitate our communication including responding to your inquiries and requests. This includes using your contact information to answer your questions and fulfil your requests.
d. To send You information about Chandra Asri, such as company news, events, and product updates (You can unsubscribe at any time). We will only send You marketing communications with your consent.
e. To assess, manage, and process your job applicant.
f. To operate and manage our business operations, including but not limited to take part of our survey.
g. Take measurements and improve your experience when using the Website.
h. Make adjustments to your features or experience when using the Website.
i. To comply with legal and regulatory obligations. This may include disclosing your Personal Data to law enforcement or other government agencies as required by law.
j. We will notify You of other purposes when collecting and/or using Personal Data.

4. How We Process Your Personal Data
We have implemented procedures and safeguards to properly manage Personal Data, including its collection, usage, disclosure, retention, and disposal. We will process your Personal Data, including any sensitive information for a specific purpose with your consent. We also process your Personal dData to fulfil our contractual obligations, to comply with Indonesian laws and regulations, to protect your vital interest in urgent situation, and to maintain the proper functioning of our business operations and improving our systems. We value your Personal Data by taking any appropriate steps to safeguard it against any loss, misuse, or unauthorize access. These measures may include by ensuring the security of the Website, staff training on Personal Data processing obligations, identification of data incidents and risks, and restricting staff access to your Personal Data.

5. Disclosure of Personal Data

We may disclose or transfer your Personal Data to our affiliated company, third-party service providers, professional advisors, banks, public and governmental authorities, and other third party in connection with our business operations. These third-parties are contractually and legally obligated to keep your Personal Data confidential and secure. We may disclose or transfer your Personal Data as required by law or to protect the rights, property, or safety of Chandra Asri or others.

If We require to transfer your Personal Data, We will ensure to take any necessary
reasonable actions to give your Personal Data an adequate protection.

6. Data Retention
We will retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We will maintain specific records of processing and retention policy, so that your Personal Data will be deleted or destroyed after a reasonable time according to the following retention criteria:

a. We retain your Personal Data as long as We have contractual or relationship with You (such as, subscription to our Website, contractual relationship with Chandra Asri); or
b. We retain your Personal Data as long as needed in order to comply with the applicable laws and regulations; or
c. We will also retain usage data for a reasonable period to analyse Website trends and improve our services.

7. Consent, Withdrawal of Consent, and Your Rights

As We have explained at the beginning of this Privacy Notice, by accessing, browsing, using, registering yourself, using our Website or by clicking the “confirm” or “agree” button or when You create a new account on the Website, then You agree to Us and companies affiliated with Us to collect, use, disclose, transfer and/or process Personal Data as stated herein.

At any time, You can withdraw your consent to our collection, use or disclosure of Personal Data by providing written notification to Us and including your reasons. After confirmation of withdrawal of consent, We will stop collecting and/or using your Personal Data. However, this does not apply if required by law or if We carry out legitimate business activities or based on legal objectives to maintain them. In the event, You withdraw your consent, We may not be able to continue providing our services and/or grant any access to You and You agree to release Us and will not hold Us responsible for any loss or damage arising from or related to the termination of such service and/or access.

We ensure You with have certain rights regarding your Personal Data, including as follows:

• The right to access your Personal Data, including obtaining information and copy of your Personal Data;
• The right to rectification of inaccurate Personal Data: this right entitles You to change, update, correct, and/or rectify any incorrect and/or inaccurate Personal Data;
• The right to erasure of your Personal Data ("right to be forgotten"): this right entitles You to erase, terminate, and/or destroy your Personal Data and We shall no longer entitled to process your Personal Data;
• The right to withdraw your consent: this right entitles You to request Chandra Asri to stop processing your Personal Data by withdrawing your consent. Please be noted that this withdrawal shall not retroactively annul or invalidate the result of processing that has been carried out by Chandra Asri and it shall not prohibit us to continue part of processing based on other valid legal basis, such as in order to comply with the applicable laws and regulations.
• The right to restriction of processing of your Personal Data: this right entitles You to request for a limited processing of your Personal Data under certain conditions as required by applicable laws. Upon your request for this right, We will only be able to store your Personal Data;
• The right to object to the processing of your Personal Data which may result in significant legal impact to You;
• The right to file a claim and compensation for any violation of Personal Data processing: If You believe that your Personal Data rights has been violated, We encourage and welcome You to firstly contact Us in order to seek amicably resolution of your complaint.
• The right to data portability: this right entitles You to receive, use, and/or transmit your Personal Data that You have provided to Chandra Asri.

You can exercise your rights by contacting Us at the address or email address provided below and including your reasons.

8. Security
We always protect Personal Data under our possession or control by maintaining reasonable security settings to prevent unauthorized access, collection, use, disclosure, copying, modification, deletion, or similar risks, including but not limited to using SSL (Secure Socket Layer).

We also take appropriate technical and organizational measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. However, no security measures are foolproof, and We cannot guarantee the complete security of your Personal Data.

9. Cookies
We use cookies and other tracking technologies to help Us to improve our Website. Please see our Cookies Notice for more details on how We use cookies and other tracking technologies.

10. Access and Correction of Personal Information
You must ensure the truth, accuracy and completeness of any data or Personal Data that You provide to Us, and if You know or believe that the Personal Data You provide contains errors or discrepancies, You can immediately correct it. In the event that You want to correctYou cannot correct your Personal Data through the Website, You can immediately submit a request to Us.

In the event that there are costs that may arise as a result of these improvements, You will pay a reasonable fee for access to Personal data which We will previously provide to obtain your consent. We will verify your identity before providing access or making changes to your Personal Data.

11. Enforceability
This Privacy Notice is part of the Terms of Use, therefore all provisions in the Terms of Use apply and are an inseparable part of this Privacy Notice.

12. Updates
This Privacy Notice may be changed and/or updated from time to time as part of our efforts to adapt to changes in existing laws and regulations without prior notice. We recommend that You read this Privacy Notice carefully and check back from time to time for any changes. By continuing to access and use the Website, You are deemed to agree to the changes in the existing Privacy Notice. You understand that the most recent version of this Privacy Notice will supersede all previous versions.

13. Third Party
Our Website may contain links to websites operated by third parties. We do not control or accept responsibility for the activities of third-party websites regarding the collection, use, storage and disclosure of your Personal Data by such third parties. Please read the terms and conditions and privacy policies of third-party websites to learn how they collect and use your Personal Data.

14. Contact Us
If you have any questions about this Privacy Notice or your privacy rights, please contact us at:

• Address: PT Chandra Asri Pacific Tbk., Wisma Barito Pacific Tower A Lt. 7,
  Jl. Letjend. S. Parman Kac. 62-63, Slipi, Palmerah Jakarta 11410 Indonesia
• Email: data.privacy@capcx.com