Data Protection Document
The purpose of this document (“Data Protection Document”) is to inform you of how PT. South Beach Hotel (this company and its affiliates are collectively referred to as “SBH“) manages your Personal Data.
By dealing with us, providing information to us, or obtaining any products and services offered by us, you agree and consent to SBH, as well as SBH’s respective agents and/or representatives (“Agents”) (SBH and Agents collectively referred to in this document as “The Ungasan Clifftop Resort”, “us”, “we” or “our”) collecting, using, disclosing and sharing amongst themselves your Personal Data, and disclosing such Personal Data to SBH’s authorised service providers and relevant third parties as set forth in this Data Protection Document.
The Ungasan Clifftop Resort may, from time to time, update this Data Protection Document, and you agree to be bound by the prevailing terms of the Data Protection Document as updated from time to time on our website www.theungasan.com
1. Personal Data
1.1 In this Data Protection Document, “Personal Data” refers to any data about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have access, including data in our records as may be updated from time to time.
1.2 Examples of such Personal Data you may provide to us include your name, KTP, passport or other identification number, telephone number(s), residential, office or mailing address, email address, network data and any other information relating to any individuals which you have provided us.
2. Collection of Personal Data
2.1 Generally, we collect Personal Data as follows:
- when you submit any form to us, including application and registration forms or when you submit your Personal Data to us for any reason;
- when you contract with us or provide other documentation or information in respect of your dealings with us, or when you use our products and services;
- when you deal with our staff, by way of correspondence (emails or letters) or social media platforms and emails;
- when you use our electronic services, or connect with us via our websites or use services on our websites;
- when you request that we contact you or request that you be included in an email or other mailing list;
- when you respond to our promotions, initiatives or to any request for additional Personal Data;
- when you submit an employment application or when you provide documents or information including your resume and/or CVs in connection with any appointment as an officer, director, representative or any other position;
- when your images are captured by us via CCTV cameras while you are within our premises, or via photographs or videos taken by us or our representatives when you attend events at our premises;
- when you are contacted by, and respond to, our marketing representatives and customer service officers; and/or
- when we seek information about you and receive your Personal Data in connection with your relationship with us, including for our products and services or job applications.
2.2 When you browse our website, you generally do so anonymously but please see the section below on cookies. We do not, at our website, automatically collect Personal Data unless you provide such information or login with your account credentials.
2.3 If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), by submitting such information to us, you are deemed to represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the respective purposes.
3. Purposes for the Collection, Use and Disclosure of Your Personal Data
3.1, The Ungasan Clifftop Resort collects, uses and discloses your Personal Data for the following purposes:
- responding to your queries, feedback and requests;
- verifying your identity;
- sending you emails if you have subscribed to our mailing list;
- managing the business operations and transactions of The Ungasan Clifftop Resort;
- conducting surveys and market research for the purposes of review, develop and improve the quality of our products and services;
- managing the safety and security of our premises and services;
- in connection with any claims, actions or proceedings and/or protecting, proforming and enforcing our contractual and legal rights and obligations;
- managing and preparing reports on incidents and accidents on our premises;
- conducting investigations relating to disputes, billing or fraud;
- meeting or complying with any applicable laws and/or regulations which are binding on The Ungasan Clifftop Resort; and/or
- purposes which are related to the above purposes.
3.2 In addition, The Ungasan Clifftop Resort collects, uses and discloses your Personal Data for the following purposes depending on the nature of our relationship with you:
a. If you are a guest at our hotel
(i) providing customer service and support;
(ii) creating and maintaining guest profiles in our system database;
(iii) corresponding with travel agents on your behalf;
(iv) administering debt recovery and debt management;
(v) administering rewards and benefits;
(vii) facilitating and organising events;
(ix) purposes which are reasonably related to the above.
b. If you are an employee, officer or owner of an external service provider or vendor outsourced or prospected by The Ungasan Clifftop Resort:
(i) assessing your suitability as an external service provider or vendor for The Ungasan Clifftop Resort;
(ii) managing project tenders and quotations, processing orders or managing the supply of goods and services;
(iii) processing and payment of vendor invoices and bills;
(iv) managing credit facilities applications;
(v) managing business operations and product development;
(vi) maintaining communications and our relationship with you;
(vii) facilities management (including but not limited to maintaining the security of our premises); and/or
(viii) purposes which are reasonably related to the aforesaid.
3.3 Furthermore, The Ungasan Clifftop Resort may also collect, use and disclose your Personal Data for the following “The Ungasan Clifftop Resort Additional Purposes”:
a. providing or marketing products, services and benefits to you, including but not limited to special events, promotions, loyalty and reward programmes from The Ungasan Clifftop Resort;
b. matching Personal Data with other data collected for other purposes and from other sources (including but not limited to third parties) in connection with the provision, marketing or offering of products and services by The Ungasan Clifftop Resort;
c. leads generation and management for marketing The Ungasan Clifftop Resort’s products and services;
d. administering and organising contests, lucky draws, promotional events, competitions and marketing campaigns, and personalising your experience at The Ungasan Clifftop Resort’s touchpoints;
e. communicating to you advertisements involving details of our products and services, special offers and rewards, either to our customers generally, or which we have identified may be of interest to you;
f. conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics for us to offer you products and services, as well as special offers and marketing programmes which may be relevant to your preferences and profile; and/or
g. purposes which are reasonably related to the above.
3.5 In relation to particular products and services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, we will collect, use and disclose your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.
3.6 You have a choice to withdraw your consent for receiving marketing or promotional materials/communication. You may contact us using the contact details found below.
3.7 Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to 30 working days for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you withdraw your consent for the receipt of marketing or promotional materials, we may still contact you for other purposes in relation to the products and services that you have requested from The Ungasan Clifftop Resort.
4. Disclosure of Personal Data
4.1 The Ungasan Clifftop Resort will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law, your Personal Data may be disclosed, for the purposes listed above (where applicable), to the following entities or parties, whether they are located overseas or in Indonesia:
a. The Ungasan Clifftop Resort’s related corporations;
b. companies providing services relating to medical screening, insurance and consultancy to The Ungasan Clifftop Resort;
c. agents, contractors or third party service providers who provide operational services to The Ungasan Clifftop Resort, such as courier services, telecommunications, information technology, payment, printing, billing, payroll, processing, technical services, training, market research, call centre, security, employee recognition or other services to The Ungasan Clifftop Resort;
d. vendors or third party service providers in connection with marketing promotions and services offered by The Ungasan Clifftop Resort;
e. our partners in the tourism industry and other hospitality counterparts;
f. any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions involving SBH;
g. external food and beverages establishments;
h. airline companies and travel agents;
i. external banks, credit card companies, secretarial agents and their respective service providers;
j. our professional advisers such as consultants, auditors and lawyers;
k. foreign embassies in relation to facilitating overseas travel arrangements;
l. relevant government ministries, regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority; and
m. any other party to whom you authorise us to disclose your Personal Data..
5.1 When you interact with us on our websites, we automatically receive and record information on our server logs from your browser. We may employ cookies in order for our server to recognise a return visitor as a unique user including, without limitation, monitoring information relating to how a visitor arrives at the website, what kind of browser a visitor is on, what operating system a visitor is using, a visitor’s IP address, and a visitor’s click stream information and time stamp (for example, which pages they have viewed, the time the pages were accessed and the time spent per web page).
5.2 Cookies are small text files stored in your computing or other electronic devices which allow us to remember you. The cookies placed by our server are readable only by us, and cookies cannot access, read or modify any other data on an electronic device. All web-browsers offer the option to refuse any cookie, and if you refuse our cookie then we do not gather any information on that visitor.
5.3 Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website.
6. Data Security
6.1 The Ungasan Clifftop Resort will take reasonable efforts to protect Personal Data in our possession or our control by making reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. However, we cannot completely guarantee the security of any Personal Data we may have collected from or about you, or that for example no harmful code will enter our website (for example viruses, bugs, trojan horses, spyware or adware). You should be aware of the risks associated with using websites.
6.2. We are not liable for any damages resulting from any security breaches, on unauthorised and/or fraudulent use of your username and password.
7. Contacting Us – Feedback, Withdrawal of Consent, Access and Correction of your Personal Data
7.1 If you:
a. have any questions or comments relating to your Personal Data or our Data Protection Document;
b. would like to withdraw your consent to any use of your Personal Data as set out in this Data Protection Document; or
c. would like to obtain access and make corrections to your Personal Data records, you can approach us via the following channels:
- Call: +62 811 942 1110
- Email: [email protected]
7.2 Please note that if your Personal Data has been provided to us by a third party (e.g. a referrer, or your company), you should contact such party directly to make any queries, feedback, complaints, and access and correction requests to The Ungasan Clifftop Resort on your behalf.
7.3 If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, The Ungasan Clifftop Resort may not be in a position to continue to provide its products and services to you, administer any contractual relationship in place, which in turn may also result in the termination of any contracts or arrangements with The Ungasan Clifftop Resort, and your being in breach of your contractual obligations or undertakings. The Ungasan Clifftop Resort’s legal rights and remedies in such events are expressly reserved.
8. Governing Law
8.1 This Data Protection Document and your use of this website shall be governed in all respects by the laws of the Republic of Indonesia.