Privacy Policy of PT BRI Danareksa Sekuritas Customers
In this Privacy Policy, We PT BRI Danareksa Sekuritas (“BRIDS”) as the Personal Data Controller will strive to maintain the privacy and security of personal data of Customers and prospective Customers for your convenience in making transactions.
We prioritize the security of your Personal Data. We take all these steps in order to fulfill the provisions of Law Number 27 of 2022 concerning Protection of Personal Data (“PDP Law”) and applicable and relevant laws and regulations, including changes from time to time, so that you feel comfortable and confident in providing your Personal Data to Us.
1. Personal Data
Personal Data is data about an individual that can be identified individually or combined with other information either directly or indirectly through electronic or non-electronic systems.
The Personal Data processed includes Personal Data that you have and will provide to BRIDS.
2. Types of Personal Data
BRIDS realizes that it is important for you to know what categories and types of your Personal Data can be processed. Therefore, the categories and types of your Personal Data that can be processed include but are not limited to:
3. General Data
- Data Personal profile identification data
Full name, Population Identification Number (NIK) for Indonesian Citizen (WNI) and Foreign Citizen (WNA) ID cards, Taxpayer Identification Number (NPWP)/Tax Identification Number (TIN), immigration documents, gender, citizenship, place and date of birth, mother's maiden name, alias/nickname, religion, voice recording, image recording, photo, signature form (wet and/or electronic), and/or biometric data.
- Family Data
Marital status, spouse's name, number of children, and number of dependents.
- Correspondence Data
Address according to KTP, address and domicile status, electronic mail address (e-mail), telephone/mobile phone number, and emergency contact including name, type of relationship with you, address, telephone/mobile phone number, and e-mail.
- Education and Employment Data
Education level, type of job, field of business, position, division, year of starting work/business, name of company/agency where you work, address of place of work, employment status, and name, position, and telephone number of co-workers.
4. Specific Data
- Financial Data
Fund or securities account number, source of income, monthly/annual income, monthly/annual expenditure, transaction data, and tax data) and other capital market service data that you receive.
- Data Related to Personal Preferences
Communication preferences, hobbies, and interests.
- Digital activity data
Data in the form of the time of each of your activities in connection with the use of the Services including registration time, login and transactions, your activities in the BRIDS application, and the interaction of the BRIDS application with other applications on your electronic device; device data including hardware model, operating system and version, software, IP address, Wi-Fi information or mobile network that you use to access the Service.
- Interaction Data
CCTV recordings in the BRIDS environment, recordings of Care Center telephone conversations, transcripts of conversations via BRIDS communication media including Whatsapp, e-mail, social media and chatbots.
- Processed Data
Data obtained from the processing of your data including, but not limited to, profiling based on Service usage activities.
BRIDS may receive Personal Data processed directly from you or through third parties.
5. Basis for Processing Personal Data
Personal Data processing is carried out as long as BRIDS has fulfilled one or more of the following processing bases:
- Explicit Consent
BRIDS processes your Personal Data for a specific purpose based on your consent or the authorized party to represent you
- Contractual Obligations
BRIDS processes your Personal Data to fulfill its obligations in the agreement between you and BRIDS or before entering into an agreement with you.
- Legal Obligations
BRIDS processes your Personal Data to fulfill its legal obligations in accordance with the provisions of applicable laws and regulations.
- Vital Interests
BRIDS processes Personal Data to fulfill the protection of the vital interests of Personal Data Subjects.
- Public Interests
BRIDS processes your Personal Data to carry out its responsibilities in order to protect the public interest, provide public services and fulfill BRIDS' authority based on laws and regulations.
- Legitimate Interests
BRIDS processes your Personal Data to fulfill its legitimate interests without disregarding the rights of Personal Data Subjects and still paying attention to the balance between BRIDS' interests and your rights, especially in efforts to improve the Service.
6. Purpose of Processing Your Personal Data
Your Personal Data is processed by BRIDS for the following purposes:
- Management of BRIDS products, services, and/or services, including profiling and scoring, to improve services for you and BRIDS risk management.
- Provision of BRIDS promotions or programs that can collaborate with other parties for products and/or services that you already have.
- Marketing and/or offerings for products, services, and/or other Companies and/or third parties that collaborate with BRIDS for products and/or services that you do not yet have.
- Compliance with laws and regulations and orders from regulators, law enforcement officers, and other authorized agencies.
7. Control and Transfer of Personal Data
In processing your Personal Data, BRIDS may involve third parties as joint controllers and/or processors of your Personal Data both within and/or outside Indonesia. In such cases, BRIDS will protect your personal data in accordance with laws and regulations.
If BRIDS transfers your Personal Data outside of Indonesia, BRIDS will reasonably ensure that the destination country of the transfer has a level of protection for Personal Data that is equivalent (or higher) than the protection of Personal Data in Indonesia. In the event that the destination country of the transfer of Personal Data does not have an equivalent (or higher) level of protection, BRIDS may still transfer your Personal Data as long as it complies with laws and regulations.
BRIDS may also transfer your Personal Data outside of Indonesia for the purposes of combating fraud or other financial crimes, and handling any disputes or problems that may arise in accordance with the provisions of applicable laws and regulations.
8. Rights of Personal Data Subjects
BRIDS fully understands that Personal Data is your most important asset, therefore we inform you of your rights as a Personal Data Subject:
- Right to Information and Access
You have the right to obtain information regarding the identity of the party requesting your Personal Data, the purpose of the request, and access to a copy of your Personal Data. BRIDS will provide access to this information through official BRIDS means, such as BRIDS branches or other channels, in accordance with the provisions of laws and regulations and BRIDS policies.
You understand that if you request a copy of your Personal Data information and/or details of the processing of your Personal Data, you may be charged by BRIDS. You are strictly prohibited from obtaining or collecting, disclosing, distributing, using, or selling other people's personal data without obtaining prior written permission from the owner of the data. This action may be considered a violation of privacy and may result in legal action.
- Right to Data Correction
You have the right to complete, update, and/or correct incorrect or inaccurate Personal Data. We have the right to verify the personal data provided by you. The use of false personal data may be considered a violation of the Privacy Policy and may result in the restriction or termination of User access to our Services.
- Right to Obtain, Use and/or Send Personal Data to Other Parties
You have the right to obtain, utilize, or provide your Personal Data held by BRIDS to third parties, as long as the communication system used by BRIDS and the Third Party is secure.
- Right to Terminate Processing, Delete and/or Destroy Personal Data
You have the right to terminate processing, delete and/or destroy your personal data. You agree to give BRIDS time to process the termination of processing, deletion and/or destruction of your personal data to the extent BRIDS requires. To exercise the right to terminate processing, deletion and/or destruction of personal data, you can contact BRIDS through the means of communication set out in this Privacy Policy. Please understand that termination of processing, deletion and/or destruction of personal data may affect BRIDS' ability to provide products, services and services to you and the contractual relationship that has been established between BRIDS and you or between BRIDS and other third parties, including the termination of the services you receive and/or the termination of one or more of your agreements with BRIDS and/or the violation of one or more of your obligations under the agreement with BRIDS. In this regard, termination of processing, deletion and/or destruction of personal data results in you giving BRIDS the right to freeze securities or funds accounts, and/or declare that your debts and/or obligations to BRIDS are due and collectible. All losses arising from the implementation of your right to terminate processing, deletion and/or destruction of personal data are your responsibility. BRIDS' obligation to delete and destroy your personal data is excluded for the interests of: national defense and security; law enforcement processes; public interest in the context of state administration; supervision of the financial services sector, monetary, payment systems, and financial system stability carried out in the context of state administration.
- Right to Withdraw Consent
You have the right to withdraw your consent to the processing of Personal Data that you have provided to BRIDS, and you agree to provide BRIDS with additional time to do so.
9. Period of Personal Data Processing
BRIDS will process Personal Data from the time BRIDS obtains the basis for processing. BRIDS will continue to process it as long as you are still using BRIDS products, services, and/or services or in accordance with applicable laws and regulations. BRIDS may store your Personal Data after you terminate your use of BRIDS products, services, and/or services for a period of time required by referring to laws and regulations or in accordance with the storage or retention period stipulated in BRIDS' internal policies or in accordance with applicable laws and regulations.
10. Changes to the Privacy Policy
We are always committed to maintaining the security and privacy of your information. Therefore, we may update this Privacy Policy from time to time in accordance with developments in our practices in processing Personal Data and in accordance with applicable laws and regulations.