Privacy Policy

At PT SUPRA Internasional Indonesia (“SUPRA,” “we,” “us,” or “our”), we are committed to safeguarding the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal information when you access or use our website, digital platforms, mobile applications, or related services (collectively, the “Site”), or engage with us through other channels, such as inquiries, partnerships, or career applications. This policy complies with Indonesia’s Law No. 27 of 2022 on Personal Data Protection (PDP Law) and other applicable regulations, reflecting our commitment to global standards and local compliance.

By using the Site or engaging with SUPRA, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please refrain from using the Site or providing your personal data.

1. Scope and Application

This Privacy Policy applies to all personal data collected by SUPRA from:

Visitors to our Site.
Clients, partners, vendors, or suppliers engaging with SUPRA.
Job applicants or individuals inquiring about career opportunities.
Individuals contacting us via email, phone, contact forms, or other communication channels.
Participants in SUPRA events, webinars, or promotional activities.

This policy does not apply to data collected by third-party websites or services linked from our Site, which are governed by their respective privacy policies.

2. Definitions

Personal Data: Any information relating to an identified or identifiable individual, as defined by Indonesia’s PDP Law, including but not limited to names, contact details, identification numbers, or online identifiers.
Data Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
Data Controller: SUPRA, as the entity determining the purposes and means of processing personal data.
Data Processor: Any third party processing personal data on SUPRA’s behalf.

3. Information We Collect

We collect personal data to provide our services, improve user experience, and fulfill legal obligations. The types of data we collect include:

3.1 Information You Provide

Contact Information: Name, email address, phone number, company name, and address provided through contact forms, inquiries, or client engagements.
Professional Information: Job title, organization, industry, or other details shared during business interactions or partnership discussions.
Career Applications: Resumes, cover letters, qualifications, or other details submitted for job opportunities.
Feedback and Communications: Information provided through surveys, feedback forms, or direct communications (e.g., emails, phone calls).
Event Participation: Details provided when registering for webinars, conferences, or SUPRA-sponsored events.

3.2 Information Collected Automatically

Usage Data: Information about your interaction with the Site, such as pages visited, time spent, links clicked, and referral sources.
Device and Technical Data: IP address, browser type, operating system, device identifiers, and other technical information collected via cookies or analytics tools.
Location Data: Approximate location based on IP address or other geolocation data, used to tailor content or comply with local regulations.

3.3 Information from Third Parties

Business Partners: Data shared by partners, vendors, or clients during collaborative projects or service delivery.
Public Sources: Information from publicly available sources, such as professional profiles or company websites, to support business development or due diligence.
Third-Party Services: Data from analytics providers (e.g., Google Analytics) or social media platforms when you interact with SUPRA’s official accounts.

4. How We Use Your Information

We process personal data for specific, legitimate purposes, including:

4.1 Providing and Improving Services

Responding to inquiries, requests, or client engagements.
Delivering services related to water, waste, and energy infrastructure solutions.
Personalizing user experience on the Site, such as displaying relevant content or regional information.
Improving the Site’s functionality, performance, and user interface based on usage data.

4.2 Business Operations

Managing client, vendor, or supplier relationships, including contract administration and invoicing.
Processing job applications and communicating with candidates.
Conducting due diligence for partnerships or business opportunities.

4.3 Marketing and Communications

Sending newsletters, updates, or promotional materials about SUPRA’s services, events, or industry insights (with your consent, where required).
Inviting you to participate in webinars, conferences, or surveys.
Analyzing engagement with our marketing content to improve outreach.

4.4 Legal and Compliance

Complying with Indonesia’s PDP Law and other applicable regulations.
Maintaining records for audits, tax obligations, or legal proceedings.
Protecting SUPRA’s rights, property, or safety, including fraud prevention and cybersecurity measures.

4.5 Analytics and Research

Using aggregated or anonymized data to analyze trends, user behavior, or industry needs.
Conducting research to enhance our services or develop new solutions.

5. Legal Basis for Processing

We process personal data based on the following legal grounds under Indonesia’s PDP Law:

Consent: Where you have provided explicit consent (e.g., for marketing communications or cookies).
Contractual Necessity: To fulfill contractual obligations, such as delivering services to clients or processing job applications.
Legal Obligation: To comply with applicable laws, regulations, or court orders.
Legitimate Interests: For purposes such as improving the Site, ensuring security, or conducting business operations, provided these interests do not override your rights.

6. How We Share Your Information

We may share your personal data in the following circumstances:

6.1 With Affiliates and Partners

SUPRA affiliates or subsidiaries for operational or service delivery purposes.
Business partners, such as contractors or suppliers, involved in delivering infrastructure projects, subject to confidentiality agreements.

6.2 With Service Providers

Third-party vendors providing services such as website hosting, cloud storage, analytics (e.g., Google Analytics), or customer relationship management, acting as Data Processors under strict data protection agreements.
Professional advisors (e.g., legal counsel, auditors) for compliance or business purposes.

6.3 For Legal Purposes

To comply with legal obligations, such as responding to government requests or court orders.
To protect SUPRA’s rights, property, or safety, or that of our users or third parties.
In connection with business transfers, such as mergers, acquisitions, or asset sales, where personal data may be transferred subject to confidentiality obligations.

6.4 With Your Consent

When you explicitly agree to data sharing, such as for marketing partnerships or event collaborations.

We do not sell, rent, or lease your personal data to third parties for marketing purposes without your consent.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

Contact and inquiry data: Retained for the duration of the business relationship or as required for legal compliance.
Career application data: Retained for up to one year after submission, unless you request deletion or consent to longer storage for future opportunities.
Usage and analytics data: Retained for up to two years to analyze trends and improve services.
Legal records: Retained as required by Indonesian tax, corporate, or data protection laws.

When personal data is no longer needed, we securely delete or anonymize it in accordance with applicable regulations.

8. Data Security

We implement technical, organizational, and physical measures to protect your personal data from unauthorized access, loss, misuse, or alteration, including:

Encryption of data in transit (e.g., SSL/TLS for website communications).
Access controls and authentication for SUPRA systems and databases.
Regular security audits and vulnerability assessments.
Employee training on data protection and cybersecurity best practices.

Despite these measures, no system is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by Indonesia’s PDP Law.

9. Your Data Protection Rights

Under Indonesia’s PDP Law, you have the following rights regarding your personal data:

Right to Access: Request confirmation of whether we process your data and obtain a copy of it.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your data, subject to legal retention obligations.
Right to Restriction: Request restriction of data processing in certain circumstances.
Right to Objection: Object to processing based on legitimate interests or for marketing purposes.
Right to Data Portability: Request your data in a structured, commonly used format for transfer to another provider, where applicable.
Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: File a complaint with Indonesia’s data protection authority if you believe your rights have been violated.

To exercise these rights, contact us at privacy@supra-international.com. We will respond within 30 days, or as required by law. Verification of your identity may be required to process your request.

10. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to enhance user experience, analyze performance, and deliver personalized content. Cookies may include:

Essential Cookies: Necessary for Site functionality, such as navigation and access to secure areas.
Analytics Cookies: Used to collect anonymized data on user behavior (e.g., via Google Analytics).
Marketing Cookies: Used to deliver relevant advertisements or track campaign performance (with your consent).

You can manage cookie preferences through your browser settings or our cookie consent tool on the Site. Disabling cookies may affect Site functionality. For more details, please refer to our Cookie Policy at [insert Cookie Policy URL].

11. International Data Transfers

As a company operating in Indonesia with global partnerships, SUPRA may transfer personal data to affiliates, partners, or service providers outside Indonesia for processing (e.g., cloud storage or analytics). Such transfers comply with Indonesia’s PDP Law and include safeguards like:

Data processing agreements with standard contractual clauses.
Encryption and secure transmission protocols.
Selection of service providers in jurisdictions with equivalent data protection standards.

If you are located outside Indonesia, your data may be processed in Indonesia, subject to local laws. By using the Site, you consent to such transfers.

12. Children’s Privacy

The Site is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@supra-international.com, and we will promptly delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or industry standards. Updated policies will be posted on the Site with the effective date. Your continued use of the Site after such changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Email: privacy@supra-international.com

Address: PT SUPRA Internasional Indonesia

Jalan Merdeka 1, Bandung, Indonesia, 40111

Phone: +622220508848

For complaints, you may also contact Indonesia’s data protection authority, as provided under the PDP Law.

15. Governing Law

This Privacy Policy is governed by the laws of the Republic of Indonesia. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the Central Jakarta District Court, unless resolved through alternative dispute resolution as outlined in our Terms of Use.

Last Updated: July 10, 2025

We value your trust and are committed to protecting your personal data with the same rigor and responsibility we bring to our water, waste, and energy solutions. Thank you for engaging with SUPRA.