Privacy Policy

PT Bank Sahabat Sampoerna ("BSS") recognizes the importance of protecting personal data. Therefore, BSS is committed to being transparent in safeguarding and protecting your personal data as a user of the www.banksampoerna.com site ("BSS Site") and other services (collectively referred to as "Services") by preparing a Privacy Notice ("Privacy Notice") to explain how BSS collect, use, disclose, processe, store, and protect personal data information.

BSS has prepared this Privacy Notice to explain the type of personal data BSS collects about you as a Data Subject (hereinafter referred to as "You") at BSS as the Personal Data Controller, how BSS will use that personal data, with whom BSS will share it, the purposes for which BSS needs to share it, and the measures BSS will take to ensure the security of personal data in accordance with the provisions of the Law of the Republic of Indonesia Number 27 of 2022 concering Personal Data Protection, including any of its subsequent amendments, replacements, and implementing regulations from time to time ("PDP Law").

This Privacy Notice is part of the General Terms and Conditions for the use of Banksampoerna.com. All terms used in this Privacy Notice are terms that have been defined in the General Terms and Conditions for the use of BSS Site.

How BSS Collects Your Personal Data
BSS will only collect relevant information about you in accordance with the applicable regulations and laws in Indonesia. BSS may collect this information from various sources, and it may relate to your current position and status, or any positions you have held in the past, both within and outside BSS. BSS may also collect information about you when you interact with BSS, for example, by contacting BSS, visiting BSS' website or mobile channels, or using the services BSS provides to you in your capacity as a Data Subject.

Some information will be obtained by BSS directly from you, for example, when you provide identification (including but not limited to, Identity Card ("KTP"), Passport, or Driver's License ("SIM")) to verify your identity. This information may also come from other companies or institutions, or other sources you designate for BSS to obtain information from (for example, including but not limited to your personal data held by third parties such as partners who cooperate with BSS). BSS may also obtain it from publicly available sources.

Information BSS Collects
When you use the Services, BSS may automatically record, collect, use, and disclose information regarding your usage (“Log Data"). This Log Data may include information such as the Internet Protocol (IP) address of your computer or mobile device, your Internet Service Provider (ISP), browser type, the web pages you visited before accessing the BSS Site, the pages of the BSS Site you visit, the time and date of access, and other statistics.

The information that BSS collect about you, both directly and indirectly, may include :

  • Personal identification profile data, which includes but is not limited to full name, National Identity Number (NIK), Taxpayer Identification Number (NPWP), gender, nationality, place and date of birth, mother's maiden name, alias/nickname, religion, photograph, signature specimen, and/or biometric data;
  • Family data, which includes but is not limited to marital status, spouse's identity, spouse's residential address, spouse's place and date of birth, and children's identity;
  • Financial data, which includes but is not limited to account numbers, income amount, expenditure amount, transaction history, net worth, and data related to assets owned;
  • Correspondence data, which includes the address as per your ID Card (KTP), domicile address and status, email address, phone/mobile number, and emergency contact information, including name, relationship to you, and e-mail;
  • Data classified as personal data under the laws and regulations

 

(all above shall hereinafter be referred to as “Personal Data")

If in the future BSS requires additional Personal Data, BSS will notify you in advance through an update to the Privacy Notice and will request new consent from you.

User Rights
You have a number of rights concerning the information BSS holds about you. These rights include:

  • The right to obtain information regarding the clarity of identity, the legal basis, purpose of the request, and use of personal data, as well as the accountability of the party requesting the Personal Data,
  • The right to the correct and update of Personal Data,
  • The right to access and obtain a copy of Personal Data (BSS reserves the right to charge a fee for the fulfillment of this right with notification to the User),
  • The right to the termination of processing, deletion, and/or destruction of Personal Data,
  • The right to withdraw consent for the processing of Personal Data,
  • The right to object to decision made automaticly including profiling, that have legal consequences or significant impact on you,
  • The right to delay or restrict the processing of Personal Data in a manner proportional to the purpose of the processing,
  • The right to file a lawsuit and receive compensation for violations in the processing of personal data processing in accordance with applicable laws and and regulations, and
  • The right to data portability and interoperability.

 

However, BSS may reject requests if they conflict with applicable laws or if rejection is permitted under existing regulations as stipulated in articles 15 and 33 of Law No. 27 of 2022 concerning Personal Data Protection.

How BSS Uses the Information We Collect
BSS will only use your information if BSS have obtained your consent or if BSS has a legitimate Basis for Processing your Personal Data. The Basis for Processing Personal Data includes the following:

  • Fulfillment of processing purposes
    for the of fulfilling processing objectives that have been lawfully and explicitly agreed upon by you.
  • Fulfillment of contractual obligations
    for the purpose of providing financial services, including but not limited to account opening, loans and/or credit, investment services, card services, business banking services, online/digital services, and other financial services.
  • Fulfillment of legal obligations
    including but not limited to regulations and/or accounting requirements, tax regulation, financial services regulators, and other applicable laws and regulations.
  • Fulfillment of the company's legitimate interests
    for the purpose of providing services and/or for the company's business needs, such as fraud prevention, maintaining network and service security, direct marketing, and service improvement
  • Fulfillment of your vital interests
    in the event of an emergency situation that may threaten your safety and requires the processing of personal data by BSS.

 

BSS may collect various information, including User Information, User ID, and Device ID (collectively referred to as “User Information"), information from your usage of the Services, and information from surveys and promotions. This information may be used to provide and improve BSS's Services, create new offers, and improve and personalize your experience, including the content and advertisements you see while using the Services.

BSS may use User Information to send you important information regarding the Services and marketing materials that BSS believes may be of interest to you. If at any time you decide you no longer wish to receive marketing communications from BSS, please follow the unsubscribe instructions provided in such communications.

Please note that some of the User Information mentioned above will be used to detect, take measures to prevent, and prosecute fraud or other illegal activities, to correct discrepancies, conduct audits, and for security purposes. User Information may be used to comply with applicable laws, investigations conducted by relevant authorities, the implementation and/or enforcement of the law, or to defend against legal claims that may arise.

How BSS Makes Decisions About You
BSS may use automated systems to assist in determining the outcome of your application. BSS may use technology that helps BSS identify the level of risk involved in your work for BSS, for example, for reasons of fraud or financial crime.

You have the right to object to a decision made solely based on automated processing, including profiling, which has legal consequences or a significant effect on you, in accordance with applicable Personal Data protection regulations.

Disclosure of Information BSS Collects
BSS may disclose the User Information that BSS collects to third parties (“Partners") if BSS has obtained your consent, and you hereby agree and authorize BSS to provide User Information to Partners.

BSS may collaborate with Partners to assist BSS in providing and enhancing the Services (for example, without limitation, maintenance companies, database management, and web analytics). BSS will always require its Partners to maintain the confidentiality and security of your personal data in accordance with applicable provisions.

BSS may employ or cooperate with Partners, both companies and individuals, to facilitate or provide assistance in the development of the BSS Site and certain services for and/or on behalf of BSS, to, among others:

  • provide consumer assistance;
  • provide geo-location information;
  • perform services related to BSS Site (including but not limited to maintenance services, database management, web analytics, and improvement of BSS Site features);
  • assist BSS in analyzing how BSS Site and the Services are used and how they are developed; atau/or
  • to assist BSS' professional advisors and external auditors, including legal counsel, financial advisors, and other consultants. These third parties only have access to User Information to perform these tasks for and/or on behalf of BSS and are contractually bound not to disclose or use said Personal Information for any other purpose.

 

BSS does not share User Information with any party without your consent. However, BSS will disclose User Information to the extent required by law, or as necessary to comply with the provisions of laws and regulations, government institutions, or in the event of a dispute, or any form of legal process between you and BSS, or between you and other users in connection with, or related to the Services, or in an emergency situation related to your health and/or safety.

BSS may remove certain parts of the User Information that can identify you (so that the Personal Information becomes anonymous data) (“Anonymous Data") and disclose such Anonymous Data without limitation to third parties for the purpose of developing BSS Site, database management, analysis, or service improvement. BSS may also combine Anonymous Data with other information in such a way that the information is no longer associated with you, and then disclose the combined information to third parties, for the purposes mentioned above.

Compliance with the Law and Law Enforcement
BSS may cooperate with the government, law enforcement officials, and private parties to enforce and comply with the law. BSS may disclose any relevant information about you for law enforcement purposes to the government, law enforcement officials, or private parties.

BSS may transfer or in any way share some or all of its assets, including the information identified in this Privacy Notice, in connection with a merger, acquisition, reorganization, or sale of assets, or in the event of bankruptcy, in accordance with applicable laws and regulations.

How Long BSS Will Use and Store Your Information
BSS maintains your information in accordance with BSS' data retention policy. BSS will use your Personal Data until the fulfillment of all purposes for processing your Personal Data. After that, BSS will retain your Personal Data for a period of 10 (ten) years from the last time you were a user of BSS' services. Once this retention period ends, BSS will destroy the Personal Data BSS has stored. This allows BSS to comply with legal and regulatory requirements or use it for legitimate purposes such as addressing disputes or any issues that may arise.

BSS may need to retain your information for a longer period if BSS requires the information to comply with regulatory or legal requirements or if BSS may need it for legitimate purposes, such as assisting in addressing issues of fraud and financial crime, responding to requests from regulators, and others.

If BSS no longer needs to retain your information for a longer period, BSS may immediately destroy or delete it. If this is not possible, BSS may take other technical and organizational measures to secure your Personal Data.

Your Personal Data will be stored and backed up electronically and non-electronically.

Deletion and Destruction of Your Personal Data
Referring to the applicable laws and regulations, as well as BSS policy, or at your request, BSS may delete and/or destroy your Personal Data from BSS' system. Nevertheless, BSS reserves the right to retain Personal Data for the purpose of complying with applicable laws and regulations, for evidentiary purposes in the future, and for taxation, audit, and accounting purposes, while continuing to observe Indonesian law and applicable regulations.

You may submit a written request to BSS if you need to have your Personal Data destroyed from BSS' system, by contacting BSS via email at info@banksampoerna.com or the BSS call center (1500 035).

Correction, Change, Addition, Updating of Personal Data
If you find an error in your information or Personal Data, or if you need to update your Personal Data, you must submit a written request to BSS to correct, change, add, complete, and/or update your Personal Data. You can contact BSS via email at info@banksampoerna.com or the BSS call center 1500 035.

Acting on Behalf of Others
In the event that Personal Data of persons related to you (including but not limited to the personal data of your spouse and family members contained in your Family Card) is also collected and/or becomes additional data to be collected, stored, and used in the future by BSS, subject to the provisions of applicable laws and regulations, you represent and warrant that you have received authorization and are authorized to share the personal data of said related persons with BSS, to be used for banking service needs and other BSS purposes.

You also ensure that the said party has understood and agreed that their personal data will be further processed, including providing consent for:

  • The processing of the said party's Personal Data;
  • You receiving information protection notices on behalf of the said party.

 

Minor's and Underage User's Information
BSS does not provide Services to and will not intentionally collect data from any person under the age of 18. Parents or guardians who find that their child has provided personally identifiable information to BSS without their consent may contact BSS via email at info@banksampoerna.com or the BSS call center at 1500 035.

Information Security
BSS employs reasonable physical, technological, and administrative security measures to safeguard the information it collects. If BSS discovers a security breach resulting in the unauthorized disclosure of User Information, BSS will notify you through communication media determined by BSS so that you can take appropriate protective measures. BSS may also send an email to you at the email address you have provided to BSS regarding the notice referred to in this paragraph.

The confidentiality of data and User Information is of the utmost importance to BSS. BSS will implement its best efforts and measures to protect and secure user data and Information. You must not disclose your account password to anyone and must always maintain the security of the device you use.

Cookies & Other Technologies
BSS may use and cooperate with third-party companies that may use small files stored by the web on a user's device when visiting a website (“cookies") and other tracking technologies to collect non-personally identifiable information about your activities on the BSS Site and Services to help BSS understand the use and operation of BSS Services. These third parties may collect and analyze information about your online activities over time on the BSS Site when you use BSS Services. BSS recommends that you read this privacy notice or the privacy notices of other services you use. By accepting this Privacy Notice and by using BSS' Services, you consent to the use of cookies by BSS and the third-party companies that work with BSS.

You can choose to disable cookies through your browser settings or device settings. However, this may impact your experience when interacting with BSS Services and other sites. You may also be unable to log in to BSS Services, such as logging into forums or accounts you own.

Phishing
BSS is very concerned about identity theft and the practice currently known as “phishing". Safeguarding User Information to help protect you from identity theft is a top priority for BSS. BSS does not and will not, at any time, request your credit card information, login password, or your KTP number via unsecured or unofficial email or telephone communications.

BSS Site contains links to other online sites and services. If you choose to visit a third-party service or advertiser by “clicking" a third-party link, you will be directed to that third-party's website or online service. The links that BSS provides to BSS Site, content, or the appearance of advertising banners or other types of advertisements do not constitute an endorsement, authorization, or representation of BSS' affiliation with said third party, nor an endorsement of their privacy or information security policies or practices. BSS Site and other services follow different rules regarding the use or disclosure of the personal information you provide to them. BSS recommends that you read the privacy notices of other services you use.

Changes to this Privacy Notice
BSS may change this Privacy Notice to reflect changes in BSS' activities or changes in regulatory provisions related to Personal Data Protection. If BSS changes this Privacy Notice, BSS will notify you via electronic mail (e-mail) or by means of a notice on BSS Site no later than 30 (thirty) calendar days before the changes take effect. BSS encourages you to review this page periodically for the latest information on how the provisions of this Privacy Notice apply.

Governing Law and Jurisdiction
This Privacy Notice is governed by and interpreted in accordance with the laws of the Republic of Indonesia. Any and all disputes arising from this Privacy Notice will be governed by the exclusive jurisdiction of the South Jakarta District Court.

Acknowledgment and Consent
You are required to provide accurate data, information, and Personal Data to BSS. Failure to provide certain data and/or information may result in BSS being unable to provide full and appropriate services to you.

By using the BSS Site, you acknowledge that you have read and understood this Privacy Notice and the General Terms and Conditions, and you agree and consent to the use, practice, processing, and transfer of User Information by BSS as stated in this Privacy Notice.

You also represent that you have the right to share all the information you have provided to BSS and to grant BSS the right to use and share such information with Partners to support and perform the functions of BSS Site.

How to contact BSS
If you have any questions about the privacy and security of your information or would like to amend or delete it, please contact BSS at info@banksampoerna.com atau telepon ke call center 1500 035. or call the call center at 1500 035. You can also contact the BSS Data Protection Officer (DPO) at info@banksampoerna.com.