This Privacy Policy is prepared in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and applies to the following websites operated by PT Rancang Akses Digital ("we", "us", or "our") as the Personal Data Controller:
Your privacy matters to us. This policy explains what personal data is collected, the legal basis and purpose for collecting it, how it is protected, and what rights you have as a data subject.
1. Information collected
These websites do not collect personal data by default (such as your name, email address, or contact information), unless you voluntarily contact us, sign up for the newsletter, or apply to a Call for Contributors.
The legal basis for processing personal data in all cases described below is your explicit, voluntarily given consent (Article 20 paragraph (2) letter a of the PDP Law). You may withdraw this consent at any time, and doing so does not affect the lawfulness of processing carried out before the withdrawal.
a. Subscribing to the newsletter
If you subscribe to the newsletter, your email address is collected and stored by Kit, the email service provider I use.
Kit may record:
- Your email address
- The time and IP address at the time of subscription
- Email activity (such as opens or link clicks)
This information is used solely for sending the newsletter you opted into. I do not use it for tracking or profiling, and I do not combine it with other data. You may unsubscribe at any time via the link in every email. As the data controller, I do not share your information with any third parties beyond Kit.
Kit is based in the United States, so this data is processed outside Indonesia. See Section 7 for more on international data transfers.
b. Filling Google Forms
We may occasionally invite you to contribute to one of our projects or ask you to fill out an evaluation form, collecting your personal data using Google Forms such as:
- Your name
- Your email address
- Your mobile number
As the data controller, we do not share your information with any third parties. Google Forms is operated by Google, which is also based in the United States, so this data may be processed outside Indonesia.
2. Third-party services that may collect data
These sites also use third-party services that may collect technical or usage data:
a. Cloudflare
Used for security, performance, and DDoS protection. It may log:
- IP address
- Browser and device information
- Pages visited and access time
b. Google Fonts
Fonts may be served via Google Fonts. Google may record your IP address when loading font files.
3. Cookies
Cookies are used for:
- Basic functionality
- Performance and security via Cloudflare
These sites do not use tracking cookies from third-party marketing tools. No consent banner is needed as no personal or identifying cookies are set.
4. Your rights as a data subject
Under the PDP Law, you have the right to:
- Obtain information about the clarity of identity, legal basis, purpose, and accountability of the party requesting your personal data (Article 5)
- Complete, update, or correct your personal data if it is inaccurate or incorrect (Article 6)
- Access and obtain a copy of your personal data (Article 7)
- Terminate processing, delete, and/or destroy your personal data (Article 8)
- Withdraw your consent to the processing of your personal data (Article 9)
- Object to decisions based solely on automated processing that produce legal effects on you (Article 10)
- Delay or restrict the processing of your personal data proportionally (Article 11)
- Sue and receive compensation for violations in the processing of your personal data (Article 12)
- Obtain and use your personal data in a commonly used, machine-readable format, or transfer it to another data controller (data portability, Article 13)
If you are in a region covered by other data protection regulations such as GDPR or CCPA, equivalent rights under those frameworks also apply to you.
To exercise these rights, please contact us at the email below. We will respond without undue delay and help direct you to the relevant third-party service if needed.
5. Data security
We implement reasonable technical and organizational measures to prevent unauthorized access, alteration, leakage, or deletion of personal data, in accordance with Article 39 of the PDP Law. This includes the use of Cloudflare's security services, encrypted connections (HTTPS/TLS), and internal access restrictions on data we store ourselves.
6. Personal data protection failure notification
In the event of a failure to protect personal data (a data breach), we will provide written notice to you no later than 72 hours after we become aware of the incident, in accordance with Article 46 of the PDP Law. This notice will include the type of personal data affected, the time and circumstances of the incident, and the steps taken to address and remediate it.
7. International data transfers
Some service providers we use, namely Kit and Google (for Google Forms and Google Fonts), are based in the United States. In accordance with Article 56 of the PDP Law, we only transfer personal data abroad to providers that maintain an equivalent level of data protection, and on the basis of the explicit consent you give when subscribing to the newsletter or filling out a form.
8. Data retention
If you subscribe to the newsletter, your data will be retained until:
- You unsubscribe from the newsletter
- You request data deletion
- We stop using Kit or stop offering the newsletter
If you fill out any Google Forms we provide, your data will be retained until:
- You request data deletion
- We delete that particular Google Forms
Contact
If you have any questions about this privacy policy, or wish to exercise your rights as a data subject, feel free to reach out:
Imprint
These sites are operated by:
PT Rancang Akses Digital
Jakarta, Indonesia
Acting as the Personal Data Controller under the PDP Law
[email protected]
radikal.id
These are websites created to showcase our profile, projects, and professional work related to accessibility and digital design. No commercial transactions are conducted through these sites.
