This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by Bhatara Villa Sanur (“the Villa”, “we”, or “us”) in accordance with the applicable laws and regulations of the Republic of Indonesia, including but not limited to Law Number 27 of 2022 concerning Personal Data Protection (PDP Law).
By making a reservation or using our services, the Guest (“you”) is deemed to have given valid consent to the processing of your personal data as set forth in this Policy.
Types of Personal Data Collected
We may collect and process personal data, including but not limited to:
- Identity data (full name, identification number, passport);
- Contact data (email address, phone number);
- Transaction data (payment and billing information);
- Reservation details and stay history;
- Any other data lawfully provided by you.
Legal Basis for Processing
Personal data is processed based on:
- Guest consent;
- Performance of a contract;
- Compliance with legal obligations;
- Legitimate interests of the Villa, where applicable.
Disclosure of Personal Data
Personal data may be disclosed to:
- Payment service providers and operational partners;
- Government authorities or law enforcement agencies as required by law;
- Other parties with your consent or where legally required.
The Villa does not sell or rent personal data to third parties.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
Data Retention
Personal data will be retained only as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law.
Data Retention
In accordance with the PDP Law, you have the right to:
- Access your personal data;
- Correct or update your data;
- Request deletion of your data;
- Withdraw consent, where applicable.
Data Transfer
Where necessary, personal data may be transferred or accessed outside Indonesia in compliance with applicable laws.
This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by Bhatara Villa Sanur (“the Villa”, “we”, or “us”) in accordance with the applicable laws and regulations of the Republic of Indonesia, including but not limited to Law Number 27 of 2022 concerning Personal Data Protection (PDP Law).
By making a reservation or using our services, the Guest (“you”) is deemed to have given valid consent to the processing of your personal data as set forth in this Policy.
Types of Personal Data Collected
We may collect and process personal data, including but not limited to:
- Identity data (full name, identification number, passport);
- Contact data (email address, phone number);
- Transaction data (payment and billing information);
- Reservation details and stay history;
- Any other data lawfully provided by you.
Legal Basis for Processing
Personal data is processed based on:
- Guest consent;
- Performance of a contract;
- Compliance with legal obligations;
- Legitimate interests of the Villa, where applicable.
Disclosure of Personal Data
Personal data may be disclosed to:
- Payment service providers and operational partners;
- Government authorities or law enforcement agencies as required by law;
- Other parties with your consent or where legally required.
The Villa does not sell or rent personal data to third parties.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.
Data Retention
Personal data will be retained only as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law.
Data Retention
In accordance with the PDP Law, you have the right to:
- Access your personal data;
- Correct or update your data;
- Request deletion of your data;
- Withdraw consent, where applicable.
Data Transfer
Where necessary, personal data may be transferred or accessed outside Indonesia in compliance with applicable laws.