Privacy Policy

This Privacy Policy explains how CV. Jeeva Tour And Travel (“Puncakskuy”) and its affiliates, process Customer Personal Data when Customers visit and interact with the Puncakskuy site. Puncakskuy's Privacy Policy in this case covers all aspects implemented by Puncakskuy in matters including and not limited to: collection/income, processing, use, storage, modification, protection, sharing and deletion of Personal Data of Customers and/or other related parties (" Customer").  
1. Understanding Customer Personal Data

Customer Personal Data is any information that can be linked and identified with a particular Customer personally. Personal data includes and is not limited to: name, address, date of birth, place of birth, gender, parents' names, email, telephone number, NIK, passport number, occupation, wife/husband's name, bank account number, debit card number/ ATMs, credit card numbers, official government documents, etc.

In the event that Customers make transactions at Puncakskuy, Puncakskuy will collect personal data such as and not limited to: booking details (including Hotel name, location, price, time of stay, additional services), booking ID, and payment information (including payment card number, bank payment, payment method).

In general Puncakskuy does not collect special personal data such as religious, racial and health information. However, if necessary, Customers can choose to provide this information, for example information on identity documents or health certificates that supports special Customer transactions/requests such as cancellation or changes to orders and Customer food needs.
2. How to collect customer personal data

    Direct data collection.
    Customer Personal Data will be collected when Customers use and interact on the Puncakskuy site and enter data directly into the site, such as:
        When a customer creates an account at Puncakskuy and enters the required personal data such as name, address, contact number, email address, etc.
        When a Customer contacts the customer service team via email or via other channels such as social media, Puncakskuy will collect information about the Customer.
        When customers provide reviews about accommodation or other services available on the Puncakskuy site, Puncakskuy will get information such as name and stay information.
    Other information taken from device use when Customers access the Puncakskuy Site includes:
        Geographic location: derived from IP address, GPS, and other information from Customer devices.
        Log Information: including IP address, browser type, operating system, country, pages visited, mobile operator, device information, and other information related to internet usage.
        Cookies and similar technologies: cookies are browser usage history that can collect and store certain information. Cookies are used to maintain basic site functionality and are partly used to provide a better user experience (reminder of customer activity information). If the Customer chooses to deactivate the cookie feature on the device, the Customer may not be able to access several service features on the Puncakskuy site.
Mobile devices: device information, device location and installed applications.

Collection of data from third parties.
Collection of personal data from third parties will be carried out after obtaining approval from the Customer. The parties referred to include and are not limited to:

    Affiliates, vendors or third parties who collaborate and act on behalf of Puncakskuy in providing services on the Puncakskuy site,
    Third parties, especially in connection with payment transactions such as credit/debit card issuing banks, loan product companies, and other non-cash financial services,
    Representatives who have been authorized by the Customer, such as but not limited to company/business entity representatives, individual representatives, financial/legal/professional advisors),
    The government/regulator/authority body that requires and is regulated by laws and regulations for the collection of personal data,
    Employer company/business entity in connection with Puncakskuy corporate services, after obtaining personal approval from the Customer.

Third party collection of personal data.
In the event that a Customer enters third party personal data into the Puncakskuy site, such as hotel visitor data or bookings for other people, the Customer must obtain approval from the relevant third party. This agreement covers all aspects implemented by Puncakskuy in terms of the Customer Privacy Policy.
3. Purpose of Using Customer Personal Data

After obtaining approval from the Customer for the Use of Personal Data by Puncakskuy, Puncakskuy can carry out actions/activities such as, but not limited to:

    Creation and management of Customer accounts on the Puncakskuy site,
    Offering and marketing products/services on the Puncakskuy site and other promotional media such as:
        Online marketing on social media, advertising, Search Engine Optimization (SEO), Search Engine Marketing (SEM), product offers via email and Whatsapp features, and Push notifications,
        Offline marketing such as product offers through brochures, exhibitions, exhibitions, shopping centers, celebrations, marketing with third parties in collaboration with Puncakskuy. Customers can choose not to receive offers or marketing of Puncakskuy products/services with the "Stop Subscription" option which is regulated separately in Puncakskuy marketing information.  
    Carrying out sales transactions on the Puncakskuy site,
    Manage customer experience and satisfaction through rewards points, customer reviews and surveys,
    Improving Puncakskuy performance and services,
    Detect and prevent violations of regulations and laws such as fraud, money laundering, use of false data and information, and other illegal activities,
    Resolving problems and disputes that may occur between Puncakskuy, Customers and other related parties.
4. Basis for Use of Customer Personal Data

In terms of the use of Customer Personal Data, Puncakskuy will be based on the following:

    Puncakskuy will always ask for approval from the Customer before carrying out the process of collecting and using Customer Personal Data.
    Puncakskuy's contractual obligations in providing services are in accordance with Customer transactions, as stated in Puncakskuy's Terms and Conditions.
    Obligation to comply with applicable laws/legislation.
    A person's vital protection in an emergency.
    Legitimate interests in running a service business at Puncakskuy such as improving service and Site security, preventing illegal/fraudulent transactions, and protecting other people's rights.
5. Disclosure of Customer Personal Data

In disclosing Customer Personal Data, Puncakskuy will first ask for Customer consent and take security measures to protect the confidentiality of Customer Personal Data. Disclosure of Customer Personal Data to related third parties includes, but is not limited to: 

    Puncakskuy affiliate and marketing vendor,
    Vendors and website/IT service providers (web hosting),
    Puncakskuy transaction payment service vendors and service providers (debit/credit card issuing banks, payment account receiving banks),
    Customer data verifier and authenticator,
    Business analysis and risk analysis vendor,
    Required by applicable law in terms of prevention, misuse of data, fraud, money laundering and other illegal activities,
    Puncakskuy business strategies such as part of the sale, consolidation, assignment or other transfer of the business, or transfer of services to other service providers. 

Customers may not be able to know when a third party business partner is involved in a product or service because their name may not be displayed alone, but in the name of Puncakskuy. Disclosure of Personal Data to third parties will only process the information necessary to carry out their functions. They are not allowed to share or use the information for any purpose.
6. Transfer of Customer Personal Data Abroad

The Puncakskuy site can be accessed and used throughout the world. For this reason, Customer Personal Data will be transferred to the Customer's country of location when using Puncakskuy services in other countries. Puncakskuy will ensure maximum and comprehensive protection of Customer Personal Data both in the country of origin and in the country receiving the data consistently. Puncakskuy will provide appropriate protection for cross-border transfers in accordance with applicable laws for international data transfers, including information sent to third parties.
7. Customer Rights to Personal Data

Regarding Customer Personal Data obtained and stored by Puncakskuy, Customers have the rights to that data:

    Customers have the right to know the processes that occur at Puncakskuy in processing Customer Personal Data, including requesting a copy of the data.
    Customers have the right to create a user account and carry out transactions at Puncakskuy based on the data entered.
    Customers have the right to revise, add, limit and delete Customer Personal Data in the Puncakskuy system. Customers can also complain/object and cancel their consent to Puncakskuy's use of Customer Personal Data. However, restrictions, deletion and cancellation of consent to use Customer Personal Data will impact the services and access that Puncakskuy can provide to Customers.
    If there is a violation of privacy that violates laws and regulations regarding Customer Personal Data and/or losses due to the use of that data, the Customer has the right to submit a complaint to the relevant data privacy authority/regulator.
    Customer rights regarding their personal data listed above are carried out through an application process to Puncakskuy and an identity and authority verification process. Supporting or additional documents may be required for the application review process.
    Puncakskuy may refuse a Customer's request to access his personal rights in several cases, such as but not limited to: 
        Customers cannot access their personal data if it is connected to other Customers' personal data,
        Customers cannot change or delete their personal data if the Customer has future/ongoing services or because of legal provisions.
8. Protection of Customer Personal Data

Puncakskuy will take maximum action to protect Customer Personal Data, including providing physical and technical infrastructure, documentation and organizational regulations (including Company procedures/regulations and human resources). However, Puncakskuy cannot guarantee the security of Customer Personal Data as a whole.

Puncakskuy has the right to block sending or reviewing communications that in Puncakskuy's judgment may contain dangerous content, spam, or may pose a risk to Customers, Hotel partners, or other parties.

In the event of a breach of Customer Personal Data, Puncakskuy will notify the Customer of the breach within the shortest possible time since the breach is discovered. Puncakskuy will continue to try to repair the breach of Customer Personal Data until it is resolved.
9. Storage and Deletion of Customer Personal Data

Customer Personal Data will automatically remain stored by Puncakskuy for the purposes of providing services by Puncakskuy and will only be deleted after 5 (five) years since the account was terminated/deleted by the Customer. However Puncakskuy will delete Customer Personal Data if:

    Customers ask Puncakskuy to delete Customer Personal Data which is done by submitting a written request.
    Puncakskuy's purpose in storing Customer Personal Data as in point no.3 is no longer valid.
    Puncakskuy is not permitted by applicable laws and regulations to store Customer Personal Data.

Deletion of Customer Personal Data may affect Puncakskuy services to Customers, such as failed transactions on the Puncakskuy site. Puncakskuy is not responsible for all problems and losses, both material and non-material, experienced by the Customer in connection with the deletion of this data.
10. Links to Other Sites

The Puncakskuy Site may contain links to other websites that are not owned and controlled by Puncakskuy. In this regard, Puncakskuy is not responsible for the Privacy Policy and security practices of the site. Customers are advised to separately read about and understand the Privacy Policy and terms of use of other related websites.  
11. Language and Interpretation

This Privacy Policy is made in Indonesian and if necessary will be made in English. In the event of differences in meaning or interpretation, Indonesian will be used as a reference, and the English version will automatically adjust.
12. Other provisions regarding customer personal data

    Puncakskuy will continue to develop and innovate in terms of providing services to customers. This includes and is not limited to technology, the process of using Customer Personal Data, site services, etc. In this regard Puncakskuy will from time to time update, add and revise the Puncakskuy Privacy Policy to reflect the current state of Puncakskuy services. Puncakskuy will inform you about the changes in question along with the effective date of the changes via the Puncakskuy website, direct email to users, or announcements in the media.
    Customers are deemed to have given their consent and are bound by changes to the Privacy Policy if the Customer after the effective date of the Privacy Policy changes:
        Using Puncakskuy services includes accessing the site, entering data into the Puncakskuy site, and/or making order transactions.
        Communicate both in writing and verbally with Puncakskuy. 
    If Customers have complaints, complaints and input regarding Customer Personal Data and Puncakskuy's Privacy Policy, please contact Puncakskuy's Customer Service contact listed below. All incoming customer information will be treated as confidential and Puncakskuy will make every effort to work together with the customer to resolve it.