Effective Date: 30/04/2025
PT. Citra Sanxing Indonesia (“we”) highly values your privacy. This privacy policy (the “Policy”) sets out how we collect, use and protect your personal data when you visit https://citrasanxing.co.id/ (the “Website”). If you use our products and services or interact with us through other channels, the respective terms and privacy policies of those products and services will apply.
1. Who we are
PT. Citra Sanxing Indonesia, with its address at Kedoya Elok Plaza, Jl. Panjang No.9 DB. 38, RT.19/RW.4, Kedoya Sel., Kec. Kb. Jeruk, Kota Jakarta Barat, Daerah Khusus Ibukota Jakarta 11520, Indonesia, is the entity which collects and processes your data under this Policy.
2. The Data We Collect about You
2.1 We collect both personal and non-personal data when you visit the Website. Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier of that natural person
2.2 We collect and use the following categories of data for the purposes stated below.
If you choose not to provide us with the personal data listed below, we will not be able to deliver the corresponding services.
| No. | What we collect | How we use it |
| 1 | Name, email address, subject and message. | When you contact us and communicate with us, we will use them to verify your identity and respond to your questions. |
| 2 | IP address | We use it to record your operation and protect the security of the Website. |
3. Sensitive Personal Data
3.1 Certain categories of personal data, such as details about your race or ethnicity, religious or philosophical beliefs and so on, are considered more sensitive than other categories of personal data in certain jurisdictions and require a higher level of protection.
3.2 The Website does not collect any sensitive personal data
4. How Your Data is Collected and Processed
4.1 We may collect your data when you browse the Website, when you provide us information via email or other means, or when you communicate and interact with us.
4.2 We process your personal data through electronic and manual methods.
5. Legal Basis for Collection and Use of Personal Data
We only process your personal data where this is a legal basis permitted by the applicable law. The legal basis will depend on the context and purpose for which we collect and use your data, which may include:
(a) Consent: explicit valid consent from you for 1 (one) or several specific purposes that has been delivered by us to you. You may withdraw your consent at any time but this will not affect the validity of the processing activities prior to the withdrawal.
(b) Contractual necessity: it is necessary for us to fulfil the obligations of an agreement to which you are one of the parties, or to fulfil a request of you at the time of entering into an agreement.
(c) Fulfilment of legal obligation: it is necessary to fulfil our legal obligations in accordance with law and regulations.
(d) Vital interest: it is necessary for protecting your vital interest, for example, the processing of your personal data is needed for serious medical treatment.
(e) Public interest: it is necessary to perform tasks within the scope of public interest, public services, or the exercise of authority of us in accordance with law and regulations.
(f) Legitimate interests: it is necessary to serve other legitimate interests with due regard to the purposes, needs, and balance between the interests of us and your rights.
(g) Other: we may also collect and use your personal data based on other legal bases under the applicable law.
6. Cookies
The Website uses cookies and similar technologies to deliver essential and additional functions. Please see our Coookie Policy for more information. You may also manage your cookie settings on the Website.
7. Third-party Links
The Website may include links to third-party websites, plug-ins and applications. Clicking on those links may allow you to visit websites, plug-ins and applications of third parties and how those third parties collect and use your personal data will be governed by their respective privacy policies.
8. Disclosure
8.1 We may disclose your personal data to our affiliates for the purposes stated in this Policy.
8.2 We may engage a data processor to process your personal data for the purposes of this Policy, in which case we will request the data processor to keep your personal data in strict confidence and only process your data to the extent it is necessary to perform its contractual or statutory obligations.
8.3 We may disclose your personal data to third parties to whom we may choose to sell, transfer or merge our business or our assets, in which case the new owner will assume all our rights and obligations in this Policy.
8.4 We may disclose your personal data for the purposes of national security, law enforcement, or public interests.
8.5 We may also disclose your personal data to other third parties where you have provided consent or when required or permitted by applicable law.
9. International Transfer of Data
9.1 We may choose to store your personal data on a local server or a server located in a foreign country depending upon the IT configurations of the Website, which may be adjusted from time to time due to regulatory requirements or our business needs.
9.2 If your personal data is stored on a server in a foreign country, we will take organizational and technical measures to keep your data secure and give your data a level of protection which is comparable to the level of protection required by the law of the country where you reside.
10. Period for Processing
We collect and process your personal data throughout your visit to the Website, during your use of our products and services, and throughout your communication with us. The specific periods for processing are as follows.
| No | Scenario | Starting Time | Ending time |
| 1 | Visit to the Website | When you enter the Website | When you leave the Website |
| 2 | Use of our products and services | When you begin using our products and services | When you stop using our products and services |
| 3 | Communication with us | When the communication begins | When the communication ends |
11. Data Retention
11.1 We will only retain your personal data for as long as necessary to fulfil the purposes set out in this Policy or as required by law. Unless otherwise agreed with you, we expect to retain your personal data for the duration of our service provision and for a reasonable period afterwards.
11.2 Upon the expiration of the retention period, we will delete or anonymize your personal data.
12. Your Legal Rights
12.1 You may have certain legal rights in relation to processing of your personal data, which may include:
- Right to acquire information: you have the right to acquire information on the processing of your personal data.
- Right to complete, update and rectify: you have the right to complete, update, and/or rectify errors and/or inaccuracy of your personal data.
- Right to access and obtain a copy of personal data: you have the right to access and obtain a copy of your personal data in accordance with law and regulations.
- Right to terminate processing, erase, and/or dispose personal data: you have the right to terminate processing, erase, and/or dispose your personal data in accordance with law and regulations.
- Right to withdraw consent: you have the right to withdraw your consent.
- Right to object to automated decision-making: you have the right to file an objection to automated decision-making and profiling which has a legal or significant impact on you.
- Right to postpone or restrict the processing of personal data: you have the right to postpone or restrict the processing of your personal data in proportion to the purpose for which your personal data is processed.
- Right to claim for damage: you have the right to claim for and recover damages for our violation of processing your personal data.
- Right to acquire and use personal data: you have the right to acquire and/or use your personal data from us in a structured, commonly used and/or electronic system-readable format.
- Right to use and transmit personal data: you have the right to use and transmit your personal data to another personal data controller.
- Right to complain: you have the right to complain to the competent supervisory authority.
12.2 If you wish to exercise any of these rights, please contact us at [auxdatacompliance@auxgroup.com] in Indonesian or English.
12.3 The above rights may only apply in limited circumstances under the applicable law and if we decide not to respond to your claim for the above rights, we will explain the reason in writing. If you disagree with the decision, you have the right to report and lodge a complaint to the supervisory authority.
13. Children’s Data
The Website does not collect children’s data. If parents or legal guardians suspect that their children have provided us with personal data inadvertently, they may request such personal data be removed by contacting us at [auxdatacompliance@auxgroup.com] in Indonesian or English.
14. Data Security
14.1 We are committed to keeping your personal data secure. We take appropriate organizational and technical measures in accordance with applicable laws to ensure that your personal data is adequately protected against unauthorized access, loss, alteration, and unlawful disclosure.
14.2 In the case that a data incident occurs, we will take immediate actions to contain its impact and investigate the cause of the incident. If we are required to notify you or any supervisory authority under the applicable law, we will notify the relevant parties pursuant to the requirements.
15. Changes to this Policy
This Policy may be changed from time to time and we will notify you of the updated Policy by posting it on the Website.
16. Contact Us
If you have any questions about this Policy, including any requests to exercise your legal rights, please contact us at [auxdatacompliance@auxgroup.com] in Indonesian or English.