Privacy Policy

This Privacy Policy explains how Rinjani Trekking Center (“RTC”, “We”, “Us”, or “Our”) collects, uses, discloses, processes, stores and protects your Personal Data in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection (“PDP Law”).

By accessing or using www.rinjanitrekkingcenter.com (the “Site”) or booking our services, you acknowledge that you have read and understood this Privacy Policy.

1. Definitions

“Personal Data” means any data about an identified or identifiable individual, whether directly or indirectly.

2. Personal Data We Collect

We may collect the following categories of Personal Data:

• Full name
• Passport or ID details
• Nationality
• Date of birth
• Contact information (email, phone number, address)
• Emergency contact details
• Medical declarations relevant to trekking activities
• Payment information
• Travel preferences
• IP address, browser type, device information

Certain health-related information is collected strictly for safety and risk management purposes during trekking activities.

3. Legal Basis for Processing

We process your Personal Data based on one or more of the following lawful bases:

• Your explicit consent
• Performance of a contract (e.g., booking and tour services)
• Compliance with legal obligations
• Protection of vital interests (safety during trekking)
• Legitimate business interests that do not override your rights

4. Purpose of Processing

Your Personal Data is processed for purposes including:

• Managing bookings and reservations
• Ensuring trekking safety and emergency response readiness
• Customer communication
• Payment processing
• Compliance with Indonesian regulations
• Internal record keeping
• Marketing communications (with opt-out option)
• Improving website functionality and user experience

5. Data Retention

We retain Personal Data only as long as necessary for the purposes described above, including:

• Booking records: up to 5 years for legal and tax compliance
• Medical declarations: retained only as long as necessary for safety and liability purposes
• Marketing data: until consent is withdrawn

After retention periods expire, data will be securely deleted or anonymized.

6. Sharing and Disclosure

Your Personal Data may be shared with:

• Affiliated companies
• Licensed guides and operational teams
• Payment processors
• IT service providers
• Government authorities when required by law
• Emergency services if necessary for your safety

We ensure that third parties implement appropriate security safeguards.

7. Cross-Border Data Transfers

Your Personal Data may be transferred outside Indonesia where necessary for operational purposes. In such cases, we ensure:

• The recipient country has adequate data protection standards; or
• Contractual safeguards are implemented; or
• Your explicit consent is obtained.

8. Your Rights Under PDP Law

Under Indonesian PDP Law, you have the right to:

• Obtain information about data processing
• Access your Personal Data
• Request correction of inaccurate data
• Request deletion or destruction of data
• Withdraw consent at any time
• Object to certain processing activities
• Restrict processing under certain circumstances
• File complaints with the Indonesian supervisory authority

Requests may be submitted to: info@rinjanitrekkingcenter.com

9. Data Security

We implement technical, administrative, and physical safeguards to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

10. Personal Data Breach

In the event of a Personal Data breach, we will notify affected individuals and relevant authorities in accordance with PDP Law requirements.

11. Cookies

Our Site uses cookies to enhance user experience and analyze website traffic. You may disable cookies in your browser settings; however, some features may not function properly.

12. Children’s Data

We do not knowingly collect Personal Data from individuals under 15 years of age without parental or guardian consent.

13. Automated Decision-Making

We do not use automated decision-making systems that significantly affect users without human involvement.

14. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be published on this page with the revised effective date.

15. Contact Information

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:

Data Protection Officer
Rinjani Trekking Center
Email: info@rinjanitrekkingcenter.com