Privacy Notice
PT Bank Danamon Indonesia Tbk

Updated on: August 27th, 2024

INTRODUCTION

This Privacy Notice provides You with information about how PT Bank Danamon Indonesia Tbk (“Bank Danamon”) processes your Personal Data as a form of Bank Danamon's commitment and compliance with applicable personal data protection provisions.

Bank Danamon is always committed to process all personal data and/or information obtained by Bank Danamon from any party and in any form, in accordance with applicable regulations in the Republic of Indonesia.

Bank Danamon will update this privacy notice from time to time. You can find the date of the latest version stated at the beginning of this privacy notice. If You have any questions or concerns regarding your personal data, please contact us (You can find our details in the 'HOW TO CONTACT US' section below).


ABOUT BANK DANAMON

Bank Danamon is a banking financial services institution (which also has a Sharia Unit). You can accessed further information about Bank Danamon through the following link: https://www.danamon.co.id/id/Tentang-Danamon.


TYPES OF PERSONAL DATA THAT BANK DANAMON COLLECTS ABOUT YOU

The information Bank Danamon collects about You and how it processes it may vary depending on the products and services You use, how You have used those products and services, and how You interact with Bank Danamon.

Personal Data that Bank Danamon collects can be in the following form: 

  1. Personal Data of individuals including, but not limited to: 
    1. general personal data, including:
      full name; place and date of birth, national identification number, registered address, residential address, telephone number, email address, sex, nationality, religion, marital status, mother's maiden name, Taxpayer Identification Number, identity of family members, educational background, occupation, photos or videos, signatures, voice recordings; and 
    2. specific personal data, including biometric data such as fingerprint and retinal records, criminal records, information in any form related to the individual's finances.
  2. Corporate personal data including, but not limited to: 
    1. general data, including name, address, telephone number, composition of the Board of Directors and Board of Commissioners, information related to shareholders, data on employees of the entity, all information in the identity card (and/or residence permit) of the Board of Directors, Board of Commissioners, and shareholders; and 
    2. specific data, such as corporate financial data.

IF YOU PROVIDE INCOMPLETE DATA

For the purpose of providing services and customer satisfaction, Bank Danamon may need your Personal Data. When Bank Danamon needs to collect Personal Data and You choose not to provide such Personal Data or provide incomplete Personal Data, Bank Danamon may not be able to provide services and execute contract that exist or are in the process of being agreed by You with Bank Danamon. 


HOW BANK DANAMON OBTAINS YOUR PERSONAL DATA

Bank Danamon may obtain your Personal Data in printed form or in electronic form through: 

  1. You
    When You submit your Personal Data directly to Bank Danamon, either through officers at branch offices, marketing personnel, applications, pages, systems, networks, media, events organized by Bank Danamon, and other channels provided by Bank Danamon.

  2. Other Parties
    Based on an agreement that You have previously given to other party to be able to provide your Personal Data to Bank Danamon. Bank Danamon can use such Personal Data according to the purposes set out at the time You gave the relevant consent.

Bank Danamon has specified the scope or list of Personal Data required to enable Bank Danamon to provide services or make certain agreements with You, including to fulfill matters required by applicable laws and regulations. 


HOW BANK DANAMON USES YOUR PERSONAL DATA

Bank Danamon will only process your Personal Data in accordance with the lawful basis for processing Personal Data by taking into account the applicable provisions, including: 

  1. fulfillment of obligations based on an agreement between You and Bank Danamon;
  2. fulfillment of legal obligations in accordance with the prevailing laws and regulations;
  3. fulfillment of the protection of your vital interests;
  4. fulfillment of duties in the context of public interest or public services based on the prevailing laws and regulations;
  5. fulfillment of other legitimate interests, including Bank Danamon's internal interests by taking into account the objectives, needs; and
  6. consent that You explicitly give for a specific purpose.

Bank Danamon may conduct Personal Data Processing for the purpose of: 

  1. providing services (including processing of requests) or the use of Bank Danamon's infrastructure; 
  2. processing of employment relationship;
  3. processing of certain agreements or arrangements; and/or  
  4. other purposes of a commercial or non-commercial nature.

Bank Danamon will conduct Personal Data Processing for the purpose of, including: 

  1. If You use Bank Danamon's services or infrastructure (including Customers and Prospective Customers):
    1. providing Bank Danamon’s services;
    2. ensuring the fulfillment of your rights and obligations and Bank Danamon in accordance with the arrangements You entered with Bank Danamon, including but not limited to providing access to your Personal Data to certain work units or officers at Bank Danamon for the purpose of coordination and implementation;
    3. conducting an analysis of eligibility for providing credit facilities or providing products and/or services to You;
    4. commercial purposes, with reference to the separate consent You provide:
      1. Bank Danamon may contact You through your personal communication media during Bank Danamon's operating hours to offer products and/or services provided by Bank Danamon;
      2. Bank Danamon and/or other parties cooperating with Bank Danamon may contact You to offer products that are a collaboration between Bank Danamon and such other parties; and/or
    5. non-commercial purposes, including for security purposes (in accordance with applicable standards in practice) or to conduct data analytic activities on Personal Data (which does not have a commercial purpose to offer certain products and/or services to You), and other purposes.
  2. If You are in an employment relationship with Bank Danamon (including Employees and Prospective Employees):
    1. selection process to determine if your job application will be accepted;
    2. employee data recording for personnel purposes;
    3. prevention and/or handling of fraud;
    4. employee development programs through certification or training activities;
    5. tax reporting; and/or
    6. health insurance.
  3. If You enter into an agreement with Bank Danamon (including Vendors):
    1. selection process to determine if your offer will be accepted;
    2. Bank Danamon's internal analysis and monitoring process to assess your performance;
    3. to process payment for the products and/or services that You provide to Bank Danamon;
    4. prevention of bribery and/or corruption; and/or
    5. audio and visual recording as required in connection with your products and/or services.
  4. Other purposes:
    1. fulfill the provisions related to the implementation of anti-money laundering programs, prevention of terrorism financing, and prevention of funding the proliferation of weapons of mass destruction in the financial services sector;
    2. compliance and fulfillment of requests for reports or information from authorized agencies, regulators or institutions in accordance with applicable legal provisions;
    3. enforcing the rights of Bank Danamon in the dispute resolution process, both in and out the court;
    4. enforcement of court decisions, arbitration or other dispute resolution institutions that have become legally binding;
    5. detect and prevent actions or acts that violate applicable legal provisions;
    6. internal and external audits with due regard to the scope of Personal Data in accordance with the purpose of the audit;
    7. business strategy preparation and/or planning or other corporate actions to be carried out by Bank Danamon; and/or
    8. exploring potential collaboration of business activities with other entities in within the group of financial institutions that includes Bank Danamon.

Bank Danamon, in accordance with the prevailing laws and regulations, may also: 

  1. conduct Personal Data Processing of children under the age of eighteen and persons with disabilities by referring to the separate consent of the parents or guardians of the Personal Data owner;
  2. transfer your Personal Data to other parties outside the territory of Indonesia for processing purposes as described in a to d above and/or in the course of disclosing your Personal Data as described in this privacy notice; and/or
  3. conduct Personal Data Processing of the beneficial owner of your account if You acknowledge that You have no income and/or are the power of attorney holder of your account.

FOR HOW LONG DOES BANK DANAMON PROCESS YOUR PERSONAL DATA

Bank Danamon will store Personal Data that has been collected as long as You are still using Bank Danamon's services/infrastructure or in the process of being or being registered as a Customer/ Employee/ Vendor of Bank Danamon.

Your Personal Data will be stored in any form and media, both at Bank Danamon's premises and at the premises of other parties appointed by Bank Danamon (to conduct storage) according to the document storage period by referring to Bank Danamon's internal policies or in accordance with applicable laws and regulations.

For the purpose of such storage, Bank Danamon determines the document retention period by considering: 

  1. the type, level of complexity and period of service or engagement that You make or conduct with Bank Danamon;
  2. the obligation to retain certain types of documents stipulated by applicable laws and regulations; and
  3. evidentiary interests in the trial or litigation process.

Bank Danamon will delete and destroy documents containing Personal Data in accordance with the provisions of the document retention period as described above. 

In the event that Bank Danamon shares your Personal Data with authorized government institutions and/or other institutions that can be appointed by the authorized government or have cooperation with Bank Danamon, the storage of your Personal Data by the relevant institutions will follow the data storage policies of each of these institutions. 


PROTECTION OF YOUR PERSONAL DATA

Personal Data Protection is one of the main focuses of Bank Danamon in carrying out its business activities. Bank Danamon will continue to strive to implement better Personal Data Protection measures from time to time by taking into account the prevailing standards of practice in similar industries.

Bank Danamon's efforts in maintaining the security of Personal Data are outlined in Bank Danamon's internal policy documents made with regard to applicable regulations and practices generally applicable in similar industries.

You as the owner of the Personal Data must play an active role and make the necessary efforts to protect the security of your Personal Data, including by only accessing pages or downloading applications from verified sources, updating applications from time to time, maintaining user identity security, not sharing your password with other parties, storing documents containing your Personal Data in a safe place, backing up your Personal Data and other security measures. You are also required to immediately report to Bank Danamon if You find indications of a violation of the unauthorized use of your Personal Data. 


DISCLOSURE OF YOUR PERSONAL DATA TO OTHER PARTIES

In carrying out the Personal Data Processing for the purpose above, Bank Danamon may share Personal Data by appointing other parties to: 

  1. contact You to obtain information or documents required by Bank Danamon;
  2. respond to certain questions or requests from You;
  3. preparation of a documentation that is required to fulfill certain formalities based on laws and provisions;
  4. preparation of Personal Data security mechanisms;
  5. obtaining independent opinions from consultants, advisors or auditors in certain fields;
  6. conducting eligibility analysis and historical analysis required for the providing products and/or services or entering into certain arrangements with You;
  7. retention of Personal Data, both retention of printed documents and retention of electronic documents;
  8. validating authorized signatories;
  9. sending documents or information through delivery services;
  10. printing of attributes and/or publications that need to be used to carry out the engagement between You and Bank Danamon, which inherently contains certain Personal Data;
  11. giving prizes for programs organized by Bank Danamon in the form of products owned by other parties whose delivery requires Personal Data;
  12. organizing an event;
  13. providing a certain benefits or facilities that have been agreed between Bank Danamon and You; and/or
  14. other purposes involving disclosure of your Personal Data to other parties.

Bank Danamon will disclose your Personal Data to the party appointed to do the above. The party acts on behalf of Bank Danamon as a Personal Data Processor.

In appointing the Personal Data Processor, Bank Danamon determines the purpose and exercises control of processing and establishes the confidentiality obligations of Personal Data for activities carried out by the Personal Data Processor. Arrangements regarding the processing of Personal Data (including recording activities, confidentiality, security measures, and reporting if there is a breach) are set out in a written agreement made between Bank Danamon and the Personal Data Processor.

The identity of the Personal Data Processor can be found, among others, in letters/ publications/ pages / forms / documents / agreements that explain the services You use and certain agreements / agreements You enter into with Bank Danamon or will be delivered to You directly (if You are contacted). 


YOUR RIGHTS TO YOUR PERSONAL DATA

With reference to the prevailing laws and regulations and internal policies established by Bank Danamon, your rights (as a Personal Data Subject) are as follows:  

  1. Right to Information
    You have the right to obtain information about the identity clarity, basis of legal interests, purpose of requests and the use of your Personal Data by Bank Danamon, in a form that is in accordance with the structure and / or format commonly used or can be read by electronic systems. 

  2. Right to Update Personal Data
    You have the right to request Bank Danamon to complete, update, and/or correct errors and/or inaccuracies in your Personal Data. This can be done by including detailed information and supporting documents related to the Personal Data concerned.

  3. Right to Access Personal Data
    You have the right to access and obtain a copy of your Personal Data obtained by Bank Danamon. This will be done based on a written request from You and subject to the terms of service of Bank Danamon (including but not limited to the imposition of fees).

  4. Right to Delete Personal Data
    You have the right to end processing, delete, and/or destroy your Personal Data. This is done by taking into account the deletion criteria set by Bank Danamon and the applicable laws and regulations.

  5. Right to Withdraw Consent
    You have the right to withdraw consent to the processing of your Personal Data that has been given to Bank Danamon. The withdrawal of consent is binding on You and Bank Danamon since the process of withdrawing consent has been completed and becomes effective.

  6. Right to File an Objection
    You have the right to object to decision-making actions based solely on automated processing, including profiling, which have legal consequences or have a significant impact on You. This can be done by submitting a written objection to Bank Danamon. For such objections, there are consequences where Bank Danamon services cannot be carried out optimally.

  7. Right to Restrict or Object to Personal Data Processing
    You have the right to delay or limit personal data processing proportionally in accordance with the purpose of personal data processing. This may be done by providing the desired limitation information clearly and in writing to Bank Danamon. For such objections, there are consequences where Bank Danamon services cannot be carried out optimally.

DEFINITIONS

In this privacy notice: 

  1. “You” are parties who will, are or have: (a) using Bank Danamon's services or infrastructure (including prospective Customers or Customers); (b) in the process of employment (including prospective Employees or Employees); (c) entering into certain agreements with Bank Danamon (including vendors); who have provided Personal Data.
  2. “Personal Data” means data regarding individuals who are identified or can be identified individually or in combination with other information either directly or indirectly through electronic or non-electronic systems (as referred to in the provisions on the protection of personal data) or data and/or information about consumers (as referred to in the provisions on consumer protection).
  3. “Employee” means an individual who has an employment relationship with Bank Danamon.
  4. “Customer” means parties, whether individuals or corporations that use products and/or services provided by Bank Danamon. 
  5. “Personal Data Processing” means a series of processes including the acquisition and collection, filtering and analysis, storage, fixes and updates, display, announcement, transfer, dissemination, or disclosure, and/or deletion or destruction of Personal Data. 
  6. “Personal Data Processor” means every person, public agency, and international organization that act individually or jointly in Personal Data processing on behalf of Bank Danamon.

HOW TO CONTACT US

If You have further questions in regard to this privacy notice, You can contact Bank Danamon via Hello Danamon (1-500-090) or via email at hellodanamon@danamon.co.id