In accordance with the Personal Data Protection Law and The Institute of Internal Auditors (IIA) Global Policy, the confidentiality of Personal Information is of paramount importance to IIA Indonesia. IIA Indonesia is committed to protecting and respecting the privacy of users (‘You’) when accessing and using applications and websites managed by IIA Indonesia (hereinafter ‘We’).
This Privacy Policy sets out the basic foundation of how We use personal information that We collect and/or you provide (‘Personal Information’). This Privacy Policy applies to all users of the IIA Indonesia website unless set out in a separate Privacy Policy. Please read Our Privacy Policy carefully so that you can understand Our approach and how We use the information.
This Privacy Policy covers the following matters:
- Personal Information We May Collect
- Use of Personal Information
- Disclosure of Personal Information
- Retention of Personal Information
- Your Rights
- Cookies Policy
- Acknowledgement and Consent
By visiting and/or registering for an account on Our site, you accept and agree to the approach and methods described in this Privacy Policy.
A. PERSONAL INFORMATION WE MAY COLLECT
We may collect Personal Information in the form of:
- Information that you provide. You may provide information through electronic forms on Our site as well as by corresponding by telephone, electronic mail, and so on. This information includes information you provide when registering for membership, training, certification programmes or IIA Indonesia events and activities, renewing membership subscription to our services, searching for products, participating in online discussions or other social media functions on our site, or surveys, as well as when you need service assistance and report problems to us. The information you provide may include your name, address, e-mail address, telephone number, personal description, photograph, and other data. We may ask you to verify the information you provide, to ensure the accuracy of the information.
- Information we collect. For each of Your visits to Our site, We may collect the following information automatically:
- Technical information, including the Internet Protocol address (IP address) used to connect Your computer to the internet, Your log in information, type and version of browser used, time zone setting, type and version of browser plug-ins, operating system and platform;
- Information about Your visit, including a complete list of Uniform Resource Locators (URLs) visited to, through, and from Our Platform (including date and time); products You viewed or searched for; page response times, download issues, length of visit on a particular page, page interaction information (such as scrolling, clicking, or mouse movements), methods used to leave the site, and phone numbers used to contact Our customer service.
- Your grades and certification data, including but not limited to your exam results obtained through IIA Global’s CCMS programme and other data.
- Payment data that you enter on our website including credit/debit card number, bank account number, mobile phone number and other data required to process your payment.
- Information we receive from other sources. We may receive information if you use other sites that we operate or other services that we and IIA Global provide. We also work with third parties (including, but not limited to for example, business partners, sub-contractors in technical services, payment and delivery services, advertising networks, analytics providers, information search providers and credit reference agencies) (‘Our Partners’) and may receive information from them. We will take steps within reasonable limits to verify the information We obtain from other sources in accordance with the Applicable Regulations.
B. USE OF PERSONAL INFORMATION
We use Personal Information in the following ways:
- Information that you provide. We will use this information:
- to perform Our obligations to provide information, products and services to You;
- to provide information regarding other products and services that We offer; to provide You, or allow third parties to provide You, information about products and services that We consider may interest You. If You are an existing customer, We may contact You electronically or by other means with information about Our products and services. If You are a new customer, and where We authorise third parties to use Your Personal Data, We (or they) may contact You electronically only if You have provided consent.
- to notify You of changes to Our services;
- to ensure that the content of Our site is presented in the most effective way for You.
- Information we collect. We will use this information:
- to improve our service to you
- to improve our site management and internal operations, including troubleshooting, data analysis, testing, research, and other statistical and survey purposes
- to improve Our site so that content is ensured to be presented in the most effective way for You
- to enable you to participate in interactive features of Our services, when you wish
- as part of our efforts to ensure the safety and security of Our Platforms
- to measure and understand the effectiveness of advertising that We do to You and other parties, and present information on activities, products and services that are relevant to You
- to provide input and recommendations to You and other users on Our Platform regarding products and services that can interest You and them
- Information that We receive from other sources. We may combine information We receive from other sources with information provided by You and information We collect. We may use this information or the combined information for the purposes set out above (depending on the type of information We receive).
C. DISCLOSURE OF PERSONAL INFORMATION
We may share or disclose Personal Data with IIA Global and Our affiliates.
We may share Personal Data with third parties, including:
- Partners, IIA Indonesia affiliates, suppliers and sub-contractors in the performance of contracts We enter into with them or you.
- Advertisers and ad networks who need the data to select and offer relevant adverts to you and other users. In accordance with IIA Global’s policy, we will not provide information about identifiable individuals, but We may provide them with general information about Our users, We may also provide information to assist advertisers in reaching specific target audiences. We may use the personal data that We collect to fulfil advertisers’ requests by displaying their advertisements to such target audiences with due regard to the provisions of the PDP Law and IIA Global Policy.
- Analytics and search engine providers who help us to improve and optimise our site.
We may disclose information to third parties:
- If We are under a duty to disclose or share data in order to comply with legal obligations and other agreements
- As an affiliate of IIA Global, in accordance with applicable provisions we may disclose information to IIA Global subject to applicable provisions.
D. STORAGE OF PERSONAL INFORMATION
All personal information that you provide to us is stored on a secure server. All payment transactions on Our site will be encrypted. By submitting Your Personal Information on the site, You agree to the transfer, storage, and processing that occurs on Our Site. We will take steps within the limits of reasonableness necessary to ensure that the Personal Information is treated securely and in accordance with the Privacy Policy and Applicable Regulations.
All Personal Information that You provide will be stored by Us: (i) as long as You are still Our user/member and (ii) at least 5 (five) years from the date on which You stop using Our services; or (iii) in accordance with the original purpose of collecting such Personal Information.
In situations where We provide (or You choose) a password that allows You to access certain parts of Our site, You are responsible for keeping this password confidential. We ask that you do not share your password with anyone. We do not know your password so you can only reset your password on your site.
Please note that the transmission of information via the internet is not completely secure. Nevertheless, We will do our best to protect the Personal Information. We cannot guarantee the security of data transmitted to Our Platform; the risk of any transmission is your responsibility. Once We receive Your Personal Information, We will use strict procedures and security features to prevent unauthorised access.
E. YOUR RIGHTS
You may request the deletion of Your Personal Information on the site or withdraw Your consent to any or all collection, use or disclosure of Your Personal Information by providing Us with reasonable notice in writing via the contact details listed on this Privacy Policy. Depending on the circumstances and the nature of your request, you should understand and acknowledge that upon such withdrawal of consent or request for erasure, you may no longer be able to use the site. Withdrawal of your consent may result in the termination of your Account or your contractual relationship with us, with all rights and obligations arising fully subject to fulfilment. After receiving notice to withdraw consent for the collection, use or disclosure of your Personal Information, We will inform you of the possible consequences of such withdrawal so that you can decide whether you still want to withdraw consent or not.
You may ask Us to access and/or correct your Personal Information that is in our possession and control, by contacting us at info@iia-indonesia.org.
Our Site may, from time to time, contain links to and from sites belonging to the IIA Global network, partners, advertisers and other affiliates. If You follow a link to any of those sites, please note that those sites have their own Privacy Policies and that We are not responsible or liable for those policies. Please check those policies before you submit any information to those sites.
F. COOKIES POLICY
When You access the Site, We may place a number of cookies on Your browser. Cookies are small digital files of letters and numbers that We store on your browser or computer hard drive with your consent. Cookies contain information that is transferred to your computer’s hard drive.
Cookies may be used for the following purposes: (1) enabling certain functions, (2) providing analytics, (3) storing your preferences; and (4) enabling the delivery of advertising and behaviour-based advertising. Some of these cookies will only be used if you use certain features, or select certain preferences, while others will always be used.
We use cookies for the following reasons:
- Cookies are necessary for the operation of Our site which allows Us to recognise and count the number of visitors and see how visitors interact with Our site while they are using it. This helps Us improve the way Our site works, for example, by ensuring users find what they are looking for easily.
- Cookies are used to recognise You when You return to Our site. This allows Us to personalise Our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
- Cookies record Your visits to Our Site, the pages You have visited and the links You have followed. We will use this information to make Our Platform and the adverts placed on it more relevant to your interests. We may also share this information with third parties for such purposes.
Please note that third parties (including, for example, advertising networks and external service providers such as web traffic analysis services) may also use these Cookies, over which We have no control. You can delete Cookies by performing the clear data function on your web browser which allows you to refuse the setting of all or some Cookies. However, You may not be able to access all or part of Our site.
G. ACKNOWLEDGEMENT AND CONSENT
By agreeing to the Privacy Policy, You acknowledge that You have read and understood this Privacy Policy and agree to its terms. In particular, you agree and consent to us collecting, using, sharing, disclosing, storing, transferring or processing your Personal Information in accordance with this Privacy Policy.
In the event that You provide Personal Information relating to another individual (for example Personal Information relating to Your spouse, family member, friend, or other party) to Us, then You represent and warrant that You have obtained consent from such individual for, and hereby consent on behalf of such individual to, Our collection, use, disclosure and processing of their Personal Information.
