/ Legal
Legal
Company information
This section identifies the legal entity that operates GEI Tech Solution, as registered in Indonesia's Online Single Submission (OSS) system.
Registration
| Legal name | PT Grha Esport Indonesia |
|---|---|
| NIB | 1407220054349Business Identification Number, issued 14 July 2022, Jakarta, via OSS |
| Company type | Perseroan Terbatas (PT), domestic investment (PMDN) |
| Registered address | Jl. Tebet Utara I A No.27, RT.9/RW.1, Tebet Tim., Kec. Tebet, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12820 |
Contact
| admin@gei-techsolution.com | |
| Phone | +62 818 0274 4444 |
Privacy notice
This notice explains how GEI Tech Solution ("the Company") processes Personal Data of persons who visit this website, use its agent console or contact the Company. It is given under Law No. 27 of 2022 on Personal Data Protection ("PDP Law"). "Personal Data", "Data Subject", "Data Controller" and "Processing" have the meanings given in the PDP Law.
1. Data Controller
GEI Tech Solution is the brand of the operating entity identified in the Company information section above. The Company, through that entity, is the Data Controller of the Personal Data described in this notice.
Contact for all matters under this notice: admin@gei-techsolution.com.
Legal basis. The Company processes Personal Data under the PDP Law on the basis of legitimate interests (Article 20(2)(f)). The Processing is necessary to operate this website and to respond to enquiries, and the Company has weighed that need against Data Subjects' rights. The Company does not rely on consent. A Data Subject may ask the Company to explain how it weighed these interests.
2. Personal Data collected and purposes
Website visits. To deliver pages, the host receives the visitor's IP address, browser details and the requested page address. The Company has not enabled request logging and keeps no record of visits. The website uses no cookies, no analytics and no advertising. Address links open Google Maps, and Google's own terms apply once a link is followed.
Agent console. The /agent page is a live demonstration service run by the Company. It accepts no free text, only one of four fixed questions. To limit use to six runs per ten minutes per address, it reads the visitor's IP address and holds it in memory. At the start of each run it writes one log line containing the selected question and the IP address. The log line is kept so the Company can investigate faults or misuse of the service.
Enquiries. When a person emails or calls the Company, the Company receives what the person sends, for example name, email address, phone number and message. The Company uses it only to answer and follow up.
The Company collects Personal Data directly from the Data Subject. It takes no decision with legal or similarly significant effect on a Data Subject by automated Processing alone.
3. Retention
The Company keeps each category of Personal Data for the period set out below.
- Request data received by the host (IP address, browser details, page address)
- Held by Microsoft under the Microsoft Privacy Statement. The Company keeps no copy and cannot state a period.
- Agent console run limit (IP address)
- In memory only, until the service restarts
- Agent console run-start log (selected question, IP address)
- 30 days, then deleted
- Emails and call notes
- While the Company answers and follows up; deleted within 12 months of the last contact
The Company deletes or destroys Personal Data at the end of the period shown, or earlier where a Data Subject validly requests it and the law allows. Where an enquiry leads to an engagement, the related records are kept for the periods required by the applicable contract and tax laws.
4. Processors and transfers
Recipients. Microsoft hosts the website and the agent console and stores the console logs (Azure Static Web Apps, Azure Container Apps and Azure Log Analytics), and may process technical request data under its own privacy statement. Google hosts the Company's email (Google Workspace). The Company has no other recipients.
Transfers outside Indonesia. Processing takes place outside Indonesia: on Microsoft's global network for the website, in Singapore (Southeast Asia region) for the agent console and its logs, and by Google for email. The purpose is hosting and email. Google processes the Company's email under the Google Workspace terms, which include Google's Cloud Data Processing Addendum. The Personal Data involved is limited to network identifiers and the contents of enquiries, and is kept for the short periods set out in section 3.
Security. Pages are served over HTTPS only. Access to the hosting and to the logs is restricted to the Company's administrator accounts. Agent console logs are deleted after 30 days, and no record of visits is kept.
5. Data Subject rights
A Data Subject may:
- (a)obtain information on the Company's identity, legal basis, purposes and use of Personal Data;
- (b)access and obtain a copy of Personal Data;
- (c)complete, update or correct it;
- (d)ask to end Processing, or to have it deleted or destroyed;
- (e)ask to delay or restrict Processing;
- (f)object to a decision based solely on automated Processing that has legal or significant effect; and
- (g)claim damages for a breach of the PDP Law.
The exceptions in the law apply.
To exercise a right, write to admin@gei-techsolution.com stating who you are, which right you invoke and which Personal Data it concerns. The Company may verify identity by proportionate means and replies within the periods set by law.
A Data Subject may also report a concern to the authority for Personal Data protection under the PDP Law, or seek a remedy in court.
6. Changes
The Company may amend this notice. It publishes each change on this page before the change takes effect, and the version on this page is the version in force.