News

Law Number 27 of 2022 concerning Personal Data Protection (“Law 27/2022”) which was enacted on October 17, 2022 has been in effect since October 17, 2024 or 2 (two) years after the date of enactment. Therefore, we, PT Mitsubishi HC Capital and Finance Indonesia (“the Company”) are obliged to comply with Law 27/2022 along with all related regulations and implementing regulations that will exist from time to time in order to maintain confidentiality and ensure the personal data protection from personal data subjects (“Personal Data Subject”) in accordance with the prevailing laws and regulations.

This Privacy Policy and its amendments from time to time (“Privacy Policy”) explains how the Company processes Personal Data, including but not limited to obtaining, collecting, processing, analysing, storing, correcting, updating, transferring, disseminating, disclosing, deleting, and/or destroying your Personal Data (“Personal Data Processing”) through the use of the Company’s systems, participation in certain promotional programs or activities from the Company and/or third parties who collaborate or have legal relationships with the Company, both online and offline, and through other activities, services, products, and features provided in the Company’s systems, including matters related to employment (“Services”).

This Privacy Policy applies when you:

1. become a consumer and/or user of the Company’s Services; and/or
2. become (i) a business partner, supplier and/or vendor of the Company, (ii) have a legal relationship with the Company for a specific purpose, such as implementing social and environmental responsibility (Corporate Social Responsibility), and/or apply to become an employee of the Company.

By reading the Company's Privacy Policy, you declare that you have read, understood, and agreed to the provisions of this Privacy Policy. Thus, you further state and warrant:

1. regarding the authenticity, completeness, and accuracy of the Personal Data submitted to the Company; and
2. that you understand all provisions of the Privacy Policy and the Processing of Personal Data carried out by the Company based on the Privacy Policy.

The Company implements policies and best practices that aim to maintain and preserve the privacy and security of your Personal Data/Information in accordance with Law 27/2022, for data processing related to financing services from and by the Company, as well as staffing at MHCI.

The Company may change this Privacy Policy from time to time by updating the Privacy Policy page on the Company's website. Therefore, it is recommended that you check the Privacy Policy on the Company's website from time to time.

This Privacy Policy regulates the policies and practices implemented by the Company as the Data/Personal Information Controller in carrying out the Processing of Personal Data related to the Services.

As a Personal Data Subject, you have the right to:

1. Obtain information about the clarity of identity, the basis of legal interests, the purpose of the request and use of Personal Data/Information, and the accountability of the party requesting the Personal Data/Information.
2. Complete, update, and/or correct errors and/or inaccuracies in the Personal Data/Information about yourself in accordance with the purpose of processing the Personal Data/Information.
3. Obtain access and obtain a copy of the Personal Data/Information about yourself in accordance with the provisions of laws and regulations.
4. End the processing, delete, and/or destroy the Personal Data/Information about yourself in accordance with the provisions of laws and regulations.
5. Withdraw the consent to the processing of Personal Data/Information about yourself that has been given to the Company.
6. File an objection to the decision-making action that is only based on automated processing, including profiling, which has legal consequences or has a significant impact on the Personal Data Subject.
7. Delay or limit the processing of Personal Data/Information proportionally in accordance with the purpose of processing the Personal Data/Information.
8. Sue and receive compensation for violations of the processing of Personal Data/Information about yourself in accordance with the provisions of laws and regulations.
9. Obtain and/or use Personal Data/Information about yourself from the Company in a form that is in accordance with the structure and/or format commonly used or can be read by electronic systems.
10. Use and send Personal Data/Information about yourself to other Personal Data/Information Controllers, as long as the systems used can communicate securely with each other in accordance with the principles of Personal Data/Information Protection based on the provisions of laws and regulations.

In processing Personal Data/Information belonging to Personal Data Subject, the Company has the following purposes:

1. To implement the Principle of Recognizing Service Users and providing personalization to Personal Data Subject regarding the use of Services provided by the Company;
2. To implement laws and regulations;
3. To prevent misuse of Personal Data in the Company;
4. For the needs of processing Personal Data in order to produce Personal Data Subject profile data.

To support the Company's business activities, the Company will share your Personal Data/Information with but not limited to:

1. Company employees, management, consultants, agents and advisors, government institutions; and/or
2. other companies that have an affiliated relationship with the Company or other parties who at the time of accessing have reasonable grounds to view and use it in relation to the Services.

The Company is committed to storing your Personal Data/Information with the best protection for as long as necessary as long as it is needed to achieve the objectives, and while you are still using the Services, or as long as such storage is required or permitted in accordance with the Company's data retention policy and applicable laws and regulations in the Republic of Indonesia.

The Company will stop storing your Personal Data/Information, delete or remove immediately after reviewing the reasons or assumptions that the collection of such Personal Data/Information is no longer met with the storage of the related Personal Data/Information, and storage is no longer necessary for legal and business purposes.

We may change, supplement, and/or replace this Privacy Policy from time to time to ensure that this Privacy Policy is in line with the procedures and practices implemented by the Company in carrying out the Processing of Personal Data, including to comply with the provisions of prevailing laws and regulations