プライバシーポリシー

1. Introduction

Awanio is committed to protecting your personal data. This privacy policy (“Privacy Policy”) explains how Awanio collects, uses, stores, shares and protects personal data. Personal data is information that relates to you and may identify you as an individual. We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (the “PDP Law”) and other applicable laws. To ensure compliance and to align with Awanio’s values around trust and transparency we have a team of privacy champions responsible for continuously implementing our privacy program.

Who we are

This Privacy Policy applies to PT Awan Komputasi Teknologi, an Indonesian corporation with headquarters in Jakarta, and its affiliated subsidiaries (collectively, “Awanio,” or “we”, “us”, “our”). For the personal data described in this Privacy Policy, Awanio acts as the personal data controller. We partner with distributors and system integrators across the globe.

What we do

Awanio’s mission is to improve the capabilities of the local cloud ecosystem so that it exceeds global competitiveness. To achieve our mission we enter into agreements with:

• distributors who want to help grow the Awanio ecosystem;
• system integrators that support implementing Awanio products at the customer site.

How to contact us

We regularly review our compliance with this Privacy Policy. Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed in the first instance to privacy@awan.io or by mail to PT Awan Komputasi Teknologi, Ashta District 8, Treasury Tower, Floor 16, Jl. Jend. Sudirman Kav. 52-53, SCBD, Kebayoran Baru, South Jakarta 12190, Indonesia, Attn: Privacy Questions. If Awanio does not satisfactorily answer your questions or concerns, you may also contact the following for advice, support or complaints:

• Awanio’s Data Protection Officer (“DPO”) at privacy@awan.io.
• The personal data protection authority established under the PDP Law. Awanio is registered as a private-scope Electronic System Provider (Penyelenggara Sistem Elektronik Lingkup Privat) with the Ministry of Communication and Digital Affairs of the Republic of Indonesia under Business Identification Number (Nomor Induk Berusaha, NIB) 9120100833015. The registration can be verified by searching for this number in the Electronic System Provider registry.

Language

This Privacy Policy is published in Indonesian and English. If there is any inconsistency between the two versions, the Indonesian version prevails.

2. Definitions

Parts of this Privacy Policy depend on how you interact with Awanio. You are a Site Visitor, a Business Partner, or both:

• SITE VISITORS: You are a Site Visitor when you visit and interact with our websites, web pages, interactive features, blogs and their respective contents at awan.io and its subdomains (“Our Sites”), including when you submit our contact form.
• BUSINESS PARTNERS: You are a Business Partner when you engage with Awanio on behalf of the company you work for, for example as a customer, prospective customer, distributor or system integrator, including when you register for or use Awanio products and services such as the Awanio Cloud Enabler Platform.

• SERVICE means the https://awan.io website operated by PT Awan Komputasi Teknologi.
• PERSONAL DATA means data about an identified or identifiable individual individually or in combination with other information either directly or indirectly through electronic or non-electronic systems.
• USAGE DATA is data collected automatically, generated either by the use of the Service or by the Service infrastructure itself (for example, the duration of a page visit).
• COOKIES are small files stored on your device (computer or mobile device).
• BROWSER STORAGE means the local storage and session storage facilities of your web browser, which let a website keep small amounts of information on your device.
• DATA CONTROLLER means any person, public body and international organization acting individually or together in determining the purposes and exercising control of the processing of Personal Data.
• DATA PROCESSORS (OR SERVICE PROVIDERS) means any person, public body and international organization acting individually or jointly in the processing of Personal Data on behalf of a Personal Data Controller.
• PERSONAL DATA SUBJECT is an individual to whom Personal Data is attached.
• THE USER is the individual using our Service. The User corresponds to the Personal Data Subject, who is the subject of Personal Data.

3. Personal Data We Collect

Contact form

When you contact our sales team through the form on our website, we collect your name, business email address, company name, and the message you write. We accept business email addresses only, because the form is intended for enterprise inquiries. We use this information to respond to your inquiry, arrange demonstrations or discussions you request, prepare proposals, and manage our business relationship with you. The information is stored in our customer relationship management (CRM) system and is accessed only by the Awanio teams that handle your inquiry.

Marketing attribution information

When you submit the contact form, we also receive information about how you arrived at our website: the campaign parameters in the link you followed (such as utm_source, utm_medium, utm_campaign, utm_term and utm_content), the address of the page on which you first landed, the address of the page on which you submitted the form, and a lead source label derived from this information (for example, “LinkedIn Ad” or “Google Organic”). This information is stored with your inquiry in our CRM system. We use it to understand which of our channels bring inquiries. We do not use it for advertising, we do not share it with advertising platforms, and we do not use it to make decisions about you.

Technical and security data

When you visit our website, our hosting and security provider processes technical data that is necessary to deliver the website and protect it from abuse, such as your IP address, browser and device information, the pages you request, and the time of each request. When you submit the contact form, we use your IP address to limit repeated submissions from the same connection and we run automated checks to filter out spam. Your IP address is held only temporarily in memory for this purpose and is not stored in our CRM system.

Customer and partner engagements

When you engage with us as a Business Partner, for example in partnership discussions or when we plan the deployment of Awanio products to your servers, we collect business contact details such as your name, job title, business email address and phone number, together with information about your technical environment that we need to plan and deliver the installation. We use this information only for that engagement, and it is accessed only by the Awanio teams involved in it.

Cookies and browser storage

Our website does not use cookies for analytics or advertising, and it does not load third-party tracking technologies such as analytics tags or advertising pixels. Our hosting and security provider may set strictly necessary cookies when this is required to protect the website against malicious traffic.

Our website uses browser storage on your device for two purposes:

1. Display preference. We remember whether you prefer the light or dark theme.
2. Visit attribution. We record the page on which you first landed, the campaign parameters described above, the lead source label, the address of the external page that referred you to our website, and the times of your first and most recent visits. This information stays on your device. Only the campaign parameters, the landing page address and the lead source label are sent to us, and only if you submit the contact form; the referring page address and the visit times are never sent. Advertising click identifiers that may appear in links (such as gclid or fbclid) are read only to recognize the source of your visit and are not stored.

Information in browser storage remains on your device until you delete it. You can delete it at any time by clearing the site data for awan.io in your browser settings.

Legal basis

We process personal data on the following legal bases under Article 20(2) of the PDP Law:

• your consent, when you submit the contact form or otherwise ask us to contact you;
• the performance of an agreement with you, or fulfilling your request before entering into an agreement, when we respond to your inquiry or carry out a customer or partner engagement;
• our legitimate interests, when we protect our website against abuse and when we analyze which channels bring inquiries, taking into account the balance between our interests and your rights.

Data storage: duration

We will delete the personal data we received from you either as soon as it is no longer required to fulfil the purpose for which it was collected, as soon as your concern has been dealt with in full and no further communication with you is necessary, or if you ask us to delete it, unless we are required by law to retain it for longer.

Objection

You can contact our Data Protection Officer at any time to request deletion of the data related to your inquiry (see the “How to contact us” section for contact details). However, this might also mean that we cannot fully deal with your concern.

4. Contact

We also collect your personal data when you yourself give your approval to do so, for example when you want us to contact you. Personal data provided in this manner is used solely for the purpose intended: establishing contact.

These details are provided voluntarily and, in these cases, are initiated by you yourself. Provided the details supplied are details of communication channels (such as email address or phone number), we will use these channels to contact you to deal with your concerns.

5. Security

Awanio has a dedicated security team. We maintain tight controls over the personal data we collect, retaining it in firewalled and secured databases with strictly limited and controlled access rights, to ensure it is secure. Information you submit through our website is transmitted over encrypted connections (HTTPS). Please contact us for more information.

Business Partners have access to certain password-protected features of the Awanio Cloud Enabler Platform. Business Partners are responsible for keeping this password confidential and for ensuring the same for their employees and/or their agents. Please remember that, unfortunately, the transmission of information via the internet is never completely secure. A common Internet scam is known as “spoofing” or “phishing.” This occurs when you receive an email from what appears to be a legitimate source requesting personal data from you. Please be aware that we will not send you any emails requesting you to verify credit card, bank information, or any other personal data. If you ever receive an email that appears to be from us requesting such information from you, do not respond to it, and do not click on any links appearing in the email. Instead, please forward the email to us at privacy@awan.io, as we will investigate instances of possible Internet fraud.

6. Sharing and Data Transfers Outside Indonesia

We do not sell personal data, and we do not share it with advertising platforms. We share personal data only with service providers that process it on our behalf and under our instructions, namely providers of website hosting, content delivery and network security services, and of the infrastructure on which our CRM system runs. These service providers are bound by contractual obligations to protect the data. We may also disclose personal data where required by law or by a lawful request of a competent authority.

Our website is delivered through a global content delivery network. As a result, your requests to our website and the information you submit through it may be processed in data centers outside Indonesia, such as in Singapore. Where personal data is transferred outside Indonesia, we do so in accordance with Article 56 of the PDP Law: we ensure that the country of the recipient has a level of personal data protection equal to or higher than that provided under the PDP Law, or, where it does not, that adequate and binding safeguards are in place, or, where neither applies, we obtain your consent.

7. Your Data Protection Rights Under the PDP Law

As a Personal Data Subject, you have data protection rights under the PDP Law. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at privacy@awan.io. In accordance with the PDP Law, you have the following data protection rights:

1. right to obtain information about the clarity of identity, the basis of legal interests, the purpose of the request and use of Personal Data, and the accountability of the party requesting Personal Data;
2. right to complete, update, and/or correct errors and/or inaccuracies of Personal Data about him/her in accordance with the purposes of processing Personal Data;
3. right to access and obtain a copy of Personal Data about him/her in accordance with the provisions of laws and regulations;
4. right to end the processing, delete, and/or destroy Personal Data about him/her in accordance with the provisions of laws and regulations;
5. right to withdraw the consent to the processing of Personal Data about him/her that has been given to the Personal Data Controller;
6. right to object to decision-making measures based solely on automated processing, including profiling, that give rise to legal consequences or have a significant impact on the Personal Data Subject;
7. right to delay or restrict the processing of Personal Data in proportion to the purposes for which the Personal Data is processed;
8. right to sue and receive compensation for violations of the processing of Personal Data about him/her in accordance with the provisions of laws and regulations;
9. right to obtain and/or use Personal Data about him/her from the Personal Data Controller in a form that is in accordance with the structure and/or format commonly used or readable by electronic systems;
10. right to use and send Personal Data about him/her to other Personal Data Controllers, as long as the systems used can communicate with each other securely in accordance with the principles of Personal Data Protection under the PDP Law.

Please note that we may ask you to verify your identity before responding to such requests, and that we may not be able to provide the Service without some necessary data. You also have the right to lodge a complaint about our collection and use of your Personal Data with the personal data protection authority established under the PDP Law.

We may change this Privacy Policy from time to time. When we do, we will update the date at the top of this page, and for material changes we will place a prominent notice on our website. You should check back here periodically to see whether this Privacy Policy has been updated.

8. Children’s Privacy

None of our services are directed at children under 18 years of age, and we do not knowingly collect personal data from them. Under the PDP Law, personal data of children is specific personal data whose processing requires the consent of a parent or guardian. If we become aware that we have collected personal data from a child under the age of 18 without such consent, we will make reasonable efforts to delete that information from our records.

9. Specific Personal Data

We do not intentionally collect specific personal data as defined in Article 4(2) of the PDP Law, such as health information, biometric or genetic data, criminal records, children’s data, or personal financial data. Please do not include such information in the messages you send us.