1. General Provisions
This Privacy Policy defines the procedure for processing personal data and the measures to ensure their security, implemented by PT Avalon Bali Group (hereinafter referred to as the Operator).
1.1. The Operator’s primary goal is to respect the rights and freedoms of individuals when processing their personal data, including the protection of their privacy, personal, and family secrets.
1.2. This Privacy Policy (hereinafter referred to as the Policy) applies to all information the Operator may receive about visitors to the website https://avalonbali.com/.
2. Key Definitions Used in the Policy
2.1. Automated processing of personal data — processing performed using computer technology.
2.2. Blocking of personal data — temporary cessation of data processing (except when processing is necessary for clarification purposes).
2.3. Website — a collection of graphic and informational materials, as well as computer programs and databases, ensuring their accessibility on the internet at https://avalonbali.com/.
2.4. Personal data information system — a database and the technological and technical tools used to process the data.
2.5. Depersonalization of personal data — actions making it impossible to identify a specific user without additional information.
2.6. Processing of personal data — any action or set of actions performed with personal data, including collection, recording, storage, retrieval, use, transmission, deletion, and destruction.
2.7. Operator — an organization that processes personal data and determines the purposes of such processing.
2.8. Personal data — any information directly or indirectly related to the User of the website https://avalonbali.com/.
2.9. Personal data made publicly available by the subject — data that is accessible to an unlimited number of people with the subject's consent.
2.10. User — any visitor to the website https://avalonbali.com/.
2.11. Provision of personal data — actions aimed at disclosing data to specific individuals or groups.
2.12. Dissemination of personal data — actions aimed at disclosing data to an unlimited number of people.
2.13. Cross-border transfer of personal data — transferring data to a foreign country.
2.14. Destruction of personal data — actions that result in the irrevocable deletion of data.
3. Operator’s Rights and Obligations
3.1. The Operator has the right to:
— Receive accurate information from the subject;
— Continue processing personal data without consent if legally justified;
— Independently determine necessary protective measures.
3.2. The Operator is obligated to:
— Provide information about personal data processing upon request;
— Ensure the security of personal data;
— Respond to data subjects' requests;
— Suspend data processing at the request of the subject.
4. Rights and Obligations of Data Subjects
4.1. Data subjects have the right to:
— Access information about the processing of their data;
— Request clarification, blocking, or deletion of their data;
— Withdraw consent for data processing;
— File complaints regarding violations.
4.2. Data subjects are obligated to:
— Provide accurate information about themselves;
— Notify the Operator of changes to their data.
4.3. Individuals who provide false information bear legal responsibility.
5. Principles of Personal Data Processing
5.1. Processing is conducted lawfully and fairly.
5.2. Processing is limited to achieving specific and legitimate purposes.
5.3. Combining databases with incompatible processing purposes is prohibited.
5.4. Only data relevant to the stated purposes is processed.
5.5. Data storage is limited to the duration necessary to achieve processing goals.
6. Purposes of Personal Data Processing
— Informing users via email.
— Processing data to provide services and functionality.
7. Conditions for Personal Data Processing
7.1. Data is processed with the consent of the subject.
7.2. Processing is required to fulfill contractual or legal obligations.
7.3. Processing may protect the legitimate interests of the Operator.
8. Data Storage and Transfer
— Data is stored in a form allowing identification of the subject no longer than necessary.
— Users can update their data by contacting the Operator.
9. Operator’s Actions with Personal Data
— Collecting, recording, storing, transmitting, and deleting data.
10. Cross-Border Data Transfer
— Transfers are conducted following international data protection standards.
11. Confidentiality of Personal Data
— Data will not be disclosed to third parties without the subject's consent.
12. Final Provisions
— Users may contact the Operator at mail@avalonbali.com for inquiries.
— The Policy is effective indefinitely until updated.
— The latest version of the Policy is available at https://avalonbali.com/privacy.
