Dear Customer,

We are PT Enseval Putera Megatrading Tbk, acting as the Personal Data Processor of PT Media Komunika Teknologi, which is part of the Kalbe Group and/or other companies within the Kalbe Group and/or designated affiliates or business partners. We are committed to protecting the interests and convenience of our Customers, including compliance with Law Number 27 of 2022 on Personal Data Protection (hereinafter referred to as the “PDP Law”) and other applicable regulations concerning Personal Data Protection in Indonesia.

As part of our compliance with the PDP Law, we ensure the confidentiality and security of Customers’ Personal Data. Through this Customer Consent Form, we specifically request the Customer’s approval for our activities related to the collection and processing of their Personal Data. We assure you that all data concerning the confidentiality and security of Customers’ Personal Data, in relation to Kalbe Group’s services or products, will be protected and managed in accordance with the applicable provisions.

This Customer Consent Form contains information regarding the purposes of Personal Data collection, types of Personal Data collected, storage and security of Personal Data, disclosure and sharing of Personal Data, and withdrawal of consent for Personal Data processing, as further detailed in the Privacy Policy available on our website.

1. Purpose of Collecting Personal Data
   The Personal Data we collect may be used to provide our products or services to Customers, manage accounts and relationships with Customers, process payments and transactions, communicate with Customers regarding the products and services we provide, notify Customers about ongoing promotions, and improve products and services based on Customer preferences, while complying with applicable legal and regulatory requirements.

   To support these purposes, we may appoint other parties as personal data processors to carry out processing of Customers’ data. For any resulting impacts, we will remain responsible and fulfill our obligations as stipulated under the PDP Law.

    

2. Storage and Security of Personal Data
   The Personal Data collected will be stored and used in accordance with the duration and purposes approved by the Customer. We will make every effort to provide and ensure the highest level of security so that Customers’ Personal Data is stored safely and only accessible by authorized parties, maintaining the security, resilience, integrity, confidentiality, and protection of Personal Data.

   We encourage Customers to safeguard confidential data such as passwords, One-Time Passwords (OTP), Personal Identification Numbers (PIN), refrain from sharing account details with anyone, and maintain the security of their devices.

   We guarantee the security, resilience, and integrity in the processing of Customers’ Personal Data. However, we cannot guarantee the completeness or accuracy of the Personal Data provided to us, nor can we guarantee that such Personal Data will not or cannot be intercepted, accessed, disclosed, altered, or destroyed by unauthorized parties, due to risks beyond our control. We shall not be held liable in the event of force majeure situations beyond our control. We will, however, remain responsible for notifying Customers through the designated communication channels.

    

3. Types of Personal Data Collected
   The Personal Data we collect falls into two (2) categories, namely:

   General Personal Data, including:

   1. Full name

   2. Gender

   3. Nationality

   4. Marital status

   5. Other combined personal data that can identify an individual
       

   Specific Personal Data, including:

   1. Health data and information

   2. Biometric data

   3. Genetic data

   4. Criminal records

   5. Child data

   6. Personal financial data

   7. Other general data as regulated by laws and regulations
       

4. Disclosure of Personal Data
   As mandated under the PDP Law, we will only share and disclose Customers’ Personal Data if:

   1. The Personal Data is required for the use of our service features, or third-party applications, services, or devices chosen by the Customer;

   2. The data is required for national defense and security interests;

   3. The Personal Data is required for law enforcement purposes;

   4. The Personal Data is required for the public interest in the context of state administration;

   5. The Personal Data is required for supervision of the financial services sector, monetary policy, payment systems, and financial system stability within the scope of state administration; or

   6. The Customer grants us permission to share their Personal Data with third parties.
       

5. Withdrawal of Consent for Personal Data Processing
   Customers are entitled to give consent for the processing of their Personal Data. If a Customer wishes to withdraw their consent, they may contact us through the contact information provided below. However, such withdrawal may affect our ability to provide certain products or services to the Customer.

Further details regarding Customer Consent can be found in our Privacy Policy by visiting our website at www.enseval.com or by submitting an information request to us.

If Customers have further questions regarding the security and/or management of their Personal Data, they may contact us at the following:

PT Enseval Putera Megatrading Tbk
Address: Kawasan Industri Pulo Gadung (JIEP), Jalan Pulo Lentut No. 10, Pulo Gadung, Cakung, East Jakarta
Phone Number: (021) 46822422
E-mail: customercare@enseval.com

We hereby convey this information. We always respect Customers’ privacy and are committed to protecting your Personal Data.