Privacy Policy

A. INTRODUCTION
This Privacy Policy provides information on how PT Mizuho Leasing Indonesia Tbk (“Company”) processes personal data. The Company explains in detail the definition of personal data, processing of personal data, the purpose of processing personal data, confidentiality, storage and deletion of personal data, Personal Data Subject Rights, Personal Data Protection Failure and Updates to the Privacy Policy.

Personal data processing is carried out in accordance with the provisions stipulated in Law No. 27 of 2022 concerning Personal Data Protection, as well as related regulations that apply in the future.

B. ABOUT PRIVACY POLICY
For the purposes of this Privacy Policy, the use of terms is explained as follows:

  1. “Personal Data” is data about an individual who is identified or can be identified individually or combined with other information either directly or indirectly through an electronic or non-electronic system;
  2. “Personal Data Subject” is all owners of Personal Data but not limited to prospective debtors, debtors, debtor partners, guarantors, guarantor partners, or other parties who cooperate/related/affiliated to the Company;
  3. “Personal Data Protection Failure” is a failure to protect an individual’s Personal Data in terms of confidentiality, integrity, and availability of Personal Data, including a breach of security, whether intentional or unintentional, leading to the destruction, loss, alteration, disclosure, or unauthorized access to Personal Data transmitted, stored, or processed.


C. PERSONAL DATA PROCESSING

The Company will process Personal Data including:

  1. acquisition and collection;
  2. processing and analysis;
  3. storage;
  4. correction and updating;
  5. appearance, announcement, transfer,
  6. dissemination, or disclosure; and/or
  7. deletion or destruction.

D. PURPOSE OF PERSONAL DATA PROCESSING
The purpose of Personal Data processing carried out by the Company are as follows:

  1. Data Verification
  2. Credit Financing Analysis
  3. Collateral Risk Mitigation Process
  4. Collateral Receipt and Storage
  5. Collateral Handover
  6. Collateral Document Management
  7. Collection
  8. Execution of Collateral
  9. Report of Accounts Receivable Write-off
  10. Transfer of Collection Rights to Other Parties
  11. Product and Service Development
  12. Employee Data Storage in the Company Database
  13. Implementing the Know Your Customer (KYC) principle in accordance with applicable laws and regulations
  14. Compliance with legal provisions and government regulations that must be carried out by financing companies, among others Anti-Money Laundering, Prevention of Terrorism Funding and Prevention of Funding for the Proliferation of Weapons of Mass Destruction.
  15. Offering products and/or services
  16. Other purposes that are permitted and do not conflict with applicable laws and regulations.

The Company will process Personal Data in accordance with its objectives and protect and implement technical measures for the security of Personal Data to prevent Personal Data Protection Failure.

E. CONFIDENTIALITY
Any Personal Data provided or obtained by the Company, whether provided or submitted verbally, in writing, graphically or submitted or submission of personal data/information in other forms is confidential.
The obligation to keep Personal Data confidential as referred to above does not apply if:

  1. The data is already public information, or has been opened to the public by the owner of the information;
  2. Must be provided based on applicable legal provisions; or
  3. Based on a court decision that has permanent legal force.

F. STORAGE AND DELETION OF PERSONAL DATA
The Company will store and maintain documents containing Personal Data for a period determined in accordance with applicable laws and regulations in Indonesia.
Personal Data storage and deletion will be carried out by the Company with the following provisions:

  1. After the termination or end of the Personal Data Subject's obligations, the Company, in accordance with the instructions of the Personal Data Subject, either returns (and causes to be returned) or destroys and deletes (and causes to be destroyed and deleted) any Personal Data provided by the Personal Data Subject.
  2. The Company will stop storing documents containing Personal Data, or delete the means by which the Personal Data of the Personal Data Subject can be associated with a specific individual as soon as it is reasonably considered that (i) its purpose has been achieved and (ii) the retention of the Personal Data is no longer necessary for any regulatory, legal, audit or business purposes.

G. RIGHTS OF PERSONAL DATA SUBJECTS
Personal Data Subject shall have the right to complete, update, and/or rectify errors and/or inaccuracy of Personal Data concerning him/her according to the purpose for which the Personal Data is processed.


H. PERSONAL DATA PROTECTION FAILURE
If the Personal Data Subject finds an indication of a Personal Data Protection Failure, the Personal Data Subject must notify the Company immediately from the time of finding the indication of the Personal Data Protection Failure or no later than 3x24 hours from the time the indication of the Personal Data Protection Failure is known to have occurred;

I. TRANSFER OF PERSONAL DATA OUTSIDE THE JURISDICTION OF THE REPUBLIC OF INDONESIA
The Company may transfer Personal Data belonging to Personal Data Subjects outside the jurisdiction of the Republic of Indonesia in accordance with the provisions of the laws and regulations in force in Indonesia.

J. REPRESENTATIONS AND WARRANTIES                   
By reading the Privacy Policy, the Personal Data Subject hereby declares that read, understood, and agreed to all the provisions contained in this Privacy Policy. Thus, the Personal Data Subject also declares and guarantees the authenticity, completeness, and accuracy of the Personal Data that has been submitted to the Company.

K. PRIVACY POLICY UPDATES
This Privacy Policy may be updated at any time if necessary.

This Privacy Policy is made in 2 (two) language versions such as Bahasa and English version, if there is any contrary on the 2 (two) versions then Bahasa version shall prevail and English version shall adjusted.