SARGA.CO Privacy Policy

1.Scope and Purpose of This Privacy Policy

This Privacy Policy applies to all individuals who interact with SARGA.CO, including but not limited to:

• •Users who visit our website, including those who only access information without carrying out a transaction;
• •Users who purchase tickets or products, or access services through our platform, including users who are subsequently redirected to a third-party platform to complete a transaction;
• •Individuals who interact with us through social media, events, or other communication channels;
• •Representatives or contact persons acting on behalf of companies, vendors, business partners, or other parties that work with us;
• •Individuals involved in activities or events organized or supported by us.

2.Personal Data We Process

When we refer to "personal data", we mean any information that can identify you directly or indirectly, whether provided by you or collected through your interactions with SARGA.CO. We only process personal data that is relevant and necessary for the purposes for which our services are used and in accordance with applicable laws in Indonesia.

How We Obtain Personal Data

We may obtain your personal data directly from you when you visit our websites, platforms, programs and/or services, complete forms, contact us, or participate in events or activities we organize. We may also receive personal data indirectly from third-party platforms, representatives acting on your behalf, business partners, or vendors. We may collect data through cookies and similar technologies, publicly available sources, event documentation including photos and videos, and CCTV at event locations where applicable.

Identity Data

We may collect your full name; place and date of birth; gender; residential and delivery addresses; National Identification Number (NIK); email address; telephone number; bank name and account number; credit card number and issuer; and electronic wallet name and number.

Transaction-Related Data

In connection with purchases of tickets or products, or access to events related to our services, we may collect or receive booking information, purchaser identity, and transaction status or history. In many cases, purchasing and payment processes are carried out through third-party platforms. Payment data is processed directly by those third parties and is subject to their respective privacy policies. We only receive data relevant and necessary for administration, event coordination, or service support.

Communication Data

We may collect the content of messages, questions, or requests you submit; communication history through email, social media, or other channels; and responses or feedback you provide. This data is used to respond appropriately to your needs and improve the quality of our services.

Electronic System Usage Activity Data

When you access our website, our systems may automatically record certain technical information, including IP address, device type and operating system, browser type, pages accessed and duration of visits, and access times and patterns. This information is generally obtained through system logs, cookies, or similar technologies and is used on a limited basis for operational, security, and basic analytical purposes.

Data Related to Participation in Activities or Events

We may collect registration or participation data, attendance or participation information, and activity documentation including photos, videos, or other recordings for event operations, documentation, and relevant publication purposes.

Children’s Data

Our services are not specifically directed at minors. We do not knowingly collect children’s personal data without valid consent from a parent or guardian. If we become aware that such data has been collected, we will take the necessary steps to delete it.

Recruitment, Employment, and Talent Management Data (If Applicable)

If you apply for a job, work with us, or participate in a talent development program, we may collect additional identity and contact information, emergency contact data where required, educational history, work experience, skills, portfolio or other professional information, program participation data, participant evaluation results or development, and documentation of activities or performance in a professional context.

Sensitive Personal Data (Where Required)

In certain circumstances and in accordance with applicable law, we may process sensitive personal data on a limited basis, such as health data or other information relevant to specific activities, where lawfully required and/or based on your consent.

3.Why We Process Your Personal Data

Processing personal data includes collection, recording, storage, use, disclosure, transfer, or deletion in accordance with applicable laws and regulations in Indonesia. We process personal data to provide services, perform contractual obligations, communicate with and support users, manage events and transactions, manage partner and talent relationships, comply with legal obligations, pursue legitimate interests without infringing your rights and freedoms, improve services, maintain security, prevent misuse, conduct business analysis and planning, and provide relevant communications. You may manage your communication preferences or opt out of marketing communications at any time.

4.Sharing Your Personal Data

SARGA.CO may share your personal data with relevant parties where there is a lawful basis and only to the extent necessary, including ticketing or transaction platform providers, business partners, vendors or organizers, technology providers, communication or customer support providers, competent authorities where required by law or lawful request, and professional advisers such as legal consultants and auditors. In connection with events, data may be shared for participant management, activity coordination, documentation, and publication. We endeavor to ensure that recipients maintain confidentiality and security in accordance with applicable requirements.

5.Cross-Border Data Transfers

SARGA.CO may use infrastructure or third parties that enable personal data to be stored or processed outside Indonesia. Where personal data is transferred outside Indonesia, we will ensure that the transfer is carried out in accordance with applicable laws and regulations, adequate contractual, technical, or organizational protective measures are in place, and personal data remains protected with a level of security comparable to applicable Indonesian requirements. Processing by third parties is also subject to their respective privacy policies.

6.Your Personal Data Rights

In accordance with applicable laws and regulations in Indonesia, you may have rights to request information about and a copy of your personal data; request correction of inaccurate or incomplete data; request deletion in certain circumstances; request restriction of or object to processing in certain circumstances; withdraw consent where processing is based on consent without affecting prior lawful processing; submit complaints to us and, where necessary, to the competent authority; receive notice of changes to the Terms of Service and/or this Privacy Policy; receive notice in the event of a personal data breach; and request not to receive newsletters or offers that are not critical to use of the Services. Requests may be subject to verification, legal review, and reasonable processing periods, and may be rejected or limited where necessary to comply with legal obligations, protect legitimate interests, or protect the rights of others.

7.Retention of Your Personal Data

SARGA.CO endeavors to ensure that your personal data is stored and processed in Indonesia. Where processing takes place outside Indonesia, adequate safeguards will be applied in accordance with applicable requirements. Personal data is retained only for as long as necessary to provide services, products, and activities; fulfill contractual obligations; comply with applicable legal and regulatory obligations; or protect legal interests in disputes or claims. Retention periods take into account the nature and type of personal data, purpose of processing, applicable legal obligations, and operational and administrative needs. Data may be retained longer where required by law or necessary for evidentiary or compliance purposes.

8.Deletion and Anonymization of Data

When personal data is no longer required for processing purposes, we will delete it from our systems or anonymize it so that it can no longer identify you, subject to technical feasibility and applicable requirements.

9.Protection of Your Personal Data

SARGA.CO is committed to protecting your personal data through reasonable safeguards appropriate to relevant risks. Organizational measures include need-to-know access restrictions, confidentiality obligations, and periodic monitoring and evaluation. Technical measures include adequately secured systems and infrastructure, access controls, and protection against loss, misuse, or unauthorized access. We endeavor to ensure that third parties maintain appropriate security and confidentiality standards. You are also encouraged to keep information confidential, exercise caution when sharing personal data, and contact us promptly if there are indications of misuse.

10.Links to Third-Party Websites or Services

The SARGA.CO platform may contain links or redirects to websites or services operated by third parties, including ticketing providers, e-commerce providers, social media platforms, business partners, or other parties working with us. We do not control their personal data management policies or practices. We recommend reviewing each third party’s privacy policy before providing personal data or using their services. This Privacy Policy forms an integral part of the Terms and Conditions of Use of our services.

11.Limitation of Liability Relating to Personal Data

Although we implement reasonable safeguards to protect personal data, security can also be affected by factors outside our control, including the security of devices, networks, and systems you use. We are not responsible for data breaches or unauthorized access caused by the negligence or actions of other parties outside our control, provided that we have implemented reasonable safeguards in accordance with applicable practices. You are encouraged to protect your devices and access credentials.

12.Contact Details

If you have any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, you may contact us at: [email protected]. We will review and respond to each request in accordance with applicable laws and regulations. In some cases, we may request additional information to verify your identity before processing your request in order to maintain the security of your personal data.