Privacy Policy

1. Who we are

This site is operated by PT Sailendra Dua Sejahtera ("Sailendra Organizer", "we"), Gedung Graha Mampang Lantai 3 Suite 305, Jl. Mampang Prapatan Raya Kav. 100, Kel. Duren Tiga, Kec. Pancoran, Jakarta Selatan, DKI Jakarta, Indonesia. For the data described on this page we act as the Personal Data Controller, unless stated otherwise.

Questions or requests about personal data can be sent to our Personal Data Protection PIC at [email protected] or WhatsApp +62 813-4994-9907.

2. Scope

This policy covers sailendra.co.id, communication through our official WhatsApp, email, and social media channels, and events organized by Sailendra Organizer. The SAMSARA app has its own privacy policy at samsara.uno/privacy.

3. Data we collect and why

• Contact and proposal forms (Contact and Team Building pages): your name, company, event type, estimated headcount, and message. This data is not stored on the site’s server; the message is composed in your browser and opened in WhatsApp for you to send. We use it to respond to your request and prepare a proposal.
• AI Consultant (Nindra): the text you type is sent to OpenAI (United States) to generate program recommendations. We do not store conversations on our server and ask OpenAI not to store responses through the API; OpenAI may keep abuse-monitoring logs for up to 30 days. The limit of 5 consultations per day is counted by IP address, held only temporarily in server memory. Please do not include names or personal data in your questions.
• Technical and security data: IP address, device and browser type, and anti-bot verification tokens (Cloudflare and Cloudflare Turnstile) to protect the site from abuse. IP addresses written to our server logs are hashed.
• Cookies, analytics, and advertising: we use Google Tag Manager, Google Ads (conversion measurement and remarketing), and Cloudflare Web Analytics to understand visits and measure ads. See Section 5.
• Clients and event participants: client PIC data (name, title, contact) to perform our agreements; and participant data provided or collected at the client company’s request, such as registration data, data for booking tickets and hotels (name as on ID, ID number, date of birth, rooming list), and photo/video documentation. For participant data, we process it on behalf of and on the instructions of the client company.

4. Legal bases

Under Article 20 of the PDP Law, we process personal data based on:

• your request before entering into an agreement, and the performance of an agreement (e.g., proposal requests and running events);
• legal obligations (e.g., taxation and transport provider requirements);
• your consent (e.g., analytics and advertising cookies on this site, publishing documentation, and location tracking in the SAMSARA app), which you may withdraw at any time;
• legitimate interests (e.g., site security and visit statistics), balanced against your rights.

5. Cookies and your choices

Third parties, including Google, use cookies to serve ads based on your prior visits to this website or other websites, and to measure ad effectiveness. This site uses Google Ads remarketing.

• Google analytics and advertising cookies are only set after you press “Accept” on the cookie banner. Until then, or if you decline, Google tags send only limited, cookieless signals (Google Consent Mode), so ad performance is measured in aggregate.
• Your choice is stored in your browser for 12 months, and you can change or withdraw it at any time with the “Cookie settings” button at the bottom of every page. If you withdraw consent, we delete the Google cookies already stored for this site.
• Cloudflare Web Analytics, which we use for visit statistics, does not use cookies.
• You can turn off personalized ads in Google My Ad Center, or opt out of third-party advertising cookies at aboutads.info.
• You can also block or delete cookies in your browser settings. The site keeps working fully without analytics and advertising cookies.

6. Sharing data with others

We do not sell personal data. Data is shared only as needed with:

• event service providers: hotels, venues, airlines/travel agents, transport, insurance, and documentation vendors;
• technology providers: Google, Cloudflare, Meta (WhatsApp), OpenAI, our site hosting provider, and Supabase and Vercel for the SAMSARA app;
• the client company, as Controller of its participants’ data;
• authorities where required by law.

Recipients must keep the data confidential and use it only for the purpose it was shared for.

7. Transfers outside Indonesia

Some of our technology providers process data outside Indonesia (including the United States). Under Article 56 of the PDP Law, we make sure equivalent or adequate and binding protection is in place, for example through the providers’ data protection terms. Where that is not possible, we ask for your consent.

8. How long we keep data

• Conversations and data of prospective clients that do not proceed: up to 2 years after the last contact.
• Participant registration data: up to 90 days after the final event report, unless the client agreement says otherwise.
• ID copies, ID numbers, dates of birth, and rooming lists: up to 30 days after the event ends.
• Photo/video documentation: as agreed with the client; portfolio material is removed if you object.
• Contract, financial, and tax records: 10 years as required by law.

9. Security

We apply technical and organizational measures, including HTTPS, Cloudflare protection, two-step verification on company accounts, need-to-know access, confidentiality agreements with staff and vendors, and periodic reviews.

10. Your rights

Under the PDP Law, you have the right to:

• information about our identity, legal basis, purpose, and use of your data;
• complete, update, and/or correct your data;
• access and obtain a copy of your data;
• end processing, and have your data erased and/or destroyed;
• withdraw consent;
• object to decisions based solely on automated processing, including profiling;
• delay or restrict processing;
• sue and receive compensation for violations in the processing of your data;
• obtain your data in a commonly used, machine-readable format and send it to another controller.

Send your request to [email protected] or WhatsApp +62 813-4994-9907. We respond within 3 x 24 hours of receiving your request and verifying your identity, free of charge. For event participant data, we forward the request to the client company and help fulfil it.

11. Personal data breaches

If a personal data breach occurs, we notify you and the competent authority in writing within 3 x 24 hours, as required by Article 46 of the PDP Law. For data we process on behalf of a client, we notify the client within 24 hours.

12. Children

This site is not directed at children. Children’s data at family events is processed and published only with a parent’s or guardian’s consent.

13. Changes to this policy

We may update this policy from time to time. The latest version, with its effective date, is always on this page.

14. Contact us

Personal Data Protection PIC, PT Sailendra Dua Sejahtera
Email: [email protected]
WhatsApp: +62 813-4994-9907
Address: Gedung Graha Mampang Lantai 3 Suite 305, Jl. Mampang Prapatan Raya Kav. 100, Kel. Duren Tiga, Kec. Pancoran, Jakarta Selatan, DKI Jakarta, Indonesia