Privacy Policy

1. Introduction and Our Commitment to Your Privacy

Welcome to bagol.fmipaum.ac.id (referred to as “we,” “us,” or “our”). We are dedicated to providing valuable information, services, and resources related to home exterior needs. This Privacy Policy outlines our unwavering commitment to protecting the privacy and security of your personal data. It meticulously describes how we collect, use, process, store, and disclose the information we gather from and about you when you visit and interact with our website, https://bagol.fmipaum.ac.id/ (the “Site”).

At bagol.fmipaum.ac.id, we understand that your privacy is a fundamental right and a cornerstone of trust in the digital age. As the owner and operator of a platform focused on home exterior solutions, we recognise the importance of transparency and accountability in our data handling practices. Our goal is not only to comply with applicable data protection laws and regulations but also to exceed expectations in demonstrating our respect for your personal information.

This comprehensive policy aims to provide you with a clear, detailed, and understandable overview of our data practices. We encourage you to read it carefully to gain a full understanding of your rights and our obligations. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our Site.

2. Who We Are

Website Name: bagol.fmipaum.ac.id
Owned and Operated by: bagol.fmipaum.ac.id
URL: https://bagol.fmipaum.ac.id/
Niche: Home Exterior
Contact Email: [email protected]

For the purposes of this Privacy Policy, bagol.fmipaum.ac.id acts as the data controller of the personal data collected through the Site. This means we determine the purposes and means of the processing of your personal data.

3. Definitions of Key Terms

To ensure clarity and understanding, please refer to the following definitions used throughout this Privacy Policy:

Personal Data (or Data): Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing: Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data. In this Privacy Policy, bagol.fmipaum.ac.id is the Data Controller.
Data Processor: A natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller.
User (or You): The individual accessing or using our Site and services.
Site: Refers to the website bagol.fmipaum.ac.id and all its associated pages and functionalities.
Cookies: Small files stored on your device (computer or mobile device) that help websites function, track user activity, and remember user preferences.
Usage Data: Data collected automatically, either generated by the use of the Site or from the Site infrastructure itself (e.g., the duration of a page visit).

4. Information We Collect and How We Collect It

We collect various types of information for different purposes to provide and improve our services to you. The type of information we collect depends on how you interact with our Site.

4.1. Information You Voluntarily Provide to Us

When you interact with our Site, you may voluntarily provide us with certain Personal Data. This includes, but is not limited to:

a. Contact Information and Inquiries

Name: Your first and last name when you fill out contact forms, inquiry forms, or subscribe to newsletters.
Email Address: Essential for communication, sending newsletters, responding to inquiries, and providing requested information.
Phone Number: If provided, used for direct communication regarding your inquiries, quotes, or service requests.
Postal Address: Specifically, if you request a localized service, quote for a home exterior project, or if we need to send you physical materials. We collect your street address, city, state/province, postal code, and country.
Specific Project Details: When you inquire about home exterior services, you might provide details about your property (e.g., type of home, size, existing exterior materials), the specific services you are interested in (e.g., roofing, siding, landscaping, patio construction, window replacement, exterior painting), and your preferred timeline or budget. This information is crucial for us to understand your needs and provide accurate, relevant responses and quotes.
Uploaded Files/Images: If our site functionality allows, you may upload photos of your current home exterior or inspiration images related to your project. These images help us visualize your requirements and offer more tailored solutions.

b. Account Information (if applicable)

While our current Site primarily focuses on information and inquiries, if we implement user accounts in the future, we may collect:

Username and Password: For securing your account access.
Profile Information: Any additional details you choose to add to your user profile.

c. Communication Content

Messages and Correspondence: When you send us emails, submit forms, or participate in online chats (if available), we collect the content of your communications with us. This includes questions, feedback, suggestions, and any other information you convey.
Reviews and Testimonials: If you provide reviews or testimonials about our services or content, we will collect the content of your review, your name, and potentially a photo if you provide one with your explicit consent.

d. Survey Responses

If we conduct surveys to gather feedback on our Site, content, or potential services, your responses will be collected. These responses may be linked to your contact information if obtained through a logged-in session or if explicitly provided by you.

4.2. Information Collected Automatically

When you access or use our Site, certain information is automatically collected through various technologies. This data helps us understand user behavior, improve our Site’s performance, and enhance your browsing experience.

a. Usage Data

Internet Protocol (IP) Address: Your IP address is a numerical label assigned to your device. We use it to identify your general geographic location, diagnose server problems, and administer our Site.
Browser Type and Version: Information about the web browser you are using (e.g., Chrome, Firefox, Safari) helps us ensure compatibility and optimize our Site for different browsers.
Operating System: Details about your device’s operating system (e.g., Windows, macOS, Android, iOS) assist us in optimizing our Site for various platforms.
Device Information: This may include device identifiers, type of device (e.g., desktop, mobile, tablet), screen resolution, language settings, and unique device numbers.
Referring/Exit Pages: The URL of the page you visited before coming to our Site and the URL of the page you visit after leaving our Site.
Pages Visited: The specific pages you view on our Site, including the time spent on each page, and the order in which you accessed them.
Date and Time of Visit: Timestamp of your access to specific pages and total session duration.
Clickstream Data: Information about the links you click and how you navigate through our Site.

b. Cookies and Tracking Technologies

We (and our third-party service providers) use Cookies, Web Beacons, and similar tracking technologies to track the activity on our Site and hold certain information. These technologies are detailed in Section 7 of this policy.

Cookies: Small data files placed on your device. They are widely used to make websites work or work more efficiently, as well as to provide reporting information.
Web Beacons (Pixel Tags/Clear GIFs): Tiny graphics (about the size of a single pixel) with a unique identifier, embedded invisibly on web pages or emails. They help us track the online movements of web users, monitor email open rates, and deliver cookies.
Log Files: These files record events that occur on our servers, such as user requests, access times, and errors.

4.3. Information from Other Sources (Potentially)

In certain limited circumstances, we may receive information about you from other sources, such as:

Publicly Available Sources: We may collect information from public databases or publicly available social media profiles if you interact with our brand on those platforms.
Third-Party Service Providers: For example, we might receive aggregated, de-identified demographic data from analytics providers to help us understand our audience better. We will only use such information in accordance with this Privacy Policy and applicable laws.

It is important to note that we primarily collect information directly from you or automatically through your use of the Site. We do not generally purchase or solicit personal data from third-party data brokers.

5. How We Use Your Information (Purposes of Processing)

We use the collected information for various purposes to provide, maintain, protect, and improve our services, develop new ones, and protect our users. Each use case is underpinned by a specific legal basis for processing, ensuring compliance with data protection regulations.

5.1. To Provide, Operate and Maintain Our Site and Services (Contractual Necessity & Legitimate Interest)

Responding to Inquiries and Requests: To process and respond to your queries, requests for quotes, service information, or any other contact you initiate through forms, email, or phone. This is primarily done to fulfill our potential contract with you or in anticipation of it.
Service Delivery: If you enter into a contract with us for home exterior services, your data will be used to fulfill our obligations under that contract, including scheduling, communication, and project management.
Customizing User Experience: To tailor the content and layout of our Site to your preferences and interests, potentially showing you more relevant home exterior information or services.
Technical Support: To provide customer support and troubleshoot technical issues you may encounter on the Site.

5.2. For Internal Business Operations and Improvement (Legitimate Interest)

Website Analytics and Performance: To monitor and analyze Site usage, trends, and activities to understand how visitors interact with our content and services. This helps us identify areas for improvement, optimize Site functionality, and enhance the overall user experience. Our legitimate interest here is to maintain a high-performing and user-friendly website.
Product/Service Development: To research and develop new features, content, or services based on user feedback and analytical insights, ensuring our offerings remain relevant to the home exterior niche.
Auditing and Reporting: To perform internal audits, compile statistics, and generate reports related to Site performance, user demographics, and service uptake.
Security and Fraud Prevention: To detect, prevent, and address technical issues, security incidents, and fraudulent activities, safeguarding our Site and users. Our legitimate interest is to ensure the security and integrity of our operations.
Legal Compliance and Protection: To comply with legal obligations, resolve disputes, and enforce our agreements. This includes responding to lawful requests from public authorities.

5.3. For Communication and Marketing (Consent & Legitimate Interest)

Sending Newsletters and Updates: If you subscribe, to send you newsletters, marketing communications, promotional materials, or other information that may be of interest to you, related to home exterior trends, new services, or special offers. This is based on your explicit consent.
Personalized Marketing (within legitimate interest bounds): To personalize our marketing and advertising campaigns based on your interests and past interactions with our Site, where our legitimate interest to promote our services is balanced against your data protection rights.
Surveys and Feedback: To invite you to participate in surveys to gather feedback on our services and content, aiming to understand your needs better.

5.4. Legal Bases for Processing Your Personal Data

Under applicable data protection laws, particularly the General Data Protection Regulation (GDPR), we must have a lawful basis to process your Personal Data. We rely on the following legal bases:

Consent: We will process your Personal Data based on your explicit consent for specific purposes, such as sending you marketing newsletters. You have the right to withdraw your consent at any time.
Contractual Necessity: The processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. For instance, to fulfill your requests for quotes or services.
Legitimate Interests: The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Our legitimate interests include:
- Operating, maintaining, and improving our Site and services.
- Ensuring the security of our Site.
- Understanding how users interact with our Site to enhance user experience.
- Marketing our services to existing customers and potential clients (where not requiring consent).
- Conducting analytics and research to improve our business.
Legal Obligation: The processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax laws, responding to legal requests).

6. How We Share Your Information (Disclosure to Third Parties)

We respect your privacy and commit to not selling, renting, or leasing your Personal Data to third parties for their independent marketing purposes without your explicit consent. However, we may share your information in the following limited circumstances:

6.1. With Service Providers

We engage trusted third-party service providers to perform functions on our behalf and to assist us in operating our Site and delivering our services. These service providers act as Data Processors and are contractually bound to protect your data and only use it for the purposes for which we disclose it to them. Examples include:

Hosting Providers: For storing our website data and making it accessible online.
Analytics Providers: Such as Google Analytics, to help us understand how users interact with our Site (e.g., pages visited, time spent, traffic sources). Data shared is typically aggregated and anonymized where possible.
Email Marketing Services: To send out newsletters and promotional emails to subscribers (e.g., Mailchimp, SendGrid). Your email address and name are shared with these providers solely for the purpose of sending communications on our behalf.
CRM (Customer Relationship Management) Platforms: To manage customer interactions, inquiries, and track potential projects for efficient communication and service delivery.
Cloud Storage Providers: For secure storage of files, documents, and backups.
Communication Tools: For managing contact forms, live chat, or other communication channels on the Site.

6.2. For Business Transfers

If bagol.fmipaum.ac.id, or substantially all of its assets, were to be acquired by another entity, or in the event of a merger, acquisition, restructuring, or asset sale, your Personal Data may be transferred as part of that transaction. In such an event, you would be notified via a prominent notice on our Site or direct communication, and the new entity would be bound by this Privacy Policy (or a substantially similar policy).

6.3. For Legal Reasons and Law Enforcement

We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to:

Comply with a legal obligation: Such as responding to an official request from a court, government agency, or regulatory body.
Protect and defend the rights or property of bagol.fmipaum.ac.id: This includes enforcing our terms and conditions, and protecting ourselves from fraud.
Prevent or investigate possible wrongdoing in connection with the Site: Including cybercrime or other malicious activities.
Protect the personal safety of users of the Site or the public: In emergency situations.
Protect against legal liability: To establish or exercise our legal rights or defend against legal claims.

6.4. With Your Consent

Other than as set out above, we will share information with third parties only when we have your specific and explicit consent to do so. For example, if we feature a testimonial including your name and photo, this would only be done with your direct permission.

7. Cookies and Other Tracking Technologies

We use Cookies and similar tracking technologies to track the activity on our Site and hold certain information. Cookies are small data files placed on your device (computer or mobile device). They enable us to remember your preferences (e.g., language selection, font size), recognize you when you return to our Site, and collect information about your browsing activities.

7.1. Types of Cookies We Use

Strictly Necessary Cookies: These cookies are essential for the Site to function correctly. They enable core functionalities like security, network management, and accessibility. Without these cookies, the Site cannot provide the services you have requested. They are usually set in response to actions made by you, such as setting your privacy preferences, logging in, or filling out forms.
Performance Cookies (Analytics Cookies): These cookies collect information about how visitors use our Site, such as which pages are visited most often, the average time spent on the Site, and if they receive error messages from web pages. These cookies collect aggregated and anonymized information, meaning they don’t identify you personally. Their purpose is to help us improve how our Site works and understand what content is most engaging. We typically use third-party analytics services like Google Analytics for this.
Functionality Cookies: These cookies allow the Site to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personalized features. For example, they can be used to remember changes you have made to text size, fonts, and other parts of web pages that you can customize. They may also be used to provide services you have asked for, such as watching a video or commenting on a blog. The information these cookies collect may be anonymized, and they cannot track your browsing activity on other websites.
Targeting/Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organizations, such as advertisers. This means that after you have been to our Site, you may see advertisements about our services or related home exterior content on other sites.

7.2. How We Use Cookies

Authentication: To identify you when you log in to our Site (if user accounts are implemented).
Security: For security validation on our Site.
Preferences: To remember settings and preferences you’ve chosen.
Analytics: To track how users interact with the Site, allowing us to enhance its usability and performance.
Marketing (as applicable): To serve targeted content or advertisements relevant to your interests, both on our Site and potentially on other websites.

7.3. Your Choices Regarding Cookies

You have the right to decide whether to accept or reject cookies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of our Site may become inaccessible or not function properly.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

For Google Chrome: Visit https://support.google.com/chrome/answer/95647
For Mozilla Firefox: Visit https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
For Microsoft Edge: Visit https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40c9-93e1-0b31-1e831f695955
For Apple Safari: Visit https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

8. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements).

The specific retention periods are determined by considering:

The purpose for which the data was collected: For instance, contact inquiry data will be kept until your request is fulfilled and for a reasonable period thereafter for record-keeping, while newsletter subscription data is retained until you unsubscribe.
The nature of the data: Some data types may require shorter or longer retention times based on their sensitivity or utility.
Legal, regulatory, and contractual obligations: Certain laws mandate specific retention periods for various types of data.
Dispute resolution: Data may be retained for longer if there is an ongoing dispute or potential legal claim.

Once the retention period expires, your Personal Data will be securely deleted, anonymized, or aggregated so that it can no longer be associated with you. For usage data, this is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Site, or we are legally obligated to retain this data for longer periods.

9. Data Security

The security of your data is paramount to us. We implement a variety of industry-standard physical, technical, and administrative security measures designed to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. We strive to protect your Personal Data, but no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Our security practices include:

Encryption (SSL/TLS): We use Secure Socket Layer (SSL) or Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our server. This ensures that all communication, especially when submitting forms, is encrypted and secure. You can identify this by the “https://” in your browser’s address bar.
Access Control: Access to your Personal Data is restricted to authorized personnel who have a legitimate need to access it for the purposes outlined in this policy. All access privileges are regularly reviewed and updated.
Firewalls: We employ firewalls to monitor and control incoming and outgoing network traffic, protecting our servers from unauthorized access.
Regular Software Updates: Our systems and software are regularly updated with the latest security patches to protect against known vulnerabilities.
Regular Backups: Data backups are performed regularly to prevent data loss in the event of a system failure or disaster.
Staff Training: Our staff are trained on data protection best practices and are aware of their responsibilities to protect your data.
Incident Response Plan: We maintain an incident response plan to promptly and effectively address any potential data breaches or security incidents, should they occur.

Despite our robust security measures, it is important for you to also take steps to protect your data, such as using strong, unique passwords (if user accounts are implemented) and being cautious about the information you share online.

10. Your Data Protection Rights

Depending on your geographical location and applicable data protection laws, you may have various rights regarding your Personal Data. We are committed to facilitating the exercise of these rights.

10.1. General Data Protection Regulation (GDPR) Rights (for EU/EEA Users)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights, as provided by the GDPR. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

The Right to Access (GDPR Article 15): You have the right to request copies of your Personal Data that we hold. We may charge you a small fee for this service if the request is manifestly unfounded or excessive.
The Right to Rectification (GDPR Article 16): You have the right to request that we correct any information you believe is inaccurate or incomplete.
The Right to Erasure / “Right to be Forgotten” (GDPR Article 17): You have the right to request that we erase your Personal Data, under certain conditions (e.g., if the data is no longer necessary for the purposes for which it was collected, or you withdraw consent).
The Right to Restrict Processing (GDPR Article 18): You have the right to request that we restrict the processing of your Personal Data, under certain conditions (e.g., if you contest the accuracy of the data, or the processing is unlawful but you oppose erasure).
The Right to Data Portability (GDPR Article 20): You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, machine-readable format, under certain conditions.
The Right to Object to Processing (GDPR Article 21): You have the right to object to our processing of your Personal Data, under certain conditions, particularly when processing is based on legitimate interests or for direct marketing.
The Right to Withdraw Consent (GDPR Article 7(3)): Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
The Right to Complain to a Supervisory Authority (GDPR Article 77): You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that our processing of your Personal Data violates the GDPR. For the EU, a list of supervisory authorities can be found here: https://edpb.europa.eu/about-edpb/board/members_en

10.2. California Consumer Privacy Act (CCPA) Rights (for California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your Personal Information.

Right to Know: You have the right to request that we disclose to you what Personal Information we collect, use, disclose, and sell. This includes categories of personal information we have collected, categories of sources from which the personal information is collected, the business or commercial purpose for collecting or selling personal information, categories of third parties with whom we share personal information, and specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request the deletion of your Personal Information collected by us, subject to certain exceptions.
Right to Opt-Out of Sale: The CCPA provides consumers the right to opt-out of the sale of their Personal Information. Please note: bagol.fmipaum.ac.id does NOT sell your Personal Data. Therefore, no “Do Not Sell My Personal Information” link is necessary, as this activity does not occur on our Site.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not deny you services, charge you different prices, or provide a different level or quality of services if you exercise your rights under the CCPA.

10.3. Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We will respond to all legitimate requests within the timeframes required by applicable law (e.g., one month for GDPR, 45 days for CCPA, with possible extensions).

11. International Data Transfers

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

For example, if you are located in the EEA and our servers or some of our service providers are located outside the EEA, your data may be transferred abroad. In such cases, we will ensure that legally appropriate safeguards are in place to protect your data, such as:

Adequacy Decisions: Transferring data to countries deemed to provide an adequate level of data protection by the European Commission.
Standard Contractual Clauses (SCCs): Implementing legally approved contractual clauses that require the recipient to protect the Personal Data to the same standard required in the EEA.
Binding Corporate Rules (BCRs): For intra-group international transfers.
Your Consent: In specific situations, if no other suitable safeguard applies, we might transfer data based on your explicit consent after informing you of the possible risks.

By submitting your information, you agree to this transfer, storing, and processing.

12. Links to Other Websites

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. These links are provided for your convenience and information only.

13. Children’s Privacy

Our Site is not intended for use by anyone under the age of 13 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us immediately at [email protected]. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. For significant changes (e.g., changes to the purposes of processing or the categories of data collected), we may provide more prominent notice, such as through an email to registered users or a prominent announcement on our Site homepage. Your continued use of the Site after any such revisions constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our practices concerning your Personal Data, please do not hesitate to contact us:

By Email: [email protected]

We are committed to resolving any inquiries promptly and efficiently.