IMPORTANT INFORMATION

VISION

As the captive finance company of Hyndai Motor Group(HMG), Hyundai Capital Finance Indonesia Services(HCFI) shares the Group’s values that seek to ensure quality time for its customers, while also striving to play a pivotal role as a financial leader in the efforts to attain greater prosperity and freedom for all through the evolution of mobility. To this end, we have captured our fundamental purpose and the future we envision in the below Vision Statement.

Indonesia Leader in Mobility Finance
Vision signifies our steadfast commitment to becoming a true Indonesia leader, spearheading HMG’s future strategy of building “a World of Mobility” on the global stage through finance, the essence of what we do.

PRIVACY POLICY

1. Overview/Introduction

Welcome to privacy policy ("Policy") of PT Hyundai Capital Finance Indonesia ("we" atau "HCFI"). HCFI recognises the importance of personal data protection and HCFI is committed to provide you with our Policy on the collection, processing, and protection of your personal data. We hope that after reading this Policy you will understand that your privacy is our priority.

Under this Policy, HCFI declares that we are the personal data controller of your personal data and will protect your personal data for your convenience in accessing our mobile application and our website ("Platform").

HCFI takes the security of your personal data very seriously and with full responsibility. This Policy explaines and determines in detail the types of personal data that will be collected, the legal basis for such collection of your personal data and the purposes of the processing of your personal data.

This policy explains how we process Personal Data, including obtaining, collecting, processing, analyzing, storing, correcting, updating, displaying, announcing, transferring, disseminating, disclosing, deleting, and/or destroying your Personal Data (hereinafter referred to as “Personal Data Processing”) through the use of the website, application and/or system (if any), recruitment activities including but not limited to searching and applying for job vacancies, inviting recruitment processes, filling out Job Application Forms, information on recruitment process status, activity registration, career discussion forums, and providing other career information, participating in certain promotional programs or activities from us and/or third parties who collaborate or have legal relationships with us, both online and offline, as well as through other activities, services, products, and features provided on the website, application and/or system (if any) (collectively hereinafter referred to as the “Services”).

This Policy is made with reference to Law No. 27 of 2022 on Personal Data Protection ("PDP Law"), Minister of Communication and Information No. 26 of 2016 on the Protection of Personal Data in the Electronic System ("MOCIR 20/206") and Financial Services Authority Regulation No. 22 of 2023 on Consumer and Public Protection in the Financial Services Sector ("POJK 22/2023") Guidance of the Assessment Tool Impelentation of Personal Data Protection ("the Guidance").

HCFI reserves the right to change, add or delete the Policy at any time and may notify You of such changes, addition and/or deletion through our official communication channel. Revision of this Policy may also be made in the event of a change in the regulation relating to personal data protection. You are advised to review the Policy periodically for latest information on our data processing and data processing practices. Your continued use of our Platform or access and use of Service following any changes of this Policy will constitute your acceptance of such revision.

If in the future you object to changes to the Policy, you should stop using the Platform and/or you may delete your data/account from the Platform. Please note that discontinuing use of the Platform will not delete your data and information, your data and information may only be deleted if you delete your account from the Platform, subject to the clause 8 of this Policy.

Please be informed that the types of the basis for collecting and the purpose of collecting your personal data may be different depending on the types of products and/or services you use.

This Privacy Policy applies at the time You:

  1. become a user of Our Services or customer; and/or
  2. become (i) Our prospective employee, employee, business partner, contractor, agent, and/or supplier, and/or (ii) have a legal relationship with Us for a specific purpose, such as the implementation of corporate social responsibility.
2. Definition of Personal Data

Personal data is data on individuals who are identified or can be identified individually or in combination with other information, either directly or indirectly through electronic or non-electronic systems as stipulated in the PDP Law ("Personal Data").

Personal Data that is subject to personal data processing includes the Personal Data that have been provided and will be provided to HCFI.

3. Personal Data to be Collected and Processed

HCFI believes that it is important for you to understand the types of Personal Data that will be collected and processed, which:

  1. Identification Personal profile data that includes full name, identity card number for Indonesian citizen and passport number for foreign citizens, tax identification number, gender, nationality, place and date of birth, mother;s maiden name, alias/nickname, religion, voice recording, image recording, photos, signature (wet and/or electronic) and biometric data;
  2. Correspondence data that includes address and domicile status, email, telephone number /mobile phone number and contacts emergency that includes name, connection with you, address, telephone number/mobile phone number, and email;
  3. Education and employment data that includes education level, occupation, business fields, position, division, period of work, name of the employer , workplace address, employment status, name, position and telephone number of work colleague;
  4. Family data that includes, name of the spouse, name and number of children and number of liability;
  5. Financial data that includes account number, source of income, amount of monthly and annual income, amount of monthly and annnual expenditure, transaction data, credit or financing data, data on the assets, data on the collateral, and tax data and service data from other financial institutions (such as inssurance and custodian);
  6. Digital activity data that includes IP address, your activity in HCFI's Platform, and interactions between HCFI's Platform with other applications on your electronics device;
  7. Processed Personal Data that may be received by HCFI directly from you or through other third parties; and/or
  8. Other Data that may be deemed as Personal Data under the applicable laws and regulations and in accordance with the purpose of the processing by HCFI.

Personal Data may be obtained by HCFI directly or through other third parties including through filling out forms, electronic and non-electronic submission and/or systems, QR (quick response) code scanning, filling out online surveys, or through other media related to the Platform and Services. For example, when you register to access/get and/or use the Services (including in the event that you contact Us), when you attend events and programs that We or Third Parties organize both online and offline (including during your participation in promotional and recruitment programs and/or job fairs), participating in fundraising (donations), recruitment, as well as through other activities, services, products and/or features or sourced from Third Parties, for example third parties related to the implementation of the Customer Due Diligence (CDD) process, psychological tests, interviews, and/or Background Checking or in other contexts to achieve the purposes of Processing Personal Data (including from data sources that are publicly available or provided by authorized government agencies).

In case HCFI obtains the Personal Data from other third parties and not from you as the Personal Data subject, then HCFI will inform you in accordance with the applicable laws and regulations.

Once HCFI has obtained your Personal Data, HCFI will conduct verification and if there is any inaccuracy, HCFI will inform you to request for the correction of such Personal Data within 3x24 (three times twenty four hours) as of the date such inaccurancy is found.

4. Basis for the Processing of Personal Data

The processing of Personal Data is carried out if one of the following basis for processing of Personal Data is fulfiled:

  1. HCFI must obtain explicit and legitimate consent from you;
  2. to fulfil the obligation under the agreement;
  3. to fulfil the legal obligation of HCFI in accordance with the applicable laws and regulations;
  4. to protect your vital interest;
  5. to carry out duty in the framework of public interest and public services in accordance with the applicable laws and regulations; and
  6. to fulfil other legitimate interest by taking into account the purpose, the needs and the balance of you and HCFI.
5. Purpose of the Processing of Personal Data

The processing of your Personal Data is carried out by HCFI for the following objectives:

  1. To verify your identiy;
  2. For management of products and/or Services, including profiling and scoring, for improvement service for you and HCFI risk management.
  3. To provide promotions or programs in collaboration with other parties for products and/or services that you already have.
  4. For the marketing and/or offering of products and/or Services of HCFI and/or other companies and/or third parties companies in cooperation with HCFI. We can convey offers for products and/or services owned or provided by us and/or Third Parties), through various media and/or methods, both orally and in writing, including through push notifications, social media, instant messaging applications (e.g. WhatsApp), SMS, telephone calls, emails, QR (quick response) code scans, brochures, and other relevant electronic and non-electronic media in accordance with applicable regulations (“Other Offers”);
  5. To conduct research and development and statistical analysis for identifying new trends and developing new products and/or services that reflect your interests;
  6. To detect and prevent fraudulent activity;
  7. implementation of Customer Due Diligence, anti-money laundering programs, prevention of terrorism financing and prevention of financing the proliferation of weapons of mass destruction.
  8. To maintain and develop the Platform;
  9. To investigate and resolve any of the complaints or other enquiries that you submit to the Platform;
  10. Perform collection of payments for the provision of the Services;
  11. Perform activities in connection with accounting, auditing, taxation, and reconciliation related to the provision of the Services, as well as internal administrative processes;
  12. Carry out obligations under agreements to you and/or to related Third Parties (including but not limited to vendors and partners);
  13. Prevent, detect, investigate any suspicious transactions, criminal offenses, or prohibited activities including under applicable laws and regulations;
  14. Processing your participation in any production activities, contests, games, promotions, polls or surveys;
  15. Conduct other internal activities necessary to provide the Services, such as troubleshooting software problems, bugs, operational issues, conducting data analysis, testing, and research, and to monitor and analyze usage and activity trends;
  16. Conduct activities in connection with employment, including recruitment, training, development, promotion;
  17. Conduct any activities in connection with publicity, communication, sponsorship and corporate social responsibility;
  18. Carry out corporate actions and/or other transactions, including but not limited to mergers, splits, acquisitions, consolidations, restructurings and/or other activities involving the transfer of intellectual property rights, as involve the Processing of Personal Data.
  19. For the fulfilment of regulatory obligations and/or order form the law enforcer and any other authorized institutions.

HCFI will regularly review the collection and processing of your Personal Data by HCFI to determine whether such collection and processing of your Personal Data is in accordance with the abovementioned purposes.

6. Transfer of Personal Data to Third Parties

In processing your Personal Data, HCFI may involve other thrid party controller and/or processor of your Personal Data both located within or outside the territory of the Republic of Indonesia. Such collaboration will be based on the agreement between HCFI and other third parties controller and/or processor and if there is a interrelated purposes of the processing of the Personal Data. In this case, HCFI will also ensure that such third party data controller and/or processor will also maintain the confidentiality and security of your Personal Data in accordance with the applicable laws and regulations.

In case the transfer of Personal Data to other third parties data processor located outside the territory of the republic of Indonesia, HCFI shall ensure that the destination country of the third parties data processor has an equivalent or higher level of data protection than those regulated under the PDP Law, otherwise the transfer of Personal Data shall be in accordance with the applicable laws and regulations.

For the operational and business purpose as mentioned in this Policy, HCFI may cooperate with other third parties regarding the utilization of your Personal Data. Such thrid parties includes:

  1. Research and marketing companies in relation to the promotion of our products and/or services;
  2. Information technology companies, softwares, big data analysis and machine learning, including data cleansing, data insight and credit scoring companies;
  3. Payment gateway providers, fund transfers, electronic wallets, electronic money and other payment system service providers related to the transactions carrie out on the Platform;
  4. Other service providers companies in relation to the services and/or products offered on the Platform;
  5. Professional advisor and external auditor, including legal consultant, financial consultant and other types of consultant;
  6. Companies providing processing services for systematic matching, matching, evaluation, scoring and/or monitoring activities.
  7. Governmental authority, both within and outside of the jurisdiction of the Republic of Indonesia;
  8. Other parties as required by the applicable laws and regulations.

In using the Service, You may have registered as a service user of a Third Party. In that regard, You hereby agree that the consent You provide to Us for the Processing of Personal Data pursuant to this Privacy Policy, may essentially be used for the implementation of the Processing of Personal Data by Third Parties in accordance with the terms of this Privacy Notice.

7. Rights of Personal Data Subject
  1. Right to Obtain Information on the Use of Personal Data by Third Parties

    You have the right to obtain information regarding the parties requesting your Personal Data such as the identity, the legal basis for the interest, the purpose of the request and the use of Personal Data and the accountability of the party requesting for your Personal Data. HCFI will provide access to a copy of information through HCFI official account.

  2. Right to Complete, Update and Rectify Personal Data

    You have the right to complete, update and/or rectify any incorrect and/or inaccurate Personal Data in accordance with the purpose of the processing of Personal Data.

  3. Right to Obtain Access and Copy of Personal Data

    You have the right to obtain access and copy of the Personal Data in accordance with the prevailing laws and regulations.

    In the event that you request a copy of your Personal Data information and/or details of the processing of your Personal Data, HCFI will not charge you with any additional fee, unless under certain conditions that require HCFI to charge you with additional fee as permitted by the applicable laws and regulations.

  4. Right to Withdraw Consent to the Processing of Personal Data

    You have the right to withdraw your consent that have been granted to HCFI for the processing of your Personal Data.

  5. Right to Use and Send Personal Data to Other Personal Data Controller

    You have the right to use and send your Personal Data held by HCFI to a third parties insofar the system used can be communicated in a safe manner.

  6. Right to Terminate the Processing, Erase, and/or Destroy Personal Data

    You have the right to terminate the processing, deletion and/or destruction of your Personal Data by contacting HCFI through the available communication methods and must be carried out within reasonable time period for HCFI to process such request.

    Please be informed that the termination, deletion, and/or destruction of your Personal Data may influence HCFI's ability to provide you with products and/or services that are suitable with you and in connection with the agreement that has been entered into by HCFI and you or between HCFI and other third parties that may result in the termination of services that you receive and/or the termination of one or a number of agreement with HCFI and/or violation to one or a number of your obligations under the agreement with HCFI.

    Termination of processing, deletion and/or destruction of Personal Data may result in you giving the right to terminate the agreement and/or declare that and your obligations to HCFI becomes due and payable. Any losses incurred in the implementation of your right to terminate the processing, deletion and/or destruction of Personal Data will become your responsibility.

  7. Right to Object a Decision-Making Action

    You have the right to object a decision-making action that is based solely on automated processing, including profiling, which has legal consequences or have a siginificant impact on you.

  8. Right to Postpone and Limit

    You have the right to postpone or limit the processing of Personal Data in a proportionate manner in accordance with the purposes of processing the Personal Data.

  9. Right to Sue and Ask for Compensation

    You have the right to sue and ask for compensation for the violation of your Personal Data to the extent provided under the applicable laws and regulations.

  10. Right to Obtain and/or Use Personal Data

    You have the right to obtain and/or use your Personal Data from HCFI in the form that is in accordance with the structure and/or form that is generally used.

If you would like to make a request to exercise your rights as set out above, you are welcome to do so through the channels/contacts listed in Section J of this Privacy Policy.

HCFI will conduct a verification and screening process for all your requests in exercising your rights as a Personal Data subject. In order to do so against your authority to submit a request, HCFI may ask you to provide supporting information or documentation to strengthen the request. Once verified, HCFI will inform you regarding the consequences for exercising your rights. After obtaining your consent to the consequences, HCFI will enforce your request within the time limit specified by the applicable laws and regulations.

The implementation of the rights of Personal Data subject will be carried out if there is a written application that is submitted to HCFI through this Platform or by contacting us at: (input email, telp number of address of HCFI).

However, please understand that based on applicable laws and regulations and under certain conditions, we have the right to refuse your request to exercise your rights as described above, including to delete or destroy some or all of your Personal Data that are within our control, if this is required or permitted based on applicable laws and regulations, especially if the request may have an impact on the following matters:

  1. The interest of national security and defense;
  2. The interest of law enforcement process;
  3. Public interest in the context of state administration;
  4. The interest of supervision in the financial service sector, monetary, payment system and financial system stability in the context of statea dministration.
  5. The interest of statistic and scientific research.
8. Storage, Retention and Security of Personal Data

HCFI may transmit, store, use and process your Personal Data on servers located in designated data centers. Such data centers may be managed by third parties in accordance with applicable laws and regulations. In such case, HCFI will ensure that such thrid parties will also have to maintain the confidentiality and security of your Personal Data.

For the improvement of quality and/or provision of services or purposes of Personal Data processing as described in this Policy. HCFI may record your Personal Data in our database in accordance with the provisions of regulations within and outside the financial services sector and laws and regulations applicable to HCFI. After your Personal Data is no longer needed, HCFI will take steps that we understand are necessary, including deleting, destroying, anonymizing, and/or preventing access or processing of your Personal Data, unless if there is a legal obligation that we must comply with (for example, certain laws requiring HCFI to retain transaction records for a certain period of time) or in case such retention is for our legal position (for example in connection with litigation, investigations and/or court decisions).

HCFI may disclose your Personal Data to government institutions if it is required by the relevant laws and regulations or at the request of such government institutions for the purpose of law enforcement.

The security of your Personal Data is important to HCFI. HCFI will always strive to ensure that your personal information and data will be protected against unauthorized access. HCFI has implemented appropriate electronic and managerial measures in order to safeguard, protect and secure your Personal Data. All Personal Data provided by you are only accessible by the qualified authorized personnel of HCFI or authorized third parties and such personnel shall be instructed to observe the terms of this Policy when accessing such Personal Data.

In the event of data breach, HCFI will provide a written notification no later than 3x24 (three times twenty-four) hours to you which contains the disclosed personal Data, when and how the Personal Data are disclosed and the efforts taken by HCFI to recover from the disclosure of your Personal Data.

9. Representations and Warranties

By registering, accessing and/or using the Platform and Service, you are deemed to have read, understood and given express consent to our Policy. You also represent and warrant that the Personal Data you provide to HCFI is clear, accurate, true, complete, not missleading, legally obtained and you have the rights to provide it to HCFI.

You represents and warrants that you may provide HCFI with Personal Data of other parties (such as the Personal Data of your spouse, family member and other parties you represent). In this case, you have obtained explicit consent from such individuals as the Personal Data subject and we understand that we hereby rely on your representation and warranty to collect and process Personal Data of such individuals. HCFI is not responsible if the Personal Data of other parties that you provide is obtained unlawfully and HCFI may request the evidence of such consent from you at any time as necessary.

10. Governing Law and Language

This Policy is governed by the laws of the Republic of Indonesia and may be translated into languages other than Bahasa Indonesia. If there is any inconsistency between the Bahasa Indonesia version of this Privacy Policy and any other language version, the Bahasa Indonesia version shall prevail.

11. Dispute Resolution Forum

In case of dispute arising out from the implementation of this Policy then such dispute must be settled through arbitration at Alternative Dispute Resolution Institutions in the Financial Services Sector (Lembaga Alternatif Penyelesaian Sengketa Sektor Jasa Keuangan - "LAPS SJK").

12. Contact Us

If you still have questions regarding Policy or you wish to gain access to and/or make corrections to your Personal Data, to file a complaint and/or to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and personal information, please contact us or write to us at:

Customer Care : 1500708 WhatsApp Hyundai Finance CS : 08111500708 Website : www.hyundaicapital.co.id Email : [email protected]