Privacy Policy and
Terms of Use

Indonesia Youth Council For Tobacco Control

Privacy Policy, Terms of Usage, and Cookies Consent

Last Updated 22 August 2021

Indonesian Youth Council For Tobacco Control are committed to the lawful, fair, and transparent collection and use of personal data. This notice is intended to help you understand how we collect and use your personal data, as well as how we share, store, and protect that data. If at any time you have questions about this policy, terms or consent, please let us know by contacting us at the information listed below in the Social Media section.

We may update this notice and any supplemental privacy notices to reflect changes in our practices and applicable law. We will post a notice of any material updates on our sites.

What information is collected and how

Data you provide about yourself

We collect your personal data when you voluntarily provide it to us. For example, you may give us: your email address, country of residence, and areas of interest if you choose to receive newsletters, updates, or other information from us; your contact information, and any other personal data you choose to include, if you email, text, or instant message us, or contact us through our sites; and any personal data contained in, or included with, any proposal documents, feedback, comments, photos, videos, or other information you submit via online portals, forms, surveys, or interactive portions of our sites.

It is always your choice whether to provide this personal data. However, some personal data must be provided to participate in certain programs, activities, or events (such as to sign up for a newsletter, apply for a job, or register to participate in one of our events), so the decision not to provide information might limit or eliminate certain functions of our sites or your ability to participate. Please do not disclose more personal data than is requested.

Personal data you provide about others

Do not provide personal data about others unless you are authorized or required to do so by contract or applicable law. You may provide personal data on behalf of another person if you have provided them with a copy of this notice and any applicable supplemental privacy notice, and obtained their explicit consent. We may ask you to provide evidence of that notice and consent.

Data we receive from third parties and other sources

We may receive personal data about you from other sources, including your company/organization, professional references, publicly-available sources, third-party analytics providers, and other third parties. For example, we may receive your personal data if: someone at your company/organization designates you as a contact person for that company/organization or includes information about you in proposal documents; another visitor includes it in any feedback, comments, photos, videos, or other information submitted via online portals, electronic forms, surveys, or interactive portions of our sites; or one of our employees or service providers provides or a third party acting on apparent authority provides it to us when registering you to access our facilities or our sites, apply for a job, or participate in one of our events.

How is the information used

Purposes

We may use your personal data to: send you information that you have expressly chosen to receive [with your consent]; review and respond to proposal documents, feedback, comments, photos, videos, or other information you submit via online portals, electronic forms, surveys, or interactive portions of our sites [for our legitimate interests and/or to perform a contract with you]; administer and inform our program strategies and charitable activities [for our legitimate interests]; administer, safeguard, and improve our sites, systems, facilities, events, and other business operations [for our legitimate interests]; protect our rights and the safety of others [for our legitimate interests]; contribute to our archive of information in the public interest [for our legitimate interests]; and/or comply with applicable law, court order, subpoena, or legal process served on us [to comply with legal obligations].

Additional purposes

Additional purposes for using your personal data may be described in a supplemental privacy notice.

Legal bases under the GDPR, UK GDPR, or POPIA

If you are in the European Economic Area (EEA), the United Kingdom (UK) or South Africa, we will collect and use your personal data only if we have one or more legal bases for doing so under the GDPR, UK GDPR, or POPIA. The legal bases depend on your interaction with us and our sites. This means we collect and use your personal data only where: you have given your consent for one or more specific purposes; it is necessary to perform a contract we are about to enter into or have entered into with you; it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; it is necessary to protect the vital interests of you or another natural person; or it is necessary to comply with a legal obligation. We will indicate the legal basis or bases on which we are relying for each purpose. Where we are relying on consent as the legal basis, we will notify you and seek additional consent before using your personal data for a new purpose that is inconsistent with the original purpose for which we collected it.

How is the information stored and protected

Storage and transfers

Your personal data may be stored in your region or in any other country where we or our service providers have facilities. We may also allow employees and service providers located around the world to access personal data as provided in this notice. If your personal data is subject to GDPR, UK GDPR, or POPIA, we will ensure your legal rights and protections travel with any such “transfer” of your personal data as required by applicable law. We do this by signing “standard contractual clauses” approved by the European Commission that give personal data the same protection it has in the European Union, and/or otherwise requiring that our service providers protect personal data in accordance with applicable law. We will also comply with similar applicable laws regarding the storage and transfer of personal data in other jurisdictions where your personal data may be collected or provided.

Storage period

We will store your personal data until it is no longer needed to fulfill the purpose(s) for which it was collected or as otherwise required or permitted by law. After such time, we will either delete or anonymize your personal data or, if this is not possible, we will securely store your personal data and isolate it from any further use until deletion is possible. We may dispose of any data in our discretion without notice, subject to applicable law. Please contact us if you would like more details regarding our retention periods for different categories of personal data.

Protection

As the transmission of data via the internet is not completely secure, we cannot guarantee the security of your information transmitted to our sites and any such transmission is at your own risk. However, we maintain appropriate technical and organizational measures, including performing regular self-assessments, to prevent unauthorized disclosure of, or access to, personal data. We limit access to personal data and require that employees authorized to access personal data maintain the confidentiality of that data. We hold our service providers to at least the same data privacy and security standards to which we hold ourselves. Our standard information security requirements for service providers are available here.

Organization contact information

(Pending content ...)

Use of cookies, log files and tracking

This notice describes the different types of cookies and similar technologies we may use in connection with our sites. Unless you have adjusted your browser setting so that it will refuse cookies, cookies may be issued when you visit our sites. For more information, see managing cookies and similar technologies below. By continuing to use our sites, you consent to the relevant cookies and similar technologies being placed on your computer or device.

Cookies and similar technologies we use

Cookies

Our sites may use cookies, which are small text files stored on your computer or device when you access a website. More information about cookies is available at www.aboutcookies.org. We may use cookies to: (1) allow you to use the sites without having to re-enter your user name and password; (2) understand how you engage with the sites and to enhance or personalize your experience, including across devices; (3) monitor the site usage; (4) manage the sites; and (5) improve the sites and our services, including providing you with interest-based ads. For more information on our advertising, see above: “Interest-based advertising."

We may also use web beacons on our sites, in our emails, and in our advertisements on other websites. Web beacons are tiny graphic images that are used to collect information about your visit to our sites, such as the pages you view and the features you use, as well as information about whether you open and/or act upon one of our emails or advertisements. We may also collect the URL of the website you visited immediately before coming to our sites. Web beacons help us analyze our site visitors' behavior and measure the effectiveness of our sites and our advertising. We may work with service providers that help us track, collect and analyze this information.

Click-through URLs

If you “opt in” to receive newsletters, updates, or other information from us, our emails may use a “click-through URL” linked to content on our sites. When you click one of these URLs, they pass through a separate web server before arriving at the destination page on our sites. We use this click-through data to help us understand how recipients respond to, or interact with, our emails.

Third-party cookies and similar technologies

Third-party analytics services

We use third-party analytics services, including Google Analytics and others, to collect information about your use of our sites and enable us to improve our sites. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners. Google Analytics and other third-party analytics services use cookies and similar technologies to collect information about use of our sites and to report website trends to us, without identifying individuals to us. We use this information to see the overall patterns of usage on our sites, help us record any difficulties you have with our sites, and tell us whether our communication efforts are effective. We may also link the information provided by third party analytics services with the information we collect, or you provide in other contexts on our site (newsletters, etc.), to personalize, connect and streamline your experience when visiting our sites.

Social media and video sites

If you choose to share our digital content with friends through social networks, such as Facebook and Twitter, or to watch a video posted to a third-party media site (such as YouTube), you may be sent cookies from these third-party websites. We do not control the setting of these cookies, so please check the third-party websites for more information about their cookies and how to manage them.

How a user can opt out of data collection/usage

Cookies

You do not need to have cookies enabled to browse our sites unless you want us to remember you and your preferences when you return. If you prefer not to allow cookies, most cookies can be managed or blocked through your browser. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features that are currently on our sites, or that we may put on our sites in the future. Note that browser-management tools for cookies are outside of our control and we cannot guarantee their effectiveness. More information about managing cookies is available at the following links:

Click-through URLs

If you prefer not to be tracked in this way, please do not click text or graphic links in emails you receive from us.

Third-party analytics services

You can opt out of data collection or use by Google and other third-party analytics services we may use on some of our sites at the following links:

Do-not-track requests

There is no standard for how online service should respond to “Do Not Track” signals or other mechanisms that may allow you to opt out of the collection of information across networks of websites and online services. Therefore, we do not honor “Do Not Track” signals. As standards develop, we will revisit this issue and update this notice if our practices change. More information about Do Not Track is available at www.allaboutdnt.org.