← Back to Home

Privacy Policy

Last updated: February 27, 2026

1. Introduction

This Privacy Policy describes how the Creative Economy Survey of West Java ("Survei Ekonomi Kreatif Jawa Barat"), operated by the Department of Tourism and Culture of West Java Province (Dinas Pariwisata dan Kebudayaan Provinsi Jawa Barat), hereinafter referred to as "we", "us", or "our", collects, uses, stores, and protects your personal data when you use our website at ekrafjabar.official.id (the "Service").

This policy is prepared in accordance with Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi / UU PDP) of the Republic of Indonesia, as well as internationally recognized data protection principles.

2. Data Controller

The Data Controller responsible for your personal data is:

  • Organization: Dinas Pariwisata dan Kebudayaan Provinsi Jawa Barat
  • Email: ekraf.dispardbudjabar@gmail.com
  • Website: ekrafjabar.official.id

3. Personal Data We Collect

In the course of providing the Service, we collect the following categories of personal data:

3.1 Data Provided Directly by You

  • Institution Information: Agency/institution name, city/regency
  • Contact Person Information: Full name, position/title
  • Communication Data: Email address, WhatsApp phone number
  • Access Credentials: A self-created 6-character PIN for survey access
  • Survey Responses: Answers to survey questions, including text, numerical values, selected options, and uploaded files

3.2 Data Collected Automatically

  • Visitor Logs: IP address, browser type, pages visited, and visit timestamps for analytics and security purposes

4. Legal Basis and Purpose of Processing

In accordance with Article 20 of UU PDP, we process your personal data based on the following legal grounds:

  • Legitimate Interest (Article 20(2)(f)): To conduct a government-mandated survey on the state of the creative economy in West Java, supporting policy-making and regional development.
  • Consent (Article 20(2)(a)): By voluntarily submitting your data via the survey form, you provide explicit consent for the processing of your personal data for the stated purposes.
  • Performance of Public Duties (Article 20(2)(d)): Processing is necessary for the performance of duties carried out in the public interest by the Department of Tourism and Culture.

Your personal data is processed for the following specific purposes:

  1. To identify and authenticate survey respondents
  2. To collect, aggregate, and analyze survey responses
  3. To generate statistical reports on the creative economy in West Java
  4. To communicate survey-related information to respondents
  5. To enable respondents to resume partially completed surveys
  6. To store uploaded supporting documents securely via Google Drive

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Data is stored securely using Supabase (a cloud database platform with Row Level Security and encryption at rest)
  • Uploaded files are stored on Google Drive with access-controlled sharing settings
  • Communication between your browser and our servers is encrypted using HTTPS/TLS
  • Administrative access to the dashboard is restricted to authorized personnel only

Your data is retained for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Indonesian law. Upon completion of the survey program, data will be anonymized or deleted in accordance with Article 47 of UU PDP.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. Your data may be shared only in the following circumstances:

  • Service Providers: With trusted third-party service providers (Supabase, Google Drive, Vercel) strictly for the purpose of operating the Service, subject to data processing agreements
  • Government Authorities: When required by applicable Indonesian law, regulation, or legal process
  • Aggregated/Anonymized Data: We may share anonymized, aggregated statistical data that cannot identify individual respondents for research and policy purposes

7. Your Rights Under UU PDP

In accordance with Chapter IV of UU PDP (Articles 5–16), you have the following rights regarding your personal data:

  • Right to Information (Article 5): The right to be informed about the collection and processing of your data
  • Right to Access (Article 6): The right to access and obtain a copy of your personal data
  • Right to Rectification (Article 8): The right to correct inaccurate or incomplete data
  • Right to Erasure (Article 8): The right to request deletion of your personal data, subject to legal obligations
  • Right to Withdraw Consent (Article 9): The right to withdraw your consent at any time
  • Right to Object (Article 10): The right to object to processing of your personal data
  • Right to Restriction (Article 11): The right to request restriction of processing in certain circumstances
  • Right to Data Portability (Article 13): The right to receive your data in a structured, commonly used format

To exercise any of these rights, please contact us at ekraf.dispardbudjabar@gmail.com. We will respond to your request within 3 x 24 hours as required by Article 46 of UU PDP.

8. Cookies and Tracking

Our Service uses essential browser local storage to maintain your survey session (e.g., to remember your identity and allow you to resume the survey). We do not use third-party advertising cookies or tracking technologies.

9. Children's Privacy

This Service is not intended for individuals under the age of 17. We do not knowingly collect personal data from children. In accordance with Article 25 of UU PDP, special protections apply to the personal data of children.

10. Cross-Border Data Transfer

Some of our service providers (Supabase, Google, Vercel) may store data on servers located outside of Indonesia. In such cases, we ensure that the receiving country provides an equivalent level of personal data protection as required by Article 56 of UU PDP, or that appropriate contractual safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: ekraf.dispardbudjabar@gmail.com
  • Organization: Dinas Pariwisata dan Kebudayaan Provinsi Jawa Barat
  • Website: ekrafjabar.official.id