PRIVACY POLICY
This Privacy Policy explains how PT SUOM PROPERTY AND MANAGEMENT collects, uses and protects your personal data when you visit suomvillas.com or book a stay at Suom Villas. We process personal data in accordance with Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection and its implementing regulations.
1. Who we are. The personal data controller is PT SUOM PROPERTY AND MANAGEMENT, Pererenan, Kec. Mengwi, Kabupaten Badung, Bali 80351, Indonesia, Business Identification Number (NIB) 1907220080129.
E-mail for data requests: booking@suom.co.
Phone and WhatsApp: +62 813 3363 353.
2. Data we collect. We collect your name, email, phone number and country; booking details such as check-in and check-out dates, number of adults and children, villa type and special requests; payment details, which are processed by Cloudbeds and its payment provider (we do not store full card numbers); passport or ID details required for guest registration; messages you send us by email, WhatsApp or Instagram; and technical data such as IP address, approximate country, browser, device and pages visited, collected through cookies. We do not intentionally collect specific (sensitive) personal data. Children's data is limited to the number and age of children in a booking, provided by a parent or guardian.
3. Why we use your data. We use your data to answer enquiries and prepare offers, at your request; to process bookings, payments and your stay, as performance of a contract; for guest registration and tax records, as a legal obligation; to show prices in your local currency and to keep the website secure, on the basis of legitimate interest; and for website analytics and marketing messages, only with your consent, which you can withdraw at any time.
4. Who we share data with. We share personal data only with providers that help us run the website and the villas, under terms that require them to protect it: Cloudbeds (booking engine and payments, United States); Tilda Publishing (website hosting, forms and statistics); Google (Tag Manager, Analytics and Fonts, United States); ipwho.is and ipapi.co (country detection); Meta (WhatsApp and Instagram, when you contact us there); and online travel agencies, if you book through them. We may disclose data to Indonesian authorities when the law requires it. We do not sell personal data.
5. Transfers outside Indonesia. Some of these providers store data outside Indonesia. Before a transfer we make sure the receiving country offers protection equal to or higher than Indonesian law, or that adequate and binding safeguards are in place. Otherwise we transfer data only with your consent.
6. Retention. We keep enquiries that do not lead to a booking for 12 months; booking, payment and stay records for 10 years, as required by Indonesian tax and accounting rules; marketing consent until you withdraw it; analytics cookies for up to 14 months; and the country detected for pricing for 24 hours in your browser. After that we delete or anonymise the data.
7. Your rights. You have the right to get information about how we process your data; to access and receive a copy of it; to correct, complete or update it; to end processing and have it deleted or destroyed; to withdraw consent; to object to automated decision-making; to delay or restrict processing; to receive your data in a common format and transfer it to another controller; and to claim compensation and lodge a complaint with the Indonesian personal data protection authority. To use these rights, email booking@suom.co. We confirm receipt within 3 x 24 hours and complete requests within the time limits set by law. We may first need to verify your identity.
8. Cookies. We use strictly necessary cookies to run the website and, only with your consent, analytics cookies (Google and Tilda statistics). You can accept or decline non-essential cookies in the banner and change your choice at any time in your browser settings.
9. Local currency pricing. To show prices in your currency, the website sends your IP address to ipwho.is (or ipapi.co as a backup) to detect your country. Only the country code is kept, in your browser, for 24 hours. We do not store your IP address for this purpose.
10. Security and breaches. We protect personal data with technical and organisational measures, including encrypted connections and limited staff access. If a data breach occurs, we will notify affected guests and the authority in writing within 3 x 24 hours.
11. Changes and language. We may update this policy; the current version and its date are always published on this page. This policy is available in English and Bahasa Indonesia. If the versions differ, the Bahasa Indonesia version prevails.
12. Contact. PT SUOM PROPERTY AND MANAGEMENT, Pererenan, Kec. Mengwi, Kabupaten Badung, Bali 80351, Indonesia. Email: booking@suom.co.
Effective date: 23 December 2024.
1. Who we are. The personal data controller is PT SUOM PROPERTY AND MANAGEMENT, Pererenan, Kec. Mengwi, Kabupaten Badung, Bali 80351, Indonesia, Business Identification Number (NIB) 1907220080129.
E-mail for data requests: booking@suom.co.
Phone and WhatsApp: +62 813 3363 353.
2. Data we collect. We collect your name, email, phone number and country; booking details such as check-in and check-out dates, number of adults and children, villa type and special requests; payment details, which are processed by Cloudbeds and its payment provider (we do not store full card numbers); passport or ID details required for guest registration; messages you send us by email, WhatsApp or Instagram; and technical data such as IP address, approximate country, browser, device and pages visited, collected through cookies. We do not intentionally collect specific (sensitive) personal data. Children's data is limited to the number and age of children in a booking, provided by a parent or guardian.
3. Why we use your data. We use your data to answer enquiries and prepare offers, at your request; to process bookings, payments and your stay, as performance of a contract; for guest registration and tax records, as a legal obligation; to show prices in your local currency and to keep the website secure, on the basis of legitimate interest; and for website analytics and marketing messages, only with your consent, which you can withdraw at any time.
4. Who we share data with. We share personal data only with providers that help us run the website and the villas, under terms that require them to protect it: Cloudbeds (booking engine and payments, United States); Tilda Publishing (website hosting, forms and statistics); Google (Tag Manager, Analytics and Fonts, United States); ipwho.is and ipapi.co (country detection); Meta (WhatsApp and Instagram, when you contact us there); and online travel agencies, if you book through them. We may disclose data to Indonesian authorities when the law requires it. We do not sell personal data.
5. Transfers outside Indonesia. Some of these providers store data outside Indonesia. Before a transfer we make sure the receiving country offers protection equal to or higher than Indonesian law, or that adequate and binding safeguards are in place. Otherwise we transfer data only with your consent.
6. Retention. We keep enquiries that do not lead to a booking for 12 months; booking, payment and stay records for 10 years, as required by Indonesian tax and accounting rules; marketing consent until you withdraw it; analytics cookies for up to 14 months; and the country detected for pricing for 24 hours in your browser. After that we delete or anonymise the data.
7. Your rights. You have the right to get information about how we process your data; to access and receive a copy of it; to correct, complete or update it; to end processing and have it deleted or destroyed; to withdraw consent; to object to automated decision-making; to delay or restrict processing; to receive your data in a common format and transfer it to another controller; and to claim compensation and lodge a complaint with the Indonesian personal data protection authority. To use these rights, email booking@suom.co. We confirm receipt within 3 x 24 hours and complete requests within the time limits set by law. We may first need to verify your identity.
8. Cookies. We use strictly necessary cookies to run the website and, only with your consent, analytics cookies (Google and Tilda statistics). You can accept or decline non-essential cookies in the banner and change your choice at any time in your browser settings.
9. Local currency pricing. To show prices in your currency, the website sends your IP address to ipwho.is (or ipapi.co as a backup) to detect your country. Only the country code is kept, in your browser, for 24 hours. We do not store your IP address for this purpose.
10. Security and breaches. We protect personal data with technical and organisational measures, including encrypted connections and limited staff access. If a data breach occurs, we will notify affected guests and the authority in writing within 3 x 24 hours.
11. Changes and language. We may update this policy; the current version and its date are always published on this page. This policy is available in English and Bahasa Indonesia. If the versions differ, the Bahasa Indonesia version prevails.
12. Contact. PT SUOM PROPERTY AND MANAGEMENT, Pererenan, Kec. Mengwi, Kabupaten Badung, Bali 80351, Indonesia. Email: booking@suom.co.
Effective date: 23 December 2024.