This page explains what data I ask for when you request a document, what that data is used for, and how long I keep it.
Who Handles Your Data
Ali Mulyagusdin, the owner and writer of mulyagusdin.com. I handle this data myself, not through a team or a company. The contact address for this is dokumen.mulyagusdin@gmail.com.
The Data I Ask For
- full name as it appears on your national identity card
- the same email address you use to subscribe to the blog
- an active WhatsApp number
- your purpose in requesting the document
- your agreement to the document use terms
I do not ask for your national identity number and I do not ask for a photo of your identity card.
What the Data Is Used For
Reviewing your request, checking that your email address is registered as a blog subscriber, sending or sharing the document, putting your identity on the copy you receive, and following up if the use terms are breached.
I do not sell your data, do not use it for advertising, and do not share it with anyone else, unless the law requires it.
My Basis for Processing the Data
The consent you give when you submit the form. You may withdraw that consent at any time. Once it is withdrawn, your access to the document ends as well.
Where the Data Is Stored
Form entries are stored on WordPress.com, a service run by Automattic, whose servers may sit outside Indonesia. Request records and document copies are kept in my own cloud storage with restricted access.
How Long the Data Is Kept
Twenty four months from your most recent request, after which it is deleted.
Your Rights and My Response Times
Indonesian Law Number 27 of 2022 on Personal Data Protection gives you the right to complete, update, and correct your data (Article 6), to access it (Article 7), to end processing and have it deleted (Article 8), and to withdraw consent (Article 9).
Article 30 paragraph (1) of that law reads, in the Indonesian original: “Pengendali Data Pribadi wajib memperbarui dan/atau memperbaiki kesalahan dan/atau ketidakakuratan Data Pribadi paling lambat 3 x 24 (tiga kali dua puluh empat) jam terhitung sejak Pengendali Data Pribadi menerima permintaan pembaruan dan/atau perbaikan Data Pribadi.” In plain English: a data controller must update or correct errors in personal data within 3 x 24 hours of receiving the request. Paragraph (2) requires me to tell you the result.
Other requests, such as deleting your data or withdrawing consent, are answered within seven working days. Send your request to dokumen.mulyagusdin@gmail.com.
If This Page Changes
Changes to this notice are recorded at the bottom of the page, with the date. The version that applies to your request is the one live when you submitted the form.