Privacy Policy — Vehicle QR Code Scanner Application

1. General Information

The Vehicle QR Code Scanner application is designed to record and verify vehicles entering and exiting the manufacturing area owned by PT. Kaldu Sari Nabati Indonesia. This policy applies to all users of the application, including drivers, employees, and authorized third parties.

2. Data We Collect

We may collect the following data when the application is used:

• Vehicle data: license plate number, vehicle type, and vehicle photo (if required).
• QR code data: QR ID, scan timestamp, and checkpoint location (gate ID or zone).
• Driver/validator data: name, ID number or employee number (if relevant), digital signature, or verification record.
• Technical data: device information (type, OS version), IP address, and activity log metadata for operational and security purposes.
• Proof photos (optional): photos of vehicles or documents uploaded during entry/exit processes.

3. Purpose and Legal Basis for Processing

We process this data for the following purposes:

• To manage and record vehicle entry and exit within the manufacturing area.
• To verify the identity of vehicles and drivers for safety and compliance purposes.
• To enhance the physical security of company facilities.
• For internal reporting, audits, and compliance with company regulations.
• To detect and prevent misuse or security incidents.

The legal basis for processing includes the performance of contractual obligations and the Company’s legitimate interest in maintaining operational and asset security.

4. Data Retention and Storage

We retain data only for as long as necessary to fulfill its collection purposes or as required by law or company policy. Typical retention periods include:

• Activity and QR scan logs: retained for up to one (1) year by default, unless otherwise required for audit or compliance.
• Proof photos and documents: retained for one (1) year or until related incidents are resolved.

If you wish to request deletion or review of your data, please contact us (see Contact Us section below).

5. Disclosure and Third Parties

We do not sell personal data to third parties. Data may be shared with limited third parties for operational purposes, such as:

• IT service providers supporting storage or maintenance of the application.
• Law enforcement authorities if required by law or official request.
• Internal security and company audit teams.

All third parties receiving data are required to maintain confidentiality and comply with our data protection standards.

6. Data Security

We implement appropriate technical and organizational measures to protect data from unauthorized access, loss, or alteration. These include encrypted transmissions, role-based access control, and activity logging. However, no method of transmission or storage is completely secure, and we continuously review our practices to strengthen data protection.

7. User Rights

Users have the right to:

• Request access to personal data we hold.
• Request correction of inaccurate or incomplete data.
• Request deletion of data within legal and operational limits.
• Object to or restrict processing for certain purposes, where applicable by law.

To exercise any of these rights, please contact us at the email listed in the Contact section.

8. Cookies and Related Technologies

This application does not use traditional browser cookies, as it is primarily used on mobile or terminal devices. However, backend systems may utilize technical data storage mechanisms for operational and analytical purposes. Such information is purely technical and not used to identify users directly unless necessary.

9. Integration with Third Parties

If the application integrates with third-party systems (e.g., attendance systems, gate automation, or cloud storage), data processing will also be subject to those third parties’ privacy policies. We encourage users to review such policies when applicable.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through in-app updates or official notifications. The effective date of the latest version will be listed at the end of this document.

11. Contact Us

For questions, access requests, or privacy-related inquiries, please contact:

• PT. Kaldu Sari Nabati Indonesia
• Address: Jl. Soekarno-Hatta No.112, Babakan Ciparay, Kec. Babakan Ciparay, Kota Bandung, Jawa Barat 40223