Privacy Policy

PT Bank Ganesha Tbk fully recognizes that Personal Data is one of your most valuable assets. Therefore, Bank Ganesha is committed to maintaining the confidentiality and protection of your Personal Data in connection with your use of the banking products, services, and/or facilities offered by Bank Ganesha.

Bank Ganesha implements best practices and policies to safeguard and protect the privacy and security of your Personal Data in accordance with applicable Personal Data Protection laws, regarding the processing of data related to the use of Bank Ganesha's banking products and/or services.

Furthermore, this Privacy Policy applies to all owners of Personal Data who relate to the use of banking products and/or services.

1. Purpose and Scope of the Privacy Policy

This Privacy Policy sets forth the policies and practices implemented by Bank Ganesha as the Personal Data Controller in obtaining, collecting, processing, analyzing, correcting, updating, disseminating, displaying, transferring, disclosing, deleting, and destroying your Personal Data in connection with the use of banking products and/or services.

2. Rights of the Data Subject

As a Data Subject, you have the right to:

• Obtain information regarding identity clarity, legal grounds, the purpose of requesting and using Personal Data, and the accountability of the party requesting the Personal Data.

• Complete, update, and/or rectify errors and/or inaccuracies in your Personal Data in accordance with the purposes of Personal Data processing.

• Obtain access and acquire a copy of your Personal Data in accordance with the provisions of laws and regulations.

• Terminate the processing, delete, and/or destroy your Personal Data in accordance with applicable laws and regulations.

• Withdraw your consent to the processing of Personal Data that has previously been given to the Personal Data Controller.

• Object to decision-making actions based solely on automated processing, including profiling, which produces legal consequences or significantly impacts the Data Subject.

• Postpone or restrict the processing of Personal Data proportionally in accordance with the purposes of Personal Data processing.

• Exercise other rights as a Data Subject regarding the processing of Personal Data as referred to in the prevailing laws and regulations.

3. Legal Grounds and Consent for Personal Data Processing

In processing the Personal Data of Data Subjects, Bank Ganesha has legally obtained your consent and/or relies on other valid legal bases in accordance with applicable laws and regulations.

4. Personal Data Processed by Bank Ganesha

Bank Ganesha obtains and collects information that identifies and/or can be identified either independently or combined with other information, directly or indirectly through electronic and/or non-electronic systems related to such information, strictly limited to the services provided.

Personal Data collected by Bank Ganesha may be provided by the Data Subject directly or obtained from third parties (for example, when the Data Subject registers or uses the services, contacts customer service, or through Bank Ganesha's partners). Bank Ganesha collects Personal Data for various lawful purposes permitted by the prevailing laws and regulations of the Republic of Indonesia.

5. Storage of Personal Data

Bank Ganesha is committed to storing your Personal Data with the highest standards of protection for as long as necessary to provide the services. Certain Personal Data may also be managed, processed, and stored by third parties cooperating with Bank Ganesha to maintain service performance, while complying with obligations regarding access and supervisory effectiveness in accordance with applicable laws.

Bank Ganesha will store the aforementioned Personal Data as long as required to achieve the purpose for which the data was collected, while you continue to use the services, or as long as such storage is required or permitted by Bank Ganesha's data retention policy and the prevailing laws and regulations of the Republic of Indonesia.

Bank Ganesha will cease to store your Personal Data, or eliminate the means by which the Personal Data can be associated with you, promptly upon determining that the purpose of collection is no longer fulfilled by retaining such data, and retention is no longer necessary for legal and business purposes.

6. Processing of Personal Data

Bank Ganesha will not sell, exchange, display, announce, transfer, disseminate, and/or disclose your Personal Data and any information relating to customers, visitors, or users of the bank services to unauthorized third parties without your consent, unless mandated by law or authorized government institutions.

The Data Subject is responsible for maintaining the confidentiality of their Personal Data details and must always secure and take responsibility for the devices used to access Bank Ganesha's services.

Customers hereby acknowledge and, if required by applicable Personal Data Protection regulations, expressly consent that Personal Data obtained and collected by Bank Ganesha, together with relevant transaction information, may be disclosed to authorized government institutions or other parties based on statutory requirements or valid cooperation agreements.

7. Access to Personal Data

Bank Ganesha is committed to fulfilling the Data Subject's right to access Personal Data collected and processed by Bank Ganesha. In fulfilling requests for access to Personal Data, Bank Ganesha reserves the right to reject a request if it meets one or more of the following conditions:

• Endangering the safety, security, or physical/mental well-being of the Data Subject and/or others.

• Resulting in the disclosure of Personal Data or confidential information belonging to other parties.

For further information regarding requests for Personal Data access, you may contact the official communication channels designated by the Bank.

8. Correction and Updating of Personal Data

If you find any errors in your Personal Data caused by inaccuracies, or if an update is required, you may request Bank Ganesha to rectify, complete, and/or update your Personal Data managed by the Bank by contacting the designated communication channels.

In the event of inaccuracies in the provision of your Personal Data, Bank Ganesha reserves the right to suspend or terminate services and/or transactions based on its assessment and professional discretion.

Bank Ganesha urges you to actively ensure the accuracy and updating of your Personal Data.

9. Deletion and Destruction of Personal Data

In accordance with applicable laws and regulations, Bank Ganesha's data retention policies, or upon your written request, Bank Ganesha may delete and/or destroy your Personal Data from its systems so that the data no longer identifies you, except in the following cases:

• Where it is necessary to retain Personal Data to comply with legal obligations, future evidentiary requirements, tax, audit, and accounting purposes. Bank Ganesha will retain the necessary Personal Data while you use the Bank's services or for the period required by prevailing laws and regulations.

• The Personal Data remains within the retention period mandated by applicable laws and regulations.

Regarding the destruction of your Personal Data from the system (right to be forgotten), a formal written request submitted to the Bank is required for the data to be purged from Bank Ganesha's systems.

10. Security of Personal Data

The confidentiality of your Personal Data is a top priority for Bank Ganesha. Bank Ganesha is committed to deploying best efforts to protect and secure Personal Data from unauthorized access, collection, processing, analysis, storage, disclosure, rectification, and deletion.

In the event of illegal access and activities compromising the confidentiality of Personal Data occurring beyond Bank Ganesha's reasonable control, Bank Ganesha will promptly notify you at the earliest opportunity to mitigate any risks arising from such an incident.

You are responsible for maintaining the confidentiality of your Personal Data information, including safeguarding your username, password, email, PIN, and OTP from anyone, and for ensuring the security of the devices you use.

11. Acknowledgment and Consent

By accessing and using the products, services, and/or facilities of Bank Ganesha, you acknowledge that you have read, understood, and provided your explicit consent to all terms and conditions set forth in this Privacy Policy.

12. Changes to the Privacy Policy

This Privacy Policy may be amended and/or updated from time to time to accommodate changes in laws and regulations or internal bank policies. Any changes made will be announced through our website or other available communication channels. Users are expected to periodically review this Privacy Policy to stay informed of how we protect your personal information.

Conditions For Website Users