Privacy

Privacy Statement

This Privacy Statement informs you about the type of personal data that is collected and received through our website https://www.wakatobi.com and related blog https://blog.wakatobi.com/wordpress/ (“website”), and about how we use, share, retain and protect such personal data.

Who we are

We are the Indonesian company P. T. Wakatobi Resort. (“we”, or “us”) and have our registered office at Kuta Poleng Blok D-1 Jln Setiabudi – Simpang Siur, Kuta, Bali, Indonesa. We are the controller responsible for the processing of personal data through the website.

How we obtain personal data

We collect and receive personal data through the website. Personal data means any information relating to an identified or identifiable natural person.

First of all, we collect personal data that you choose to voluntarily provide to us when making an enquiry. In addition, we collect certain personal data by using cookies when you visit the website.

Cookies are bits of text that are placed on your computer’s hard drive or mobile device when you visit certain websites. Cookies hold information that may be accessible by the party that places the cookie, which is either the website itself (first-party cookie) or a third party (third-party cookies). You do have control over cookies, and can refuse the use of cookies by selecting the appropriate setting on your browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable or delete existing cookies. 

On the website, we use cookies for the following purposes:

  • To gather website statistical data to analyze how our users use the website, such as which pages are visited, how long pages were visited and the paths taken by visitors to our website as they move from page to page.

For the purpose listed above), we use Google Analytics. Google Analytics is a web analytics service provided by Google, Inc., which uses cookies to help. The information generated by the cookie about your use of our website (such as your IP address, the URL visited, the date and time the page was viewed) will be transmitted and stored by Google on servers in the United States or any other country in which Google maintains facilities. Your IP address will be masked by setting the last octet of your IP address to zero before it is stored by Google. Google will use this information to monitor your use of our website, and to compile reports on website activity for us. Based on our agreement with Google, Google is not allowed to use this information for their own purposes and may only transfer this information to third parties where required by law, or where such third parties process information on Google’s behalf.

The types of personal data we may obtain

We may collect and receive the following personal data from you:

  • Name and contact details (such as name, address, email and phone numbers);
  • Information on your use of the website;
  • Personal data included in enquiry form and essential information form;
  • Traffic data (such as your Internet usage).
  • Any other information that you have provided us (such as whether you would like to receive our newsletter).

We may collect other types of personal data if required under applicable law or if necessary for the purposes listed below. We will then inform you and ensure that there is a valid legal basis for doing so.

How we may use personal data

We may use the personal data we collect and receive for the following purposes:

  • To provide information, proposals and services to you;
  • To analyze how the website is used, such as which pages are visited, how long pages were visited and the paths taken by visitors to our website as they move from page to page;
  • To verify compliance with applicable legal requirements and our policies.
  • To contact you, such as by sending personalized emails, about our products and services, or to send you our newsletter.

We process personal data because this is necessary for the performance of the contract between you and us, for our compliance with our legal obligations and for the purpose of our legitimate interests. In particular, our legitimate interests are our commercial company interest (e.g. to improve our products and services), our interest to make use of direct marketing, our interest to prevent fraud and our interest to report possible criminal acts or threats to competent authorities. Some of the personal data that we process is required for us to meet our legal obligations, for example we cannot create an account for you if you choose not to share your personal data with us.

How we may share personal data

We may share the personal data we collect and receive on a need to know basis with the following third parties:

  • Service providers;
  • Competent public authorities or other third parties, if required by law or reasonably necessary to protect the rights, property and safety of ourselves or others.
  • We may also transfer your personal data in the event that we sell or transfer all or a portion of our business or assets on a need to know basis. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use personal data you have provided to us in a manner that is consistent with applicable law and this Privacy Statement.

We do not sell, rent or trade your personal data.

Data transfers outside the EEA

We may transfer your personal data to countries other than your country of residence (including countries outside the European Economic Area). This occurs in the course of providing your travel arrangements or because our group companies, partners or service providers have operations in countries across the world. The laws of these countries may not afford the same level of protection to your personal data.

The transfer of personal data to countries other than your country of residence is often necessary to provide our services to you. In other cases, we will ensure that adequate safeguards are in place to comply with the requirements for the international transfer of personal data under applicable privacy laws. For transfers of personal data outside the European Economic Area, we may use Commission approved Standard Contractual Clauses as safeguards.

We may also be required to disclose your personal data to foreign public or government authorities

How we protect personal data

We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us or the personal information stored is absolutely secure. We will notify you of any data breach that is likely to have unfavorable consequences for your privacy in accordance with applicable law.

How long we retain personal data

We retain the Personal Information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

Your rights

You have the following rights in relation to your personal data:

  • The right to obtain, at reasonable intervals and free of charge, information on whether or not your personal data are being processed and to receive the personal data that is being processed in an intelligible form;
  • The right to request rectification or erasure of personal data or restriction of or objection to processing of your personal data. You may also request us to provide you your data in a structured, commonly used and machine readable format which can be transmitted to another controller.
  • To exercise these rights, please contact us using our contact details set out below. We may request you to provide a copy of your ID card or otherwise evidence your identity. We will respond to your request within the applicable statutory term.
  • Moreover, subject to this Privacy Statement, you have the right to lodge a complaint with the competent supervisory authority.

Updates to this privacy statement

We may update this Privacy Statement from time to time. We will notify you of any significant changes to this Privacy Statement on the website or through other appropriate communication channels. All changes shall be effective from the date of publication, unless otherwise provided in the notification.

How to contact us

If you have any comments or inquiries about the information in this Privacy Statement, if you would like us to update your personal data, or to exercise your rights, please contact us by email at privacy@wakatobi.com.

“Feels like home. All the staff and crew are very friendly and helpful. All the activities and what we needed managed well with kindness and professionalism.Wonderful experience, place, and… “Wonderful experience, place, and people!”

Cicin Winedar and family
,July 2023