Privacy Policy (Indonesian PDP Law)
We process your name, email address, WhatsApp number, ticket order records, and gate scan timestamps strictly for daily-quota ticketing, hiker safety, and compliance with Indonesia's Personal Data Protection Act (Law No. 27 of 2022 / UU PDP).
1. Legal Basis & PDP Law Compliance
This Privacy Policy is established pursuant to Law of the Republic of Indonesia Number 27 of 2022 on Personal Data Protection (UU PDP). Cupang Village Tourism Management serves as the Personal Data Controller responsible for handling tourist data accountably, transparently, and securely.
2. Types of Personal Data Processed
Data collected includes: visitor identity (full name per ID), active contact details (verified email and WhatsApp number), ticket booking transaction details, gate scan validation history (WIB timestamp, entrance gate, scanning ranger), IP address, and session security audit records.
3. Purposes of Data Processing
Your data is used solely for: (a) Issuance and delivery of encrypted QR daily-quota e-tickets; (b) Entrance verification at Batu Lawang gate and Gunung Bendera trailhead; (c) Emergency safety communication during hiking incidents; (d) Fraud prevention and request rate limiting.
4. Security & Cryptographic Encryption
Ticket QR tokens are encrypted using AES-256-GCM with server-signed HMAC-SHA256 integrity verification. Uploaded visitor review photos are automatically processed using high-performance image pipelines to strip all EXIF metadata and device GPS coordinates.
All uploaded review photos and media assets are re-encoded to WebP and stripped of 100% of EXIF/GPS device metadata to protect your privacy.
5. Rights of the Data Subject
Pursuant to Articles 5 through 13 of the UU PDP, you hold the right to access, rectify, obtain portable data copies in standard JSON format, and request account erasure or anonymization via the Profile & Privacy menu in the Member Dashboard.
Registered visitors may export all personal data in JSON format or request account deletion/anonymization at any time from the Profile & Privacy tab in their Dashboard.