Personal Data Protection
Effective since April 2026 · Jember Tourism E-Ticketing
Personal Data Protection
This policy explains how Jember Tourism E-Ticketing collects, processes, stores, and protects users' personal data in accordance with Law No. 27 of 2022 concerning Personal Data Protection (UU PDP) and its implementing regulations.
2.1 Data We Collect
We collect the following personal data when you use our platform:
Identity Data
Full name, email address, phone number, date of birth
Transaction Data
Ticket purchase history, payment method, transaction details
Technical Data
IP address, browser type, device, operating system, cookie data
Visit Data
History of visited destinations, travel preferences, reviews
2.2 Data Usage Purpose
Your personal data is used based on the following legal grounds:
- Contract Performance: to fulfill the ticket services you order.
- Consent: for promotional purposes or documentation that requires explicit permission.
- Legal Obligation: to comply with applicable laws and regulations.
- Legitimate Interest: for platform security and service improvement.
2.3 Data Storage & Security
- Your data is stored on servers located within the territory of Indonesia or in accordance with applicable regulations.
- We implement reasonable encryption, access control, and technical security measures to protect your data.
- Personal data can only be accessed by authorized personnel who have a legitimate business need.
- Personal data is stored while the account is active or as long as necessary for the processing purpose. After it is no longer needed, the data will be deleted securely.
2.4 Sharing Data with Third Parties
We may share your data with third parties only under the following conditions:
- Payment gateway (Midtrans, Xendit, or other providers) to process payments securely.
- Attraction operator who is relevant for ticket verification and visit purposes.
- Technical service providers (hosting, analytics, security) bound by confidentiality agreements.
- Legal authorities if required by law or court order.
We **do not sell**, rent, or trade your personal data to third parties for their commercial interests.
2.5 Your Rights as a Data Subject
According to UU PDP, you have the following rights:
Request a copy of the personal data we store about you.
Request correction of inaccurate or incomplete data.
Request data deletion under certain conditions regulated by law.
Withdraw data processing consent at any time (without affecting previous processing).
Request your data in a machine-readable format.
Object to data processing for certain purposes.
To exercise these rights, contact us via: privacy@jembertourism.id
2.6 Account Security
- Users are responsible for maintaining account password confidentiality.
- Immediately report to us if there are indications of unauthorized access to your account.
- We never ask for your password via email, telephone, or other communication channels.
Other Documents
© 2026 Jember Tourism E-Ticketing. All rights reserved.