Last Updated: 16 September 2026
1. Introduction
This privacy policy governs the collection, use, disclosure, and protection of personal data in connection with the website.
This Policy is issued in accordance with Indonesia's Personal Data Protection Law (Undang-Undang Pelindungan Data Pribadi / UU PDP, Law No. 27 of 2022) and, where applicable, other data protection regulations governing users accessing the site from other jurisdictions.
2. Data Controller
Totalis shall act as the data controller with respect to personal data processed through the website.
3. Personal Data Collected
This website shall collect the following categories of personal data:
Internet Protocol (IP) address
Browser type and device specifications
Pages accessed, duration of visit, and referring URLs
2. Purpose of Processing
The Company shall process personal data for the following purposes:
Responding to inquiries submitted through the website
Evaluating candidates for employment
Providing, maintaining, and enhancing the services
Transmitting service-related communications, proposals, and updates
Conducting analysis of website usage for the purpose of improvement
Fulfilling obligations under applicable law
Safeguarding the security and integrity of the website and the services
3. Legal Basis for Processing
The Company processes personal data on one or more of the following legal bases:
Consent, where the User has provided personal data voluntarily (e.g., via a contact form or job application)
Performance of a contract, where processing is necessary to deliver Services requested by the User or their organization
Legitimate interest, including the improvement of the Site and the prevention of fraud
4. Disclosure of Personal Data
Totalis shall not sell personal data to third parties. Personal data may be disclosed to:
Service providers engaged to support the Company's operations, including website hosting, email service providers, and analytics providers
Business partners and subcontractors, to the extent necessary to deliver outsourcing, security, or facility management services
Regulatory or governmental authorities, where disclosure is required by law
Successors in interest, in connection with a merger, acquisition, or transfer of business assets
Recipients of personal data are required to handle such data in a manner consistent with applicable data protection standards. Where personal data is transferred outside the territory of Indonesia, the Company shall take reasonable measures to ensure that the recipient provides a level of protection equivalent to that required under UU PDP.
7. Cookies and Tracking Technologies
The Site may deploy cookies and comparable technologies for the following purposes:
Analyzing Site traffic and usage patterns
Enhancing Site functionality
Users may configure their browser settings to restrict or disable cookies. The Company advises that disabling cookies may impair certain functionality of the Site.
5. Data Security
The Company shall implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Notwithstanding the foregoing, no method of transmission over the internet can be guaranteed to be entirely secure, and the Company makes no warranty of absolute security.
9. Amendments to This Policy
The Company reserves the right to amend this Policy at its sole discretion to reflect changes in its practices or in applicable law. Any amendment shall be effective upon posting to this page, with the "Last Updated" date revised accordingly. Continued use of the Site following such amendment shall constitute acceptance of the revised Policy.
