Make-A-Wish ® Indonesia

1. Introduction

Make-A-Wish Foundation^® Indonesia (We or Our Organisation) is a foundation dedicated to granting the wishes of children with life-threatening conditions. We respect the privacy of our beneficiaries (including our wish children), as well as our donors, volunteers, supporters, event participants and members of the public. We are committed to fulfilling our obligations to you and under Law No. 27 of 2022 on Personal Data Protection (PDP Law) with regard to ensuring that your personal data is securely handled. This Personal Data Protection Policy (Policy) is intended to govern the collection, use and disclosure of Personal Data by our organisation and will assist you in understanding how we manage any Personal Data which is provided to us. By using our website and/or by giving or making available your Personal Data to us, you agree and consent to the collection, use, disclosure and processing of your Personal Data in accordance with the terms of this Policy.

1.1 Definitions

“Personal Data” refers to any data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which the organisation has or is likely to have access. Examples of such Personal Data include:

(a) your name, Nomor Induk Kependudukan (NIK), telephone number(s), mailing address, email address and any other information relating to you which you have provided us in any forms you may have submitted to us

(b) information about your use of our website and services including your IP address which we may record through the use of internet cookies

“Processing” means in relation to personal data, the carrying out of any operation or set of operations in relation to the personal data, and includes any of the following: recording, holding, organising, adapting, altering, retrieving, combining, transmitting, erasing or destroying personal data.

2. Collection of Personal Data

Generally, your Personal Data may be collected by Our Organisation either directly or by third parties who work with us in the following situations:

1. when you submit forms to us to register to be a referrer, beneficiary, donor, supporter and/or event participant of Our Organisation;
2. when you apply to be a volunteer, intern or employee with Our Organisation, and throughout the course of such work;
3. when you register your interest with us to obtain news, information and updates on Our Organisation and its activities, or employment with Our Organisation;
4. when you access our website, submit information through our website and/or your browser loads our internet cookies;
5. when you respond to surveys or questionnaires from us or third parties we engage;
6. when you communicate with us or any of our third party partners in relation to Make-A-Wish Foundation activities;
7. through photography, videography and/or sound recordings when you participate in any of our events and/or activities;
8. when you submit your personal data to us for any other reason; and/or
9. when we collect your personal data by other lawful means.

3. Purposes for Collection, Use, Disclosure and Processing of Personal Data

Generally, Our Organisation may collect, use, disclose and/or process your Personal Data for the following purposes:

1. to communicate with you and to respond to your queries whether by email or postal mail;
2. to process any enquiry or request which you send to us;
3. to process any referral made by you concerning a prospective beneficiary;
4. to send you further information on events or activities to which you have signed up to participate;
5. to conduct surveys, research and statistical analysis with the aim of helping us monitor and improve our activities and event organization;
6. to ensure the safety and security of our employees and others who might visit our premises;
7. to record, through videography, photography and/or audio recording, your participation in any of our events and/or activities for use in our outreach materials;
8. to monitor the performance of our website and facilitate the use of web forms and other elements used on the website; and
9. any purpose directly relating to any of the above.

If you are a beneficiary (including a prospective beneficiary), Our Organisation may also collect, use and/or disclose your Personal Data for the following purposes:

1. to evaluate your suitability for the grant of a wish by Our Organisation;
2. to communicate with you or your parent/guardian on the grant of a wish by Our Organisation
3. to plan, facilitate, manage and execute any arrangements necessary for the granting of a wish to you and any family member(s) who may accompany you for events or activities which we organize;
4. to contract and/or engage third party vendors and service providers such as ticketing agents, travel agents, airlines and/or medical staff where required for the granting of a wish;
5. to make arrangements and liaise with Make-A-Wish International or other Make-A-Wish affiliates where overseas travel is necessary; and
6. any purpose directly relating to any of the above.

If you are a donor, Our Organisation may also collect, use and/or disclose your Personal Data for the following purposes:

1. to process any donation made by you;
2. to facilitate the processing of any tax deductions by the Indonesian Tax Office for any qualifying donations which you make;
3. to communicate with you concerning any donation made by you; and
4. any purpose directly relating to any of the above.

If you are a volunteer (including a prospective volunteer), Our Organisation may also collect, use and/or disclose your Personal Data for the following purposes:

1. to evaluate your suitability for service as a volunteer with Our Organisation;
2. to manage Our Organisation’s relationship with you as a volunteer; and
3. to communicate with you concerning Our Organisation’s events, activities and volunteering opportunities; and
4. any purpose directly relating to any of the above.

If you are an employee (including a prospective employee), Our Organisation may also collect, use and/or disclose your Personal Data for the following purposes:

1. to evaluate your suitability for service as an employee of Our Organisation;
2. to manage Our Organisation’s relationship with you as an employee; and
3. to communicate with you concerning your employment application and/or service as an employee of Our Organisation; and
4. any purpose directly relating to any of the above.

4. Outreach / Optional Purposes

Where you have specifically provided us with your consent, we may also collect, use and/or disclose your Personal Data for the following purposes:

1. to send you news, updates and invitations in relation to activities and events organised by our Organisation;
2. to send you information on our fund-raising campaigns; and any purpose directly relating to any of the above.

5. Discloure of Personal Data

Other than the purposes to which you have consented, we will keep confidential any Personal Data which you provide to us. However, subject to any applicable law, we may disclose your information in circumstances such as, but not limited to, the following:

1. where disclosure is necessary for any purpose which is clearly in your interest, if consent cannot be obtained in a timely way;
2. where disclosure is necessary to respond to an emergency that threatens the life, health or safety of yourself or another individual;
3. where disclosure is necessary for any investigation or proceedings;
4. where disclosure is to a public agency and such disclosure is in the public interest; and
5. where such disclosure without your consent is permitted and/or required by the PDPA or any other applicable law.

We may transfer your Personal Data to Make-A-Wish International for reporting purposes, however we shall limit and only give any necessary data. Provided however, we will not transfer your Personal Data, without your consent.

6. Use of Cookies

A cookie is a small text file that is placed on your computer when you visit certain websites. Our website collects and stores tokens of information (‘identifiers’) in your browser. The purposes for which we use cookies include, but are not limited to, monitoring the performance of our website, assessing the popularity of different sections of the site and facilitating the use of online web forms. This information is collected on an anonymous basis. Our website will not collect any Personal Data which might be used to identify you directly unless you expressly provide this through the use of online forms on the site.

If you do not want to receive cookies from our website, you have the option of setting your browser to notify you when you receive cookies, so that you may determine whether to accept it or not. However, please be aware that if you do turn off cookies in your browser, you may not be able to fully utilize some of our website.

7. Links to Other Sites

Our website may contain links to other sites. We are not responsible for the privacy practices or the content of such websites.

8. Access, Correction and Withdrawal of Consent

8.1 Access

You may request access to your Personal Data currently within our possession and/or control. This should be done by submitting a request to our email at makeawishindonesia@gmail.com. Following your request, our staff will be in contact with you.

We will respond to any request within a reasonable time of such a request being made, but in any case no later than 30 days from the date of the request. There may be circumstances where, by law, we will not be required or able to accede to your request. Where this is the case, we will notify you of this within a reasonable time.

8.2 Correction

We will endeavor to ensure that your Personal Data is sufficiently accurate and complete in making any decision that impacts you.

You may request that corrections be made to your Personal Data in our possession. This should be done by submitting a request to our Data Protection Officer using our Data Protection Request Form. Following your request, our Data Protection Officer might also contact you in order to seek clarification on the specific information which you would like us to correct. We will respond to any request within a reasonable time of such a request being made, but in any case no later than 30 days from the date of the request. There may be circumstances where, by law, we will not be required or able to accede to your request. Where this is the case, we will notify you of this within a reasonable time.

8.3 Withdrawal of Consent

Where you have provided consent or your consent has been deemed, you may withdraw your consent for the collection, use and/or disclosure of your Personal Data in our possession and/or under our control by submitting a request via email to our Data Protection Officer.

We will process your request within 10 days of receiving your notification.

Privacy Policy