Gantol +62 21 7049 2851
Legal Document — Revision 01 — January 2026

Privacy Policy

This Privacy Policy describes how Gantol ("we", "us", or "our"), operating from Jl. Pakubuwono VI No. 117, 12120 Jakarta, Indonesia, collects, uses, and protects information provided by visitors to this website ("you"). By using this website, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller responsible for this website is Gantol, located at Jl. Pakubuwono VI No. 117, 12120 Jakarta, Indonesia. For all data-related enquiries, contact us at [email protected] or by telephone at +62 21 7049 2851. We respond to data-related correspondence within ten business days.

2. Information We Collect

We collect information in two ways: information you provide directly and information collected automatically when you visit this website.

Information you provide directly includes:

  • Name and email address submitted via the contact form
  • Message content and subject matter submitted via the contact form
  • Optional telephone number if provided in your enquiry

Information collected automatically includes:

  • IP address and approximate geographic location (country or city level)
  • Browser type, version, and operating system
  • Pages visited on this website and time spent on each page
  • Referring website or search engine query
  • Date and time of each visit

Automatically collected data is gathered via cookies and similar technologies. See our Cookie Policy for full details of which cookies are used and how to manage them.

3. How We Use Your Information

Information you submit via the contact form is used solely to respond to your enquiry. We do not use contact form submissions for promotional purposes without explicit consent. Automatically collected data is used to understand how visitors interact with this website and to improve its content and structure. Specific uses include:

  • Responding to contact form submissions and enquiries
  • Processing batch certificate requests matched to your stated lot number
  • Analysing aggregate website traffic patterns to improve navigation and content
  • Diagnosing technical errors or performance issues with the website
  • Complying with applicable legal obligations

4. Legal Basis for Processing

We process personal data on the following legal bases:

  • Legitimate interests: Processing contact form submissions to respond to enquiries; analysing aggregate website traffic to improve the site.
  • Contractual necessity: Processing order-related enquiries where a commercial relationship is established.
  • Legal obligation: Retaining records where required by applicable Indonesian law or regulation.
  • Consent: Setting non-essential cookies where you have provided consent via the cookie consent banner.

5. Data Retention

Contact form submissions are retained for a period of 24 months from the date of submission, after which they are permanently deleted from our systems. Automatically collected analytics data is retained in aggregated, anonymised form for up to 36 months. Server access logs are retained for a maximum of 90 days for security and performance purposes.

If you have submitted a batch certificate request, the correspondence record may be retained for up to 60 months to support ongoing product quality documentation. Data retained for this purpose is limited to the batch code reference and the date of request.

6. Sharing of Data

We do not sell, rent, or trade personal data with third parties. Data may be shared in the following limited circumstances:

  • Service providers: Website hosting providers and analytics platform operators who process data on our behalf under contractual data processing agreements.
  • Legal compliance: Where required by applicable law, court order, or governmental authority.
  • Business continuity: In the event of a merger, acquisition, or sale of assets, data would be transferred to a successor entity under equivalent privacy protections.

Third-party service providers used by this website include standard website hosting infrastructure. Analytics data, where collected, is processed in aggregated and anonymised form where technically possible.

7. International Transfers

This website is hosted and operated within Indonesia. Some third-party services used to operate the website (such as analytics tools or content delivery networks) may process data outside of Indonesia. Where such transfers occur, they are governed by the service provider's standard contractual terms and applicable data transfer mechanisms.

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data where we have no lawful basis for continued processing.
  • Restriction: Request that we restrict processing of your data in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Portability: Request your data in a structured, commonly used format where processing is automated and based on consent or contract.
  • Consent withdrawal: Withdraw consent for cookie-based processing at any time via the Cookie Settings link in the footer.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing a request.

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. This website operates exclusively over HTTPS. Contact form submissions are transmitted over encrypted connections. However, no method of internet transmission is entirely secure, and we cannot guarantee absolute security of data in transit.

10. Children

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data through this website, contact us at [email protected] and we will delete the relevant data promptly.

11. Third-Party Links

This website may contain links to external websites operated by third parties. This Privacy Policy applies only to this website. We are not responsible for the privacy practices of any linked external sites. We recommend reviewing the privacy policy of any third-party site before submitting personal data to it.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in our data practices or applicable law. The revision date at the top of this document will be updated with each material change. Continued use of this website following the posting of a revised policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically.

13. Contact

For all privacy-related enquiries, corrections, or deletion requests, contact Gantol at:

Gantol
Jl. Pakubuwono VI No. 117
12120 Jakarta, Indonesia
[email protected]
+62 21 7049 2851
Monday – Friday, 09:00 – 18:00 WIB