PRODIKPI Privacy & Security
Data Protection & Privacy Compliance

Privacy Policy

Perkumpulan Program Diploma Keuangan dan Perbankan Indonesia (PRODIKPI)

Effective Date: January 1, 2026 | Fully Compliant with UU PDP No. 27/2022, ISO/IEC 27701:2019 & ISO/IEC 27001:2022
01

Commitment to Personal Data Protection

PRODIKPI is firmly committed to safeguarding the privacy and security of personal data entrusted to us by member institutions, university representatives, academics, researchers, students, and website visitors. This Privacy Policy sets out how PRODIKPI collects, uses, processes, stores, protects, and discloses personal data in full compliance with Republic of Indonesia Law No. 27 of 2022 on Personal Data Protection (UU PDP), Government Regulation No. 71 of 2019 (PP PSTE), and international standards including ISO/IEC 27701:2019 (Privacy Information Management System - PIMS) and ISO/IEC 27001:2022.

02

Categories of Personal Data Collected

We collect and process the following categories of personal data strictly necessary for fulfilling our educational and institutional mission:

Identity & Institutional Data: Full name, academic degree, NIDN/NIP (Lecturer Identification Number), university affiliation, department/study program name, official job position, and institutional email address.
Contact & Account Credentials: Password hashes (encrypted using bcrypt/argon2), phone number, official physical address, and contact form inquiry submissions.
Academic & Research Data: Authored scientific papers, research metadata, journal citations, presentation slides, and curriculum contributions.
Technical & System Logs: IP address, browser type, device information, access timestamps, and session tokens collected via secure HTTP cookies.
03

Lawful Basis & Purposes of Data Processing

Under Article 20 of Law No. 27/2022 (UU PDP), PRODIKPI processes your personal data based on explicit consent, fulfillment of contractual/membership agreements, or legitimate educational interest. Purposes include:

  • Verifying and managing institutional membership applications and academic representative credentials.
  • Facilitating national curriculum standardization, CPL agreements, and Tridarma research publishing.
  • Issuing official certificates of membership and conference participation.
  • Sending important administrative notices, institutional updates, and academic newsletters.
  • Ensuring system security, preventing unauthorized access, and maintaining audit trails required under ISO 27001.
04

Data Storage, Security Measures & Retention (ISO/IEC 27001)

PRODIKPI implements technical, physical, and organizational security controls compliant with ISO/IEC 27001:2022. All personal data in transit is encrypted using TLS 1.3/HTTPS, and data at rest is stored in secure, access-restricted databases. We do not sell, rent, or trade your personal information to third-party commercial entities. Personal data is retained only for as long as necessary to fulfill legal obligations, university accreditation audits, or active membership duration, after which it is securely anonymized or destroyed.

05

Data Subject Rights under UU PDP No. 27/2022

Under Articles 5 to 13 of UU PDP, data subjects have guaranteed rights regarding their personal data:

  • Right to Access & Copy: You have the right to request a copy of your personal data processed by PRODIKPI.
  • Right to Rectification: You may update or correct inaccurate or incomplete profile details at any time via the Member Dashboard or by contacting us.
  • Right to Erasure / Right to be Forgotten: You can request deletion of your personal data when it is no longer required for legitimate membership purposes.
  • Right to Withdraw Consent: You can withdraw consent for receiving promotional communications or newsletters without affecting core membership processing.
06

Cookies & Tracking Technologies

The PRODIKPI platform utilizes essential session cookies and local storage tokens solely to maintain user authentication status, store language preferences (English / Bahasa Indonesia), and ensure system responsiveness. We do not employ intrusive third-party cross-site tracking cookies.

07

Data Protection Officer (DPO) & Contact Information

If you have any questions, concerns, or requests regarding the processing of your personal data or wish to exercise your data subject rights under UU PDP No. 27/2022, please contact our Admin at: prodikpiindonesia@gmail.com