Privacy Policy & Personal Data Protection
Official commitment of the Indonesian Personal Data Protection Professional Certification Body (LSP PDP Indonesia) licensed by BNSP (License No. BNSP-LSP-2615-ID) in ensuring your privacy, confidentiality, and data subject rights.
1. General Provisions & Legal Framework
LSP PDP Indonesia (operated under PT Prada Danapati Prawara Indonesia, officially licensed by the National Professional Certification Agency – BNSP under License No. BNSP-LSP-2615-ID) is fully committed to upholding the highest standards of confidentiality and data security.
This Privacy Policy describes our governance in collecting, managing, verifying, and safeguarding the personal data of examinees (assessees), competency assessors, training partners, and portal visitors in strict accordance with Law No. 27 of 2022 on Personal Data Protection (PDP Law) and ISO/IEC 17024 certification standards.
2. Categories of Personal Data Processed
To conduct legitimate competency certification and issue BNSP credentials, LSP PDP Indonesia processes the following data categories:
A. General Identity Data
- Full name & academic/professional titles
- National Identity Number (NIK) / Passport Number
- Date & place of birth
- Official photo for BNSP certificate printing
B. Contact & Corporate Data
- Active email address & telephone / WhatsApp number
- Residential address & corporate postal code
- Employing institution, company name, & job position
C. Competency & Assessment Evidence
- Educational certificates & academic transcripts
- PDP/DPO competency training certificates
- Work portfolios, assignment letters, and verified work experience
- Assessment instruments & competency rubrics (FR.APL / FR.AK)
D. Digital & Web Interaction Data
- IP addresses & server technical logs for cybersecurity assurance
- Essential cookie preferences
- Official inquiry & consultation submissions
3. Processing Purposes & Lawful Basis
All personal data processing conducted by LSP PDP Indonesia is grounded on legitimate lawful bases under Article 20 of the Indonesian PDP Law:
- Explicit Consent: Candidates grant explicit consent upon registering for competency assessment or submitting inquiry forms.
- Legal Obligation: Reporting candidate registration and national competency certification outcomes to the official BNSP registry.
- Contractual Necessity: Administering the examination process, scheduling Competency Assessment Venues (TUK), and issuing official credentials.
- Legitimate Interests: Safeguarding portal cybersecurity infrastructure and ensuring the integrity of national professional records.
4. Your Rights as a Data Subject
Under Chapter IV of the Indonesian PDP Law, every assessee and data subject possesses enforceable legal rights, including:
- Right to access and obtain a copy of your personal certification record.
- Right to rectify inaccurate, incomplete, or outdated personal portfolio data.
- Right to restrict or object to automated decision-making.
- Right to withdraw processing consent, subject to BNSP statutory accreditation archiving requirements.
5. Data Security & ISO/IEC 17024 Confidentiality
In compliance with ISO/IEC 17024 international standards for personnel certification bodies, LSP PDP Indonesia enforces stringent technical and organizational security measures:
- End-to-end data encryption in transit via enterprise-grade 256-bit SSL/TLS protocols.
- Role-Based Access Control (RBAC) ensuring only authorized secretariat officers and sworn assessors access candidate files.
- Strict Non-Disclosure Agreements (NDA) and Codes of Ethics executed by all assessors and managerial staff.
- Periodic system security audits and vulnerability assessments.
6. Data Retention Period
Competency assessment records and candidate dossiers are retained for the statutory 3-year validity period of the professional certificate, plus the statutory archiving duration mandated by BNSP regulations for certificate authenticity verification, recertification, and institutional quality audits.
7. Contact Data Protection Officer (DPO) Team
If you have inquiries, data subject rights requests, or complaints regarding the processing of your personal data at LSP PDP Indonesia, please contact our official secretariat: