Hana Bank Privacy Policy

Please read this Privacy Policy carefully to ensure that you understand how the terms of this Privacy Policy apply. The following Privacy Policy explains how we collect, use, transfer, disclose and protect your personally identifiable information obtained. By reading this Privacy Policy, we hope that you feel calm and confident that the security of your Personal Data and privacy is our top priority.

This Privacy Policy is included as part of the Terms of Use. This Privacy Policy covers the following:

Definition
Information we collect
Information you provide directly
Use of the information we collect
Providing information we collect
Security
Changes to this Privacy Policy
Others
Acknowledgement and consent
Stop receiving e-mails
Contact us

In this Privacy Notice, the use of the terms (i) “we” or “Bank” refers to PT Bank KEB Hana Indonesia, a Business Entity established under the laws of the Republic of Indonesia and engaged in banking ( “Hana Bank”); (ii) “You” refers to each individual owner of Personal Data (data subject) who has and/or will use our products and/or services, visitors and users of our website/application/electronic system/digital banking services, and any third party to which this Privacy Notice applies; (iii) “Applicable Regulations” refers to Law Number 27 of 2022 concerning Personal Data Protection and other relevant regulations in force, including amendments from time to time; (iv) “Processing” refers to the act of obtaining, collecting, processing, analyzing, storing, correcting, updating, displaying, announcing, transferring, disseminating, disclosing, deleting and/or destroying User Personal Data.

The Personal Data that we process is Personal Data that Users have provided and will provide to us, which also includes Personal Data as written in the Personal Data Acquisition and Collection section of this Privacy Notice to provide Banking products and/or services that Users request, including to fulfill our agreements or legal obligations to laws and regulations, when Users visit, access, and/or use Bank products and/or services, including our website/ application/electronic system/Digital Banking Services in connection with the use of Bank products and/or services (“Services”).

Your use of our applications and services is subject to these Terms of Use and Privacy Policy and indicates your agreement to such Terms of Use and Privacy Policy.

1. Definition

a. Bank is PT Bank KEB Hana Indonesia (Hana Bank), a company established under the laws of the Republic of Indonesia.

b. Personal Data is data about an individual who is identified or can be identified individually or in combination with other information either directly or indirectly through electronic or non-electronic systems.

c. Personal profile identification data, which may include full name, Population Identification Number, Taxpayer Identification Number, immigration documents, gender, citizenship, place and date of birth, mother's maiden name, alias

ickname, religion, voice recording, image recording, photo, signature form (wet and/or electronic), and/or biometric data.

d. Financial data, which may include account numbers, sources of income, monthly/annual income, monthly/annual expenditure, transaction data, credit/financing data, investment-related data, asset-related data, collateral-related data, and tax data as well as service data from other financial services that the User receives.

e. Correspondence data, which may include an address as per the Population Identification Card, address and domicile status, electronic mail address (e-mail), telephone/mobile phone number, and emergency contact which includes name, type of relationship with the User, address, telephone/mobile phone number, and e-mail.

f. Digital activity data, which may include geolocation, IP/MAC address, User activity in the Bank application, and interaction between the Bank application and other applications on the User's electronic device.

g. Personal Information is information about you that is personally identifiable that is collected through the Application, such as your name, address, date of birth, telephone number, e-mail address and/or the like.

h. Digital Banking Services is a digital banking application that has been licensed by OJK and BI and is registered as an Electronic System at the Ministry of Information Technology. A software application where all the instructions you do will come from a mobile or online application .

i. Website is our website at www.hanabank.co.id and www.linebank.co.id .

j. Personal Data Subject is a natural person to whom Personal Data is attached.

2. Information We Collect

a. We respect the concerns regarding your data protection and privacy. Therefore, we will only use your data that relates to you in accordance with this privacy policy.

b. We only collect Data that is important to the Bank and the Bank will only collect Data that is needed for anything related to you. The Bank will only store your Data as long as it is needed to fulfill legal obligations or as long as the Data is related to the purposes for which the Data was collected. The Bank's privacy policy follows the applicable laws and regulations to maintain data confidentiality unless the Bank is required by applicable law to disclose data to authorized third parties such as the government or other government agencies, only if there is a valid order.

c. In order to support us in providing optimal service to Users, we will collect User Personal Data from various sources, including the following:

i. From Users directly.

ii. Information about Users generated when Users apply for a service, use our services, or have had previous services.

iii. Personal Data from parties related to the Bank and/or other third parties who are partners of the Bank or who collaborate with the Bank.

iv. Cookies, location services, User's IP address when the User visits our website/application/electronic system/digital banking service, or when the User fills out our contact form within our website/application/electronic system/digital banking service, or data that the User permits to be accessed via the User's device.

v. From correspondence between the User and the Bank via e-mail, physical mail delivery, or official Bank correspondence/communication media.

vi. From survey data notified to the Bank; and/or

vii. Other activities carried out by the Bank which result in the submission of personal data to the Bank.

d. We collect certain Personal Information from you so that we can find the Services you need from Service Providers. You will provide Personal Information directly (for example, when you register) and some information will be automatically collected when you use the website/application/electronic system/digital banking service.

e. When you visit our website/application/electronic system/digital banking service, the administrator of our website/application/electronic system/digital banking service will process technical data such as your IP address, the web pages you have visited, the internet browser you are using, the web pages you previously/subsequently visit and the duration of each visit/session that allows the Bank to deliver the functions of the website/application/electronic system/digital banking service. With this technical data, the administrators of the website/application/electronic system/digital banking service of the Bank can manage it, for example by resolving technical difficulties or improving the accessibility of certain parts of the website/application/electronic system/digital banking service. In this way, the Bank can ensure that you can (continue to) find information on the Website in a fast and simple way.

f. You will be asked to authorize the instructions using different types of security information (e.g. Security Code, username, password) if required.

g. After authorizing the website/application/electronic system/digital banking service to carry out instructions according to your orders, you are required to ensure that you do not disclose your security information to other parties.

h. We ensure the confidentiality and security of the personal information you provide is well maintained. We will use your data in accordance with applicable provisions.

i. You can ask or give us input via Call Hana (1500021).

3. Information You Provide Directly

a. When registering on a website/application/electronic system/digital banking service, you will provide the Bank with your e-mail address, name, telephone number, account password, LINE Messenger User ID or other personal information.

b. The types of your Personal Data that may be processed include Personal profile identification Data, Correspondence data, Financial Data, Digital Activity Data and other personal related data.

c. When you use the website/application/electronic system/digital banking service, the Bank will also process your technical data such as IP address, Device Identity (ID) or MAC address, and information about the manufacturer, model, and operating system of your mobile device. The Bank uses this data to enable the Bank to deliver the functions of the website/application/electronic system/digital banking service, resolve technical difficulties, provide you with the correct and latest version of the Application and to improve the functionality of the Application.

4. Use of Information We Collect

The Bank uses your e-mail, name, phone number, LINE Messenger ID information on one of the Bank's digital banking Applications and your account password to verify your ownership of an account to provide you with information about the Application. The Bank may also use your name, e-mail and phone number to send you messages, general updates about the Application. The Bank may also send you e-mails asking you to subscribe to our Mailing List. You may opt out of receiving these updates at any time.

The Bank uses information such as the name of the bank where your account is created, the name where the account is held and the amount transferred for the payment you make. You hereby agree that your data will be used by the Bank's internal data processing to provide better Services to you.

The processing of User Personal Data by the Bank is carried out including for the following purposes:

i. For marketing purposes, namely offering products or services, including special offers, promotions, contests or information that may be of interest to Users. Such marketing messages may be sent to Users by the Bank and/or Business Partners in various ways including through physical mail, electronic mail, short message services, telephone, facsimile, correspondence means and other official Bank information delivery media in accordance with and subject to applicable laws and regulations.

ii. To provide, design and/or develop banking services, facilities, products or services, including assisting the Bank in analyzing how the Bank's services are used, responding to questions, or notifying Users if there are any changes to the services.

iii. For profiling and scoring activities to make automatic decisions regarding Users to improve services for Users and Bank risk management.

iv. For the purposes of carrying out the Bank's business operations involving consultation with professional advisors or external auditors of the Bank, including legal advisors, financial advisors, and consultants, Group Companies, and any party bound by confidentiality obligations with the Bank. In this regard, the Bank will use its best efforts to ensure that the parties mentioned pay attention to this Privacy Notice.

v. To fulfill the requirements of the Know Your Customer principle, the Bank's risk mitigation efforts, and the implementation of verification/authentication of the truth of User data, as required by applicable laws and regulations.

vi. To comply with regulations or legal requirements, including for the implementation of the administration of the Bank's business activities, reporting to regulators, or inspections by authorized parties, which are carried out in accordance with applicable laws in Indonesia.

vii. To conduct research and statistical analysis including the use of new technologies.

viii. For other purposes in accordance with the Bank's internal policies and provisions, or in accordance with the terms and conditions governing the relationship between the Bank and the User, which are implemented in accordance with applicable laws and regulations.

You as the data owner have the statutory right to:

i. Obtaining access and requesting copies of User Personal Data, including obtaining and/or using User Personal Data in a form that conforms to the structure and/or format commonly used or can be read by electronic systems, where we have the right to charge a reasonable fee to fulfill this request.

ii. Request the Bank to correct incorrect data, complete incomplete Personal Data, update Personal Data. However, we cannot accommodate requests to change Personal Data if we believe that such changes would violate any statutory provisions or legal requirements or cause the information to be incorrect.

iii. Submit a complaint to a data protection authority or other independent regulator about how we use User Personal Data and request the right to compensation and obligations to be fulfilled by the Personal Data Controller for violations of Personal Data Processing.

iv. Request the Bank to end processing, delete, update and/or destroy the User's Personal Data if the User's Personal Data is no longer required for the purposes set out in the Personal Data Use Section or if there is no other legal basis for the Processing of Personal Data or this is not limited by provisions including Banking Reporting provisions.

If you wish to exercise your rights, or wish to obtain an explanation of User rights, please contact us via one of the channels listed in the Contact Us section.

Data that we obtain directly from you through filling in the website/application/electronic system/digital banking service. Data collected when you use the website/application/electronic system/digital banking service that the Bank may use to identify you and authorize the user for the purpose of preventing loss and fraud.

Moreover, the Bank will use the Data you provide for the administration of your Account with the Bank for the purposes of verification and managing transactions related to the website/application/electronic system/digital banking services, conducting research on the demographic data of users of the website/application/electronic system/digital banking services, developing the website/application/electronic system/digital banking services, sending you information that the Bank deems useful for you including information about services from the Bank after you have given your consent to the Bank that you do not mind being contacted regarding Bank services.

The Bank may use your personal information, including date of birth to verify identity, assist users, determine which Services are right for you and beneficial to you and to understand the most interesting parts of the website/application/electronic system/digital banking service.

Aggregated data will be considered non-personal information for the purposes of this privacy policy. When you register as a user of the website/application/electronic system/digital banking service, the Bank will also use your personal information to send you marketing services from time to time.

Transactions you make through the website/application/electronic system/digital banking service are processed by the Bank. You must provide accurate and non-misleading Data to the Bank. You must update and notify the Bank if there are changes to the Data related to you. The Bank will store your transaction details for Bank security reasons. You can access this information by logging into your Account via the website/application/electronic system/digital banking service application.

You can view details of transactions you have made, information on funds and subscriptions from marketing services that websites/applications/electronic systems/digital banking services perform. You will not allow third parties to access your personal data. The Bank is not responsible for misuse of passwords and/or PIN. You must notify the Bank if you believe that your password and/or PIN is being misused by another party.

5. Providing Information We Collect

The Bank may employ third party companies and individuals to facilitate or provide certain Applications and services on behalf of the Bank, to provide customer support, provide information, to perform services related to the website/application/electronic system/digital banking services (e.g. without limitation, maintenance services, database management, web analytics and improvement of Website/application features) or to assist the Bank in analyzing how the Bank's Services are used or for the Bank's professional advisors and external auditors, including legal advisors, financial advisors and consultants. These third parties only have access to your personal information to perform these tasks on behalf of the Bank and are contractually bound not to disclose or use such personal information for any other purpose.

The Bank does not share your Personal Information with any party other than the relevant Service Providers and third party companies and individuals mentioned in the above section, without your consent. However, the Bank will disclose your Personal Information if required by law, or is necessary to comply with laws, regulations and governmental requirements, or in the event of a dispute, or any form of legal process between you and the Bank, or between you and other users in connection with, or related to the Services, or in an emergency related to your health and/or safety.

Your Personal Information may be transferred, stored, used, and processed in a jurisdiction other than Indonesia where the Bank's servers are located. For the purpose of Personal Data Processing, we may process User Personal Data outside Indonesia. In implementing the transfer of User Personal Data outside Indonesia, we will ensure that the destination country of the transfer has a level of Personal Data protection that is equivalent to or higher than the protection of Personal Data in Indonesia. In the event that the destination country of the transfer does not have a level of Personal Data protection that is equivalent to or higher, then we will implement adequate and binding Personal Data protection (such as entering into a contract with the recipient of the transfer of User Personal Data and/or written provisions and/or instruments), or in the event that it is still not met, the Bank may still transfer Personal Data outside Indonesia based on the User's consent.

The Bank does not sell or rent your Personal Information to third parties. The Bank will retain your information until you delete your account on the Application.

6. Security

The Bank ensures that the information and/or Data collected will be stored securely. The Bank stores your personal information and/or Data for as long as necessary to fulfill the purposes described in this privacy policy.

The Bank does not guarantee that the data you provide will not be intercepted/interfered with while being sent to the Bank. Any information sent by you to the Bank is at your own risk. You must not disclose your password to anyone. No matter how effective a technology is, there is no security system that cannot be penetrated.

To access your bank's digital banking services you can use several methods:

i. Using Password

Customers need to enter User ID and Password.

ii. Using Patterns

Customers can register login using a pattern after successfully logging in using User ID and Password, then setting the pattern according to the instructions listed in the application. The terms of use of the pattern are as follows:

1) Customers select the admin menu, then select the pattern

2) Draw a pattern by connecting at least 5 dots and then follow the instructions on the device.

3) Enter the transaction PIN to confirm pattern registration.

iii. Using Fingerprint (Biometric)

Customers can register login using fingerprints, which will only run on devices that have a fingerprint login feature. The terms of use of fingerprints are as follows:

1) Customers can register their fingerprints on the LINE Bank by Hana Bank application which has been registered on one installed device;

2) For every fingerprint data registration or deletion activity, customers need to log in first to the application, then select the admin menu and select biometrics then confirm by agreeing to the statement and entering the transaction PIN.

iv. Using Face Login (Biometric)

Customers can register login using their face, which will only run on devices that have a login feature using their face (Face Login/ID). The terms of use of face login are as follows:

Customers can register facial data in the application that has been registered on the device, provided that the face is clearly visible, without a face covering and clear lighting;

For every activity of registering or deleting facial data, customers need to first log in to the application, then select the admin menu and select biometrics, then confirm by agreeing to the statement (during registration) and entering the transaction PIN.

In the login service using biometrics, there are several policies as follows:

a. Fingerprint and facial login data will be lost and customers will need to re-register if they log in and enter other user data on the device being used.

b. The Bank is not responsible for any misuse by other parties whose biometrics are registered on the customer's smartphone.

c. The Bank is not responsible for any losses experienced by customers in connection with biometric login (either intentionally or unintentionally) or using the Bank Application, even if the Bank has notified them of the possibility of losses, including losses arising from:

i. Violation of Bank provisions regarding the login process using Application biometrics.

ii. The occurrence of an unauthorized access process and/or unauthorized use of electronic devices.

iii. Use in any form by other parties of information or data related to customers due to using the Application's biometric login and/or obtained from customer use when logging in via biometrics.

iv. Access to the Application with biometric login by any party other than the User.

v. Any incident beyond the Bank's control or due to unreasonable use, and/or the occurrence of disconnection or termination during biometric login or the Application.

d. Customers are responsible for the accounts used in the Application and are not allowed to be transferred to other parties in any way. All consequences arising from misuse of the Account are the full responsibility of the customer.

e. The user is responsible for obtaining and using the necessary software and/or equipment to access the Application at the customer's own risk.

f. The Customer is also responsible for the performance and security (including without limitation taking all necessary steps to prevent unauthorized use or access) of any equipment used by the Customer to access the Application.

g. The customer authorizes the Bank that for security reasons, the Bank has the right to block customer access to the Application if there is an error in the Password/PIN 5 (five) times when accessing or making transactions or due to other matters which the Bank considers reasonable to suspect could cause losses to the Customer.

In the event of illegal access and activities on the confidentiality of User's Personal Data that is beyond the Bank's control, the Bank will immediately notify the User at the first opportunity so that the User can reduce the risks arising from this. The User is responsible for maintaining the confidentiality of the details of the User's information and Personal Data, including information regarding username, password, e-mail or OTP to anyone and to always maintain and be responsible for the security of the device that the User uses.

7. Changes to this privacy policy

The Bank has the right to change the Bank's privacy policy in accordance with the Terms & Conditions from time to time. If the Bank changes this Privacy Policy, the Bank will notify you via e-mail or by means of a notice on the Website 30 business days before the change takes effect. The Bank encourages you to review this page periodically for the latest information on how the provisions of this Privacy Policy are implemented by the Bank.

8. Others

This Privacy Policy is made under the laws of Indonesia and shall be governed and interpreted in accordance with the laws of Indonesia. This Privacy Policy is made in the Indonesian language. All subsequent correspondence relating to this Privacy Policy shall be conducted in the Indonesian language.

Governing law and jurisdiction. This Privacy Policy is governed by and to be interpreted in accordance with the laws of the Republic of Indonesia. Any and all disputes arising from this privacy policy will be governed by the exclusive jurisdiction of the South Jakarta District Court.

Exclusively for LINE Bank Application

LINE ID Privacy Policy for LINE Bank by Hana Bank

In order to support digital banking provided by PT Bank KEB Hana Bank Indonesia, namely "LINE Bank by Hana Bank" via online or offline (hereinafter referred to as the "Service"), LY Corporation ("LYC", "we" or "us") has adopted this LINE ID Privacy Policy for LINE Bank by Hana Bank to explain our handling of additional information obtained, used, or shared by the Company to LYC (or LY Corporation).

The LINE ID Privacy Policy for LINE Bank by Hana Bank constitutes additional provisions to the LINE Privacy Policy, which shall remain in force and apply equally to the additional information items described in this Privacy Policy.

Privacy Policy for use of LINE Bank location information by Hana Bank

You agree to provide location information to LINE Bank by Hana Bank in order to receive personalized services, experiences, and benefits while using LINE Bank services. Any form of location information will be processed and handled in accordance with LINE Bank by Hana Bank's Privacy Policy.

Information Shared by LINE with Hana Bank

You agree that in order to provide the Service facilities, and support customers in connection with our Services to prevent unauthorized use of our Services, LY Corporation may provide personal information that has been collected by LY Corporation to Hana Bank to the extent of providing the Services described in the LINE Bank Privacy Policy by Hana Bank.

When you submit a request to correct and/or update your personal information in LY Corporation's system, LY Corporation collects such personal information for the purpose of updating our records. In this regard, LY Corporation will also automatically share such personal information with Hana Bank for the purpose of updating Hana Bank's system records, for the purpose of providing the Services and ensuring a smooth user experience.

Personal information shared by Hana Bank with LYC (or LY Corporation) will be processed and handled in accordance with the LINE Bank by Hana Bank Privacy Policy.

Information Shared by Hana Bank to LINE

Please refer to the LINE Bank by Hana Bank Privacy Policy for details of the information shared by Hana Bank with LYC (or LY Corporation) for all data shared for and/or to other parties based on the Customer's individual consent.

9. Acknowledgement and Consent

By using the Application, you acknowledge that you have read and understood this Privacy Policy and the Terms of Use and agree and consent to the Bank's use, practices, processing and transfer of your personal information as stated in this Privacy Policy.

You also represent that you have the right to share all information you have provided to the Bank and to grant the Bank the right to use and share such information with Service Providers.

10. Stop Receiving E-mails

The Bank has a policy to opt in/out of the database. If you wish to stop receiving e-mails from the Bank, please click the unsubscribe link included in each e-mail.

11. Contact us

If you have further questions about the privacy and security of your information and wish to update or delete your data then please contact us on 1500021 or visit your nearest Network office.

We care about your data, get to know more here

Privacy Policy

Get LINE Bank app on your mobile

Any questions?

1-500-021

Mail Inquiries