Last Updated: December 11th, 2025
This Privacy Notice describes how the Indonesia Chapter of ISACA (“ISACA Chapter”, ”we” or “us”) collects, uses, shares, and retains personal information when you use this ISACA Chapter at https://engage.isaca.org/indonesiachapter (the “Site”), or when you interact with us in person. Personal information is data that can be used to identify you directly or indirectly or to contact you including, but not limited to, your name, mailing address, email address, and telephone number.
Please note that this Privacy Notice does not apply to information collected or used by the global ISACA web sites, or mobile applications, which is governed by the Privacy Notice located at https://www.isaca.org/privacy- Notice. Also, this Privacy Notice does not cover the practices of any of our Chapter’s business partners (such as vendors, sponsors, or advertisers), and does not apply to personal information that we collect from or about our employees, consultants, contractors, vendors, sponsors, or advertisers.
1. Modifications to this Notice
From time to time, we may need to update or modify this Privacy Notice, to address changes in the law, new issues or to reflect changes on our Site. When we update this Privacy Notice, we will change the “Last Updated” date at the top of the Notice so you know it has been updated. To the extent required by law, we will notify you of material changes to this Privacy Notice.
2. International Visitors
Our Site is for individuals located in the Indonesia. If you are not a resident of the Indonesia, your country’s data protection laws may differ from those in the Indonesia, and may provide a greater protection. ISACA has over two hundred local chapters throughout the world. To find your local chapter, you can conduct a search on ISACA’s Local Chapters page. We comply with applicable laws regarding any international data processing.
2a. Legal Basis for Processing Personal Data
We process personal information based on one or more of the following legal bases under Indonesian Personal Data Protection Law:
● Your consent;
● Performance of a contract to which you are a party;
● Compliance with a legal obligation;
● Legitimate interests pursued by ISACA Chapter, provided that such interests do not override your rights and freedoms;
● Protection of vital interests of the data subject or another individual; or
● Other lawful purposes recognized by law.
3. Collection of Personal Information You Directly Provide
We collect personal information from you when you interact with our Site and when you use our services. We may collect information directly from you through, for example online and offline registration forms for events, exams or meetings.
Events. We may host events that include in-person and virtual conferences, training, knowledge sharing and webinars. If you register for an event, we may collect the following information from you [such as: first name, last name, email address, phone number, credit card and other payment information, business address, the type of business you work for or with, and your role in that business. as well as demographic information such as courses or areas of study in which you may be interested]. We use the information you give us to provide you with event services. To the extent the information requested is not required for your participation in a given ISACA Chapter program, you will be told which information is optional. Should you fail to provide optional information, certain ISACA Chapter programs or features may not be available to you.
Presenter. If you are a presenter at one of our events, we will collect information about you such as your name, employer, contact information and your photograph, and we may also collect information provided by event attendees who evaluated your performance as a presenter.
Committee Member. We may also collect your personal information if you are a committee member, or when you assist with initiatives or projects, or when you serve as a Chapter Officer, or on the Chapter Board.
Chapter Meetings. We may also collect your personal information when you attend a Chapter Meeting.
Communications. If you communicate or correspond with us by email, through postal mail, via telephone or through other forms of communication, we may collect the information you provide as part of those communications. For example, if you correspond with us through email, we may collect and store the email address you use to send the applicable correspondence and use it to respond to your inquiry; to notify you of other ISACA Chapter events; or to keep a record of your complaint, accommodation request, and similar purposes.
We may also maintain information about you that you do not directly provide, whether it is information received from third parties, such as business partners who provide exam administration services, or information we collects about your activities. For example, we may keep track of which events you have attended, which exams you have taken, which boards and committees you have served on, and which offices you have held.
4. Passive Data Collection – Information We Automatically Collect
As you navigate through and interact with our Site, we may use automatic data collection technologies to collect certain information about your device (computer, tablet, smart phone) and your activities, including:
If you access our Site through a computer, we may automatically collect information such as your browser type and version, computer and connection information, IP address, mobile device advertising identifier, Media Access Control (MAC) address pages you have visited, type of device, operating system name and version, device manufacturer, browser information (type, version), screen resolution, Internet service provider or mobile carrier’s name, connection speed and connection type, date stamp, URL of the last webpage visited before visiting our Site, and URL of the first page visited after leaving our Site, pages viewed, time spent on a page, click through, queries made, search results selected, comments made, search history, type of service requested, purchases made, and information collected through cookies, pixel tags, and other technologies.
If you access our Site through a mobile device, we may also be able to identify the location of your mobile device. We use your location information (if shared) to identify the geographic locations from which our content is accessed so that we can better understand what content topics may be most relevant in that region, and to develop resources around those content topics. You may choose not to share your location details with us by adjusting your mobile device’s location services settings.
Cookies are small files, typically of letters and numbers, downloaded onto your computer or mobile device when you visit certain websites. When you return to these websites, or visit other websites that use the same cookies, the websites recognize these cookies and your browsing device. A cookie cannot read data off your hard drive or read cookie files created by other websites. You can set yours to refuse cookies, or to alert you when cookies are being sent; however, if you disable cookies, the full functionality of our Site may not be available to you. More information on cookies and their use can be found at www.aboutcookies.org or www.allaboutcookies.org.
Cookies set by the website operator are called "first party cookies". Cookies set by parties other than the website operator are called "third party cookies". The parties that set third party cookies
can recognize your web browser both when it visits our Site and when it visits certain other websites where the third party’s cookies are also present.
On our Site, there may be certain third-party advertisers whose advertisements contain cookies that collect data from you. Some of those cookies may contain tracking mechanisms that observe your behavior across multiple Sites. We do not control the use of cookies by advertisers or third parties displaying data on the Site or on the sites you visit using links from the Site.
5. Why We Collect Your Information
We will only use your information as described in this Notice or as disclosed to you prior to such processing taking place. We may use your personal information:
● To provide our services to you, such as registering you for event or training programs;
● To respond to your requests;
● To advise you with information about other events or services which we believe may be of interest to you;
● To improve our services and to detect, prevent and address technical issues; and
● To enforce compliance with our agreements, codes of conduct and this Notice.
6. Sharing Your Information
We may share your personal information with third parties for legitimate business purposes, including in the following circumstances:
● To vendors or third-parties who deliver or provide services or otherwise act on our behalf or at our direction;
● To our volunteers and board members to provide our services;
● To ISACA and other ISACA chapters, the IT Governance Institute, and if you participate in our “Enterprise Participation Program,” your information will be shared with your organization’s program coordinator;
● If you are an event attendee, speaker, or sponsor, certain of your information will be included in the event roster, which roster will be publicly disclosed, and may also be shared with third-party event sponsors and exhibitors;
● To investigate potentially fraudulent or questionable activities; and
We require third-party service providers to implement adequate security measures. Personal data shared with third parties will only be processed under agreements ensuring compliance with Indonesian law and only for legitimate purposes.
7. Data Retention
We will retain the personal information for as long as is needed to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, legal, accounting or other purposes). When we have no justifiable business need to process your personal information, we will either delete or anonymize it. You may request deletion of your personal data when retention is no longer necessary or as otherwise allowed under Indonesian law. Requests should be sent to info@isaca.or.id. Verification may be required.
8. Security
We use reasonable measures to safeguard your personal information, and follow applicable laws regarding safeguarding such information under our control. We cannot guarantee, however, that your information will remain 100% secure. The Internet by its nature is a public forum, and we encourage you to use caution when disclosing information online. Often, you are in the best situation to protect yourself online. You are responsible for protecting your username and password from third party access, and for selecting passwords that are secure.
9. Your Choices
If you receive commercial electronic communications from us, you can unsubscribe from the receipt of future commercial electronic communications from us by clicking on the “unsubscribe link” provided in such communications.
To help us keep your personal information up to date, you can request access to and seek to correct the personal information we maintain about you, by contacting us at info@isaca.or.id. In your request, please make clear what information you would like to have changed. For your protection, we may need to verify your identity before implementing your request. We will try to implement your request as soon as reasonably practicable. We reserve the right to refuse to act on a request that is manifestly unfounded or excessive (for example because it is repetitive) and/or to charge a fee that takes into account the administrative costs for providing the information or taking the action requested.
9a. Your Rights Under Indonesian Law
In accordance with the Indonesian Personal Data Protection Law, you have the following rights regarding your personal data:
● Right to access your personal data held by ISACA Chapter;
● Right to correct or update inaccurate or incomplete personal data;
● Right to request deletion or anonymization of personal data when no longer necessary for the purposes collected;
● Right to object to the processing of your personal data;
● Right to request restriction of processing;
● Right to data portability;
● Right to withdraw consent at any time (without affecting the lawfulness of processing based on prior consent).
Requests can be submitted via email to info@isaca.or.id. We may require verification of your identity before processing requests.
10. Links to Third-Party Sites
From time to time, we will provide links to third-party web sites, or advertisements will contain links to third-party sites. For example, we may link to a third party who is assisting in or is providing online training services. These links are provided as a service to you. These third-party sites are operated by independent entities that have their own privacy policies. This Privacy Notice does not apply to those third-party sites or to how those third-parties may collect or use your personal information. We have no control over the content displayed on such third-party sites, nor over the measures, if any, that are taken by such sites to protect the privacy of your information.
11. Children & Minors
We do not knowingly collect personal data from individuals under the age of 17 without consent from a parent or legal guardian. If you are a parent or guardian and believe we have collected personal data of a minor under your care, please contact us to request deletion or correction.
12. Contact Information
If you have questions or concerns about this Privacy Notice or how we process your personal information, please email us at info@isaca.or.id.