Privacy Policy & Security Policy

Protecting your privacy is our priority. This document (the "Privacy Policy") is intended to provide you with information about how the Great Eastern group of companies (as defined below) manages Personal Data protected by personal data protection laws and regulations. We hope you will take the time to read this Privacy Policy to understand the purposes for which we collect, use, and disclose your Personal Data.

By interacting with us, providing information to us, participating or purchasing products or services that we provide, you give your consent and authority to the Great Eastern group of companies (including The Great Eastern Life Assurance Company Limited, The Overseas Assurance Corporation Limited and Great Eastern Financial Advisers Private Limited and related companies) (collectively referred to as the “Company”) including all its representatives and/or agents (“Marketing Personnel”) (hereinafter collectively referred to as “Great Eastern” or “we”) to process personal data, collect, store, update, delete, process, use and/or provide personal data, information or particulars about me that are available, obtained or stored by Great Eastern, to other parties (including but not limited to reinsurance companies, insurance, institutions, banks, or other legal entities both domestically and abroad) that have a relationship/collaboration with Great Eastern for the purpose of processing insurance applications, implementing Policy provisions, customer satisfaction surveys, or for other purposes according to Great Eastern’s needs as long as they do not conflict with laws and regulations. Therefore, by approving this document, I am serving as written evidence of my granting of approval/authority/permission to Great Eastern.

You may revoke or terminate the above consent/authorization by providing prior notice to Great Eastern no later than 14 (fourteen) business days before the revocation of consent/authorization becomes effective.
This Privacy Policy supplements, but does not replace, any other permissions you have previously granted to Great Eastern regarding your Personal Data, and your permission in this context is considered in addition to the rights previously available to the Company to collect, use, and disclose your Personal Data.

Great Eastern may periodically update this Privacy Policy to ensure that it is consistent with the latest developments, industry trends, and/or changes in applicable laws and regulations. In connection with your legal rights, you agree to be bound by the provisions written in the Privacy Policy, which will be updated from time to time and can be accessed on our website. You are expected to check the website page periodically for the latest information regarding the handling of your Personal Data.

1. Personal Data

In this Privacy Policy, “Personal Data” refers to any information, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information that the Company has obtained or has access to. Examples of Personal Data that you may provide to us include (depending on the nature of your interaction with us) your name, national ID card, passport number or other identification, telephone number, mailing address, email address and information relating to other individuals for any purpose including digital application services such as date of birth, access to GPS, microphone and camera contained in your device which data you have provided to us in any form you have submitted to us, or through other forms you have completed.

You have rights related to Personal Data Protection in accordance with the rights stipulated in the laws and regulations in force in Indonesia.

2. Collection of Personal Data
2.1 In general, we collect Personal Data in the following ways:

1. when you submit a Life Insurance Request Letter (SPAJ), proposal form or other forms related to all our services
2. when you enter into any agreement with us, submit documents or information in connection with your interactions and transactions with us, or when you use our services
3. when you interact with our customer service officers, for example via telephone (which may be recorded), correspondence, fax, face-to-face meetings and e-mail
4. when you use some of our services, such as digital sites and applications, including opening an online account with us
5. when the policyholder purchases an insurance product for you by designating you as the insured
6. when you ask us to contact you or add you to our e-mail list or mailing database; or when you respond to a request for additional Personal Data, participate in a promotion or other initiative;
7. when you are contacted by, and respond to, our marketing personnel;
8. when you apply for a job at our Company
9. when we receive references from business partners and third parties about you, for example when you are referred by them;
10. when you are recorded by our CCTV cameras while you are at our location, or through photos or videos taken by us or our representatives when you attend an event we hold;
11. when we seek or receive information from third parties about you in relation to your policy, policy application, claim or job application, for example from other insurance companies, insurance company associations, hospitals, clinics, car repair shops, your previous place of employment and other authorities; and/or
12. when you submit Personal Data to us for other reasons

2.2 When you visit our site, you generally remain anonymous, but please note the section in this Privacy Policy regarding cookies. On this site, we do not automatically collect any Personal Data, including your email address, unless you provide such information or log in with your account name and password.

2.3 If you provide us with Personal Data of a third party (e.g. information about your spouse, children, parents and/or employees), including if you name them as beneficiaries or dependents, or when you refer us to a third party so that we can offer products and/or services to such third party, by providing such information to us, you automatically represent to us that you have obtained the consent of such third party to provide their Personal Data for the relevant purposes.

3. Purpose of Collection, Use and Disclosure of Your Personal Data

3.1 In general, Great Eastern collects, uses and discloses Personal Data for the following purposes:

1. provide responses, process and handle your questions, complaints, feedback and requests; 
2. manage the Company's administration and operational business activities and comply with internal policies and procedures; 
3. facilitating business asset transactions (which may develop into mergers, acquisitions or asset sales) involving any division of the Company; 
4. match pre-existing Personal Data relating to you for any of the purposes stated herein; 
5. request input or participation in surveys, including market research; 
6. analyze and/or combine Personal Data held by the Company from time to time for statistical data, profiling, product research, product design and product development, understanding customer needs, requirements and preferences, studying market trends and demands, and developing and improving the quality and features of the Company's products and services; 
7. prevent, detect and investigate crimes, including fraud and money laundering, and analyze and manage commercial risks; 
8. handle and manage claims, actions and legal proceedings, and protect and enforce our legal rights and obligations as stated in the contract; 
9. comply with applicable laws and regulations, codes of practice or guidelines, or to assist in law enforcement and investigations by the authorities; and/or 
10. other purposes related to the above matters such as providing services on digital applications such as registration, services to find out the location of the nearest hospital, contacting customer service, and/or online claim submission services using QR codes.
    

These purposes also apply even if you no longer have an account with us, or have terminated those accounts.

3.2 In addition, Great Eastern collects, uses and discloses your Personal Data for the following purposes depending on the type of interaction between us and you:

If you are a prospective customer or potential policy holder

1. providing alternative financial solutions, including evaluating your financial needs and contacting you (including by telephone) to provide recommendations on the types of products and services that are appropriate for your needs;
2. in the event that a marketing person has been assigned to handle your portfolio or account, we may also use your telephone number to contact you from time to time to obtain your direction and/or provide information, updates or recommendations in relation to the terms and conditions of our agreement with you;
3. arrange insurance contracts;
4. assess and process your applications or requests regarding products and services offered by Great Eastern;
5. communicate with you (including by telephone) in connection with your policy and provide updates regarding the benefits, terms and conditions of the policy, and provide administrative information, including for the purpose of serving you in relation to products and services offered to you;
6. close the coverage with another insurance company;
7. manage, maintain, regulate and operate the products and services offered to you, including reinsurance products offered by other companies and government financing programs
8. conducting policy risk selection, facilitating risk selection and assessing claims history, either with Great Eastern or other parties
9. premium and debt collection;
10. assess and process any claims and payments arising under the scope of your policy, including requesting information such as medical records and blood test results from hospitals and clinics;
11. other purposes in connection with the above matters

You need to ensure that all Personal Data you submit to us is complete, accurate, true and correct, otherwise we may not be able to provide the products and services as requested by you.


If you are a Beneficiary, Insured or appointed representative in connection with a particular Policy (including but not limited to the holder of a mandate or power of attorney), or a member of a group insurance

1. assess and process Policyholder applications or requests regarding products and services offered by Great Eastern; 
2. close the coverage with another insurance company; 
3. manage, maintain, regulate and operate the products and services offered to policyholders, including 
4. manage, maintain, regulate and operate products and services offered to policyholders, including reinsurance products from other companies, government programs and financing programs; 
5. conducting policy risk selection, facilitating risk selection and assessing claims history, either with Great Eastern or other parties 
6. premium and debt collection; 
7. assess and process any claims and payments arising within the scope of the policy in question, including requesting information such as medical records and blood test results from hospitals and clinics; 
8. other purposes related to the matters mentioned above, such as providing services on digital applications such as registration, services to find out the location of the nearest hospital, contacting customer service, and/or online claim submission services using QR codes.

If you apply as a candidate to work as our employee or marketing staff

1. processing your application including conducting background checks, such as your debt status and qualifications; 
2. provide or request employee references for background checks or selection; 
3. conduct interviews and assess whether you are the most suitable candidate for the position you are applying for; 
4. communicate with you when necessary to enable Great Eastern to comply with its policies and work processes, including for business continuity purposes 
5. other purposes in connection with the above matters 

You need to ensure that all Personal Data you submit to us is complete, accurate, true and correct, because if not, it may result in delays in processing your application, or we may not process your application.

If you are a member of the  Live Great Program  ("Program")

1. provide communication products, particularly to deliver communications you initiate using our services; 
2. offer and inform you about the benefits of this Program; 
3. provide updates about services, delays and/or errors; 
4. ask for your input or participation in an online survey 
5. conducting market research for statistical, profiling or other purposes; 
6. planning and implementing marketing or promotional programs and similar events; and 
7. other purposes in connection with the above matters 

3.3 When you submit an application for, or purchase a Great Eastern product through Overseas-Chinese Banking Corporation Limited, you also agree to the terms and conditions of OCBC Bank's Data Protection Policy, which is available at  www.ocbc.com/policies  or by requesting a copy from OCBC Bank.

3.4 In addition, to the extent permitted by laws and regulations in the field of personal data protection, Great Eastern may also collect, use and disclose your Personal Data for the following purposes (which may be stated by us in our documents and agreements as "Additional Purposes" for the handling of Personal Data):

1. provide or market services, products and benefits to you, including promotions, loyalty programs and reward programs; 
2. match your Personal Data with data previously collected for other purposes or by the Company or other sources (including third parties) in connection with the provision of products and services offered; either by the Company or designated third parties; 
3. run races or competitions, and create unique experiences for you during your association with Great Eastern; and 
4. sending details of products, services, special offers and gifts; either generally to all customers, or to specific parties, including you, who may be interested in such information; and 
5. conduct market research, study and determine customer behavior, location, preferences and demographics so that the Company can offer products and services as well as special offers and marketing programs that are relevant to your profile or preferences. 

3.5 In connection with certain products or services or in your interactions with us, we may provide notice of other purposes for which we collect, use, or disclose your Personal Data. In such cases, we will collect, use, and disclose your Personal Data for those additional purposes, unless we notify you that we no longer require such data.

4. Granting Consent and Power of Attorney

4.1 Giving Consent


By corresponding with us, providing information to us, participating in or purchasing products or services we provide, you give your consent or willingness to the following:

1. Accepting product offers issued and/or services provided by the Company through my/our personal means of communication, such as telephone, short message service (SMS), e-mail, facsimile and other personal means.
2. Receive the Policy to be issued by the Company via electronic media or other means determined by the Company.
3. Receive transaction reports regarding My/Our Policy recorded in the Company to third parties in the context of carrying out the Company's business activities.
4. Participate in questionnaires, surveys or other similar activities carried out by the Company and/or other parties appointed by the Company.
5. Premium payments are not made in cash to marketing staff or company staff. Premium payments will be made via bank transfer, debit account, or credit card, as per product terms.

4.2 Grant of Power of Attorney

By purchasing products or services that we provide, you authorize:

1. The company gives an order to the bank to debit the account you designate for payment of life insurance premiums.
2. The Company or a party authorized by it to obtain data and information from doctors, hospitals, clinics, insurance companies, reinsurance companies, banks, financial institutions or organizations or other parties that have "Health History Records and Other Information" regarding you to disclose to the Company all health history records and all other information, whether while you are still alive or have died.
3. The Company or a party authorized by it to obtain information and data regarding accounts and/or financial conditions in your name from Banks/Financial Institutions/Organizations/Agencies or other parties related to my coverage in this life insurance program for the Company's needs in connection with the implementation of the Minister of Finance Regulation governing the Know Your Customer Principles for applicable non-Bank Financial Institutions.
   
   The authorization as mentioned above is an integral part of this SPAJ and cannot be revoked, canceled or terminated or canceled or terminated for the reasons stated in articles 1813, 1814 and 1816 of the Civil Code. In the event of your death, you require the Beneficiary/Beneficiary or your legal heir or successor to reassign or do anything and everything necessary so that the matters included in this authorization remain valid. The Company may use a copy of this Power of Attorney for legitimate purposes.

5. Use of HTTP Cookies

5.1 When you interact with us on our site, we automatically receive and record information in our server logs. We may use  cookies  to enable our servers to recognize repeat visitors as unique users, including, without limitation, monitoring information about how visitors arrive at our site,  what browsers  visitors use, what operating systems visitors use, visitors' IP addresses, information about the sites visitors click on and when (e.g., which pages are visited, what time they are visited, and the amount of time spent on each page).

5.2  Cookies  are small text-based files that are placed in the "Cookies" folder on  your computer's hard disk  and allow us to remember your habits.  Cookies  stored on our servers can only be read by us, and  cookies  cannot access, read, or change data on your computer. All browsers have an option to opt out of storing  cookies , and if you decline to store  cookies  , we do not collect information about those visitors.

5.3 If you wish to deactivate  cookies  associated with these technologies, you can do so by changing the settings  in  your browser. However, as a result, you may not be able to access certain parts of our site.


6. Data Security

6.1 Great Eastern will use its best efforts to protect Personal Data held by us or under our control by implementing security measures to prevent unauthorized access, collection, use, disclosure, copying, modification, deletion, or other similar risks. However, we cannot guarantee the security of any Personal Data collected from you or about you, nor can we guarantee that harmful code will not infect our sites and digital applications (e.g.,  viruses, bugs, Trojan horses, spyware, or adware ). You should be aware of the risks that may arise when you visit our sites and digital applications.

6.2 While we strive to protect your Personal Data, we cannot guarantee the security of information you transmit over the Internet, and we urge you to take precautions to protect your Personal Data online. We recommend that you change your password frequently, use a combination of letters and numbers, and ensure that you use a secure browser.

6.3 In addition to ensuring that your username and password are secure and confidential and not shared with unauthorized persons, you must notify us at the earliest opportunity if you know or suspect that your username and password have been lost, stolen, or have had their confidentiality compromised, or if any unauthorized transactions have occurred or may have occurred. We are not responsible for any losses resulting from any such breach of security or any unauthorized use of your username and password.

7. Anti-Spam

7.1 If you receive spam messages and wish to report them to us, please send the email you received to  wecare-id@greateasternlife.com

8. Third Party Sites

8.1 Our site may provide links to other sites operated by third parties. We are not responsible for the privacy policies of sites operated by third parties that are linked to our site. We recommend that you review the privacy policies of those sites. Some of these third party sites may also display our logos or trademarks even though they are not operated or maintained by us. When you leave our site, you should check the privacy policies of those third-party sites to determine how they will handle the information they collect from you.

9. Contacting Us – Withdrawing Consent, Accessing and Correcting Your Personal Data

9.1 If you:

1. Have questions or feedback about Personal Data or the Privacy Policy; 
2. wish to withdraw permission to use your Personal Data for the purposes stated in this Privacy Policy; 
3. If you would like to access and correct your Personal Data, please contact Great Eastern at the following contact details:
   
   Customer Contact Center
   Tel: (021) 2554 3800 (Monday-Friday, 09:00 – 17:00 WIB)
   Whatsapp: (+62) 811 956 3800 (Monday-Friday, 09:00 – 17:00 WIB)
   Email:  wecare-id@greateasternlife.com
   
   Or by mail to the following address:
   
   Customer Contact Center
   PT Great Eastern Life Indonesia
   Menara Karya 5th Floor
   Jl. HR Rasuna Said Block X-5 Kav. 1-2
   South Jakarta 12950 – Indonesia

10. Jurisdiction

10.1 This Privacy Policy and the use of our websites and digital applications are subject to the laws in force in Indonesia.