Data Processing Agreement
This document is written in Bahasa Indonesia and English. If the two differ, the Indonesian text prevails. Baca dalam Bahasa Indonesia
This Data Processing Agreement (the "DPA") forms part of the Voyage+ Operator Terms (the "Terms") between PT The Luxury Leisure Internasional ("Voyage+") and the Operator. Words defined in the Terms have the same meaning in this DPA.
This DPA is made under Law No. 27 of 2022 on Personal Data Protection ("UU PDP") and its implementing regulations. The terms Personal Data Controller, Personal Data Processor, Personal Data Subject and failure of Personal Data Protection are used in the same sense as in UU PDP.
1. The parties' roles
1.1For the personal data Voyage+ processes to provide the service to the Operator — Guests' data from Direct Bookings, crew records the Operator enters in the Console, the entries the Operator's team makes in the Console's document list, positions and readiness checks from the crew app, and messages between the Operator and its Guests ("Operator Personal Data") — the Operator is the Personal Data Controller and Voyage+ is the Personal Data Processor.
1.2For the data of the Account's users that Voyage+ needs to run, secure and bill the Account, Voyage+ is a Personal Data Controller, as clause 9.6 of the Terms describes.
1.3On a Desk Booking, the YH Charter desk is the Personal Data Controller of the Guest data it collects and shares with the Operator the data the Operator needs to perform the charter. The Operator processes that data as a Personal Data Controller in its own right, only to perform the charter and meet its legal obligations, and for no other purpose — including marketing — unless the Guest gives the Operator that consent directly.