1. General

As part of the Heineken Company, PT Multi Bintang Indonesia Tbk and its affiliate companies (“HEINEKEN” or “we” or “us” or “our”) is the controller of the processing of all personal data collected through this website dedicated to our brand Multi Bintang (the “Website”). HEINEKEN respects your privacy and is committed to keeping your Personal Data secure and managing it in accordance with our legal responsibilities under applicable data protection laws.

Please read this Privacy Policy carefully as it contains important information to help you understand our practices regarding any personal information that you give to us or that we collect otherwise in the context of the Website (“Personal Data”).

 

2. What Personal Data We Collect and How We Use your Personal Data

You can use the majority of our Website without being required to provide any Personal Data to us. For certain services or activities you will need to provide Personal Data for us to be able to provide you the requested service or product or for you to participate in the activity. Requested information on the Website marked with an asterisk is mandatory. If you do not provide the requested information, we will not be able to deliver the service or product to you or you cannot participate in the activity. In addition to information you are required to provide to us in order to participate in activities/campaigns, we collect certain information when you visit our Website.

- Participation in campaigns, prize draws, contests;
If you take part in contests or events, depending on the campaign, prize draw or contest you will be asked for your name, email address, home address, telephone number and answers to open questions in order to ‘win’. If needed to send you the prizes per regular mail (e.g. as for tickets or products), we will also ask for your physical address or we may ask other specific details needed to award your prize to you. We need this information to process your participation and to be able to communicate with you about your prize or to send the prizes to you. All information about your participation in our campaigns, prize draws and contests will be retained by us for a maximum period which refer to our policy for Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia after the end of the contest. The information will not be used for other purposes if you have not explicitly been informed about these purposes and/or have been asked for consent.

- Information when you contact us;
If you visit our Website and have a question or other remark, you can submit our Contact Form. You will be asked to provide your name and email address and obviously information about your request. We will only use this information to respond to your question. We will register your requests, questions and our responses and other actions to handle your request. We will retain all information for the period which refer to our policy for Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia after your question or complaint has been solved or the inquiry was closed.

- Information about your visit to and use of our Website;
We collect certain information when you visit our Website, such as your IP address, which web pages you visit, device category, browser, and type of internet browser, clicks and views. The information about your use of our Website and services enables us to build segments, which are groups of website visitors or customers with a number of common characteristics such as age group, gender or region. We will likely add you to one of our segments. Segments are used by us to customize the Website and to e.g. change the order of search results or where we place certain offers so you are more likely to see these. We may also use segments to show online advertisements that we think are relevant for you and to send you commercial messages.
We use this Personal Data to be able to promote our products and services to our consumers(*) and Website visitors, to enable us to attract more consumers(*), to improve the sale of our products and services. We will retain the Personal Data for a maximum period which refer to our policy for Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia.

- Marketing;
Information about your online searches (clicks and views), your setting on our Website, your customer service requests and contact history can be combined by us. This information enables us to use different channels for relationship management and marketing of our products and services to you via including but not limited to e-mail, direct mail, social media, telephone or online advertising which may include personalizing Website content and offers so these are tailored to your preferences. You can always opt-out of receiving our newsletter, direct mail, social media and telephone and you can always object to our use of your Personal Data for direct marketing purposes (for more information about how to do this, read the paragraphs below).
We use this Personal Data to be able to promote our products and services to our customers(*) and website visitors, to enable us to attract more customers(*), to improve the sale of our products. The Personal Data shall generally be deleted or anonymized within a maximum period which refer to our policy for Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia.

- Maintenance and optimization of our Website;
Your Personal Data will also be used for maintenance and analysis of our Website to solve performance issues, to improve the availability and user experience. We log all use of our Website.

The Personal Data, including in the logs of use of our Website, will be retained for a maximum period which refer to our policy for Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia. The logs of the use of our Website will be deleted within 14 months after creation.

 

3. How We Share Your Personal Data

We may need to share Personal Data with third parties to help us provide services and products to you and to run our Website. These third parties are:

a) HEINEKEN group companies for the purpose of storing Personal Data processed via the Website, due to shared IT systems

b) Service providers where this is needed to provide us with a service and to provide data analytics services

c) Service providers that help us organize campaigns and promotions

d) First and Third party advertising companies

e) Media agencies for marketing purposes and research purposes

f) In case HEINEKEN sells all or some of the assets or shares of a HEINEKEN group company to which Personal Data was transferred to a third party, your Personal Data may be provided to this third party.

These parties may be located in the European Union or other countries in the European Economic Area (EEA) or elsewhere in the world.  When Personal Data is stored by us outside the EEA we will ensure an adequate level of protection of the transferred Data. We require service providers to use appropriate measures to protect the confidentiality and security of the Personal Data.

We may also need to provide Personal Data to law enforcement bodies in order to comply with any legal obligation or court order.

 

4. Security of Personal Data

We will take appropriate technical, physical and organizational measures to protect the Personal Data collected through the Website from misuse or accidental, unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access, that are consistent with applicable privacy and data security laws and regulations. However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorized or unintended access that is beyond our control.

Our Website may contain links to other websites. We are not responsible for the privacy practices, content or security used by such other websites, which shall not be governed by this Privacy Policy. We advise you to always carefully read the privacy policies on these other websites.

 

5. Retention of Your Personal Data

We will retain your Personal Data for as long as legally required or for as long as necessary to provide you with any requested services or for any of the other purposes listed in this Privacy Policy. The specific retention term are listed in our Personal Data Retention Schedule in accordance with the related applicable laws in Indonesia for each of the relevant purposes. We will take reasonable steps to destroy or de-identify Personal Data we hold if it is no longer needed for the purposes set out above or after the expiration of the defined retention term.

 

6. Cookies

A major part of the information referred to in this Privacy Policy is collected via our use of cookies and similar techniques. Cookies are small text files containing small amounts of information which are downloaded and may be stored on your user device, e.g. your computer, smartphone or table. Techniques we use that may be similar to cookies are tracking pixels, Java Scripts, tags and web beacons. These cookies and similar techniques are sometimes necessary to remember your account settings, language and country, but also enable us to measure and analyze your behavior on our Website and for showing you personalized advertisements on our Website or on third party websites. Where legally required, you will be asked for consent to our use of cookies.

To view more information on what cookies we use and how we use them please review our separate Cookie Policy in the footer of this Website.

 

7. Social Media

You may choose to share information on our Website via social media, including but not limited to, Facebook, Instagram, LinkedIn and YouTube. This means that the information you share, with name and preferences, shall be visible to visitors of your personal pages. We advise you to carefully read the privacy policies of the social media parties as these are applicable to the processing of your Personal Data by these parties.

 

8. Children's Privacy

The Website is not intended for use by individuals under the age of 21 (or the applicable legal age for consuming the products in question). We do not knowingly collect Personal Data from individuals under the age of 18.

 

9. Your rights, questions and complaints

If your personal data is or has been subject to the European GDPR (General Data Protection Regulation) or to the extent applicable under your local law, you have the right to request access to and deletion of your personal data, to object, to request restricted processing, to receive an overview of the personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to file a complaint with your local data protection authority. All your rights are subject to applicable data protection laws and other relevant laws and regulations, to the HEINEKEN Privacy Procedures and other HEINEKEN guidelines. However, you always have the right to object to our use of your Personal Data for direct marketing communications, and when you do so, we will accommodate your request.  Where you have provided consent to our use of your Personal Data, you have the right to withdraw your consent without this effecting the lawfulness of our use of this Data before your withdrawal.

 

10. Contact

If you wish to know which rights you have, if you wish to exercise your rights or if you have a complaint about how your personal data is processed by us or about our privacy and data protection practices in general, you can contact privacy.indonesia@multibintang.co.id.

 

11. Updates

We will keep this Privacy Policy under review and may be amended from time to time. Every change to this Privacy Policy will be immediately applicable and will be posted on our Website page as the privacy notice to the extent reasonably possible, will be communicated to you. You will be deemed has agreed to this Privacy Policy including its amendment(s) (if any) during accessing our Website.

 

(*)  Prevailing Legal Drinking Age provisions for alcoholic beverages in the Republic of Indonesia are applied