Privacy Policy
PRIVACY POLICY – CACTUS VILLAGE PENIDA
This Privacy Policy explains how Cactus Village Penida (“we,” “us,” or “our”) collects, uses, and protects your personal information. We process your data in accordance with applicable data protection laws, including best practices based on the General Data Protection Regulation (GDPR).
1. DATA CONTROLLER
The data controller responsible for your personal information is P. T. ANGELA PENIDA MANAGEMENT, located at Jl. Batumulapan, Batunuggul, 80771 Nusa Penida, Tax ID/Company Reg: 965685936907000. For any inquiries regarding personal data, please contact us at cactusvillagepenida@gmail.com.
2. WHAT DATA WE COLLECT AND HOW WE GET IT
We only process personal data that you voluntarily provide to us. We obtain this data during the reservation process, through our contact form, via online travel agencies (OTAs) we partner with (e.g., Booking.com, Agoda), or through direct communication.
Depending on the purpose, we may ask for:
- Personal details: First name, last name, residential address.
- Identification: Passport number or National ID card number, and nationality (legally required for hotel registration in Indonesia).
- Contact details: Email address, phone number.
- Billing details: Credit card number, bank account details, company name, and Tax ID (for invoicing).
- Other details: Vehicle/scooter registration number, special requests.
Providing your data is voluntary but necessary to process your booking and fulfill the hospitality contract. Consent for marketing (newsletter) is strictly optional.
3. PURPOSE AND LEGAL BASIS FOR PROCESSING
We process your personal data to:
- Fulfill our contract with you (process your reservation, payments, and provide accommodation services).
- Comply with legal obligations (Indonesian tax, accounting, and immigration laws).
- Pursue our legitimate business interests, which include:
- Ensuring the security of our guests, property, and billing processes.
- Responding to inquiries not directly related to an existing contract.
- Pursuing debt collection or defending against legal claims.
- Conducting statistical analysis of our website to improve our services.
- Sending direct marketing materials (only if explicit consent has been given).
4. DATA RETENTION – HOW LONG DO WE KEEP IT?
We keep your personal data for as long as necessary to complete your stay and resolve any post-stay matters. Additionally, to comply with accounting and tax regulations, and for fraud prevention and archiving purposes, financial and booking data may be stored for a period of up to 10 years after your check-out date.
5. YOUR RIGHTS
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure (Right to be Forgotten): Request deletion of your data, provided we are not legally obliged to keep it.
- Restriction & Objection: Object to or restrict specific types of processing (e.g., direct marketing).
- Data Portability: Request the transfer of your data to a third party in a structured format.
6. DATA SHARING – WHO HAS ACCESS?
We do not sell your personal data. We only share it with trusted parties who assist us in providing our services:
- Authorized employees and contractors who need access to fulfill their duties.
- Third-party service providers (IT support, accounting, marketing, legal advisors, booking engines, and payment gateways like Doku.com).
- Local authorities and law enforcement (if required by law, e.g., police registration of foreign guests).
7. AUTOMATED PROCESSING AND PROFILING
Your data may be processed automatically (including profiling) to analyze preferences and improve our website’s functionality and marketing offers. However, this profiling will not produce any legal effects concerning you or significantly affect your situation.
8. COOKIES AND SOCIAL MEDIA PLUGINS
Cookies Our website uses cookies (small text files saved on your device) to collect standard internet log information and track visitor behavior. This helps us optimize our website, analyze traffic (e.g., where visitors come from), and improve user experience. Cookies do not identify you personally. You can disable cookies in your browser settings, though this may affect site functionality.
Social Media Plugins Our website uses social media plugins from providers such as Facebook, Google, Instagram, and TripAdvisor. When you visit a page with these plugins, your browser establishes a direct connection to the servers of these providers. The providers receive information that your browser has accessed our site (including your IP address), even if you do not have an account or are not logged in. This data is stored directly by the providers according to their own privacy policies.
Last updated: May 2026
Cactus Village Penida © All rights reserved.
