LEGAL POLICY AND DATA GOVERNANCE
Privacy Policy EARTHLINE
Protection of user, customer, contributor, resource and digital interaction data
Management of PT Penanusa Indomedia AllianceValid from 30 August 2026Sitewww.garisbumi.com
Public documents that are part of the terms of use of GARIS EARTH services
Introduction and Scope
This Privacy Policy explains how GARIS EARTH collects, obtains, uses, stores, discloses, protects, corrects, deletes and destroys Personal Data. This policy applies when Users access www.garisbumi.com, subscribe to information services, send comments or materials, contact the editorial team, take part in surveys or activities, and use other digital services connected to GARIS BUMI.
By using GARIS BUMI services, Users declare that they have read and understand this Privacy Policy. If any Processing requires consent, LINE EARTH will request valid, specific, informed and unambiguous consent through appropriate means. Users can refuse or withdraw consent without prejudice to the lawfulness of previous Processing.
Identity of the Personal Data Controller
PT Alliance Penanusa Indomedia is the legal entity that manages GARIS BUMI and acts as the Personal Data Controller for the Processing of User Personal Data on GARIS BUMI sites and digital services. In this Privacy Policy, PT Alliance Penanusa Indomedia and GARIS BUMI are collectively referred to as GARIS BUMI or us.
Legal entity: PT Alliance Penanusa Indomedia
Site: www.garisbumi.com
Correspondence address: Graha Bumi Building, 4th Floor, South Jakarta, Indonesia
Privacy and complaints contact: Garisbumiofficial@gmail.com with the subject PRIVACY
Understanding
Personal Data: data about an identified or identifiable natural person individually or in combination with other information, either directly or indirectly through electronic or non-electronic systems.
User: everyone who accesses or uses the GARIS BUMI site and services, including readers, information service customers, comment senders, contributors, sources, activity participants, and parties who contact the editor.
Processing: any action on Personal Data, including acquisition, collection, recording, storage, use, analysis, disclosure, deletion or destruction.
Cookies: small files or similar technologies stored on a User's device to perform site functions, store preferences, measure usage, and support security.
Data We May Collect
The type of data collected depends on the services used and the User's choices. EARTH LINE applies the principles of objective limitation and data minimization.
| Example Data | |
|---|---|
| Identity and contacts | The name, nickname, email address, telephone number, organization, title or correspondence address provided by the User. |
| Information subscription | Email address, name, topics of interest, consent status, sign-up time, sending interactions, and unsubscribe status. |
| Technical and device | IP address, device type, operating system, browser, language, device identifier, access logs, access times, referring pages and diagnostic data. |
| Site use | Pages or articles opened, duration of visits, searches, clicks, preferences, and interactions with features. |
| Communication | Fill out emails, contact forms, complaints, requests for the right of reply or correction, as well as sent attachments. |
| Contributors and activities | Identity, profile, payment account if necessary, work, photos, recordings, letters of approval, participant data, and activity documentation. |
| User generated content | Comments, articles, images, videos, account names and information intentionally published by Users. |
| Journalistic data | Information regarding sources, witnesses, victims, reported parties, documents, photos, audio and recordings obtained for journalistic work. |
How We Obtain Data
a. Directly from the User, for example when subscribing, filling out a form, sending a comment, contacting the editor, registering for an activity, sending a work, or giving an interview.
b. Automatically through servers, Cookies, analytics, logs and security technology when Users access the service.
c. From legitimate sources, including open sources, public documents, sources, activity partners, service providers and social media channels, as long as they comply with legal objectives and provisions.
d. From implementing journalistic activities based on verification, public interest, the principle of proportionality, the Journalistic Code of Ethics, and Cyber Media Reporting Guidelines.
Purpose and Basis of Processing
| Goal | Processing Basis | |
|---|---|---|
| Operate the site | Display pages, maintain sessions, prevent interruptions, and maintain service functionality. | Performance of services, legal obligations or legitimate interests. |
| Sending information | Send newsletters, customize topics, manage subscriptions, and measure deliverability. | User Consent. Users can stop at any time. |
| Communication and service | Responding to questions, complaints, corrections, right of reply, cooperation and requests for information. | Consent, performance of an agreement, legal obligation, or legitimate interest. |
| Analytics and development | Understand usage and improve navigation, performance, content, and reader experience. | Consent to non-essential Cookies or legitimate and proportionate interests. |
| Security and compliance | Detect abuse, spam, fraud, attacks, and terms violations and comply with legal processes. | Legal obligations and legitimate interests. |
| Journalism | Collect, verify, edit, publish, archive and account for journalistic works. | Legal obligations, public interest, legitimate interests, consent where necessary, or other grounds recognized by law. |
| Activities and cooperation | Manage enrollment, attendance, documentation, payments, partnerships, and program evaluation. | Consent, implementation of agreements, and legal obligations. |
Cookies and Similar Technologies
LINE EARTH may use essential Cookies for site functionality and security. Analytical, preference, personalization or advertising cookies are used according to the User's choice and applicable conditions. Users can manage Cookies via the consent banner or browser settings. Rejection of non-essential cookies does not prevent access to basic site functionality, but some features may not work optimally.
Essential cookies: required for security, session management, spam prevention and basic functionality.
Preference cookies: store language, display or topic of interest preferences.
Analytics cookies: help measure traffic and performance in aggregate.
Advertising or third party cookies: if used, they will be disclosed via a Cookie banner and may be rejected before they are activated, unless other legal grounds allow.
Disclosure to Other Parties
GARIS EARTH does not sell or trade Personal Data. Data can only be shared on a limited basis with:
a. Hosting, cloud storage, security, analytics, email delivery, forms, payments and technical support providers operating under instructions and confidentiality obligations.
b. Activity or collaboration partners, only for notified purposes and based on lawful Processing grounds.
c. Professional advisors, auditors, authorized agencies, or law enforcement officials when necessary to fulfill legal obligations, lawful processes, or defend rights.
d. Party to a restructuring, merger, takeover or transfer of company assets with equal protection and notification if required.
GARIS EARTH requires parties who process data on our behalf to implement security, confidentiality, limitation of purposes, assistance in fulfilling User rights, as well as deletion or return of data after the service ends.
Data Transfer Outside Indonesia
Some technology providers can store or process data outside Indonesia. Before carrying out a transfer, GARIS BUMI will comply with the provisions for cross-border transfer of Personal Data, including ensuring an equivalent or higher level of protection, implementing adequate and binding protection, or obtaining approval if required by statutory regulations.
Storage and Retention
Data is retained for as long as necessary to achieve the purposes of Processing, fulfill legal obligations, maintain security, resolve disputes and defend rights. Once the goal is achieved or the retention period expires, the data will be securely deleted, destroyed or anonymized, unless the law requires longer retention.
| Retention Principle | |
|---|---|
| Information subscription | Until the User unsubscribes. Proof of approval and disapproval lists may be retained as long as necessary for compliance. |
| Technical and security logs | As long as necessary for security and incident investigations based on reasonable and documented periods. |
| Complaints, corrections and the right to reply | During handling and afterward according to press obligations, verification and retention of company documents. |
| Contracts, transactions, and taxation | According to the time period required by law and audit requirements. |
| Journalism archive | Can be kept for documentation, accountability, public interest and press history with proportional security and evaluation. |
Data Security
LINE EARTH implements reasonable technical and organizational measures based on risk, including access restrictions based on need, authentication, password management, backup, system updates, vulnerability monitoring, access logging, encryption where appropriate, confidentiality agreements, personnel training, and service provider evaluation. No system is completely risk-free. Every incident will be handled quickly, documented and proportionately.
Rights of Personal Data Subjects
In accordance with applicable legal provisions, Users can submit requests to:
a. Obtain information regarding the identity of the Personal Data Controller, the purpose, basis and accountability of the Processing.
b. Access and obtain a copy of Personal Data.
c. Complete, update, or correct inaccurate data.
d. Withdraw consent.
e. Terminate, delete or destroy data according to provisions.
f. Delay or limit Processing.
g. Object to decisions based solely on automated Processing, including profiling, that give rise to legal consequences or significant impacts.
h. Obtain or transfer data in a format commonly read by the system if legal requirements are met.
i. File a complaint and demand compensation in accordance with statutory regulations.
Requests can be sent to Garisbumiofficial@gmail.com with the subject PRIVACY. LINE EARTH may request proportional identity verification. Requests can be rejected or limited if there are legal grounds, rights of other parties, safety, confidentiality of sources, integrity of journalistic archives, freedom of the press, or legitimate public interests. Reasons for rejection will be provided if required.
Source Journalistic Data and Public Interest
Data processing for journalistic work has a different context than account management or marketing. The editorial team exercises press freedom while respecting dignity, privacy, security, the principle of presumption of innocence, protection of children, victims of sexual violence, vulnerable groups, and confidentiality of sources.
a. The collection and publication of journalistic data must be relevant, verified, proportional and have a justifiable public interest.
b. The identities of children, victims of sexual violence, confidential sources, detailed addresses, identification numbers, health data, risk locations and other sensitive data are protected according to law and journalistic ethics.
c. Requests regarding published news are processed through correction, errata, right of reply, retraction and complaint mechanisms in accordance with the Press Law, Journalism Code of Ethics, Cyber Media Reporting Guidelines and the provisions of the Press Council.
d. Privacy rights do not automatically delete legitimate news archives. The editorial team will assess accuracy, public interest, impact, context, timing, safety, rights of others, and integrity of the archive before taking action.
e. The confidentiality of the identity of journalistic sources is protected in accordance with the right to refuse and press professional standards.
User Generated Content
Comments or materials published by Users may be visible to the public and have the potential to be copied by others. Users are prohibited from uploading other parties' Personal Data without a valid basis. GARIS EARTH may edit, limit, or remove content that violates the law, journalistic ethics, privacy rights, security, or community requirements. Complaints can be submitted via editorial contact.
Child Protection
GARIS EARTH services are aimed at general readers and are not designed specifically for children. Processing of children's Personal Data is carried out on a limited basis by taking into account the child's best interests, age, level of service risk, and parental or guardian consent if required. GARIS BUMI does not intentionally use children's Personal Data for profiling-based advertising. Parents or guardians can request inspection or deletion of children's data through the privacy contact.
Embedded Links and Third Party Services
The Site may contain links, embedded videos, maps, sharing buttons, or third-party services. Such parties may process data based on their own privacy policies. GARIS BUMI does not control the privacy practices of third parties and recommends that Users read the applicable policies before using the service.
Personal Data Protection Incident
If there is a failure to protect Personal Data, GARIS BUMI will control the incident, assess risks, restore security, keep records, and provide written notification to the required parties within the time period in accordance with statutory regulations. The notification should at least explain the Personal Data that was disclosed, when and how the incident occurred, as well as handling and recovery steps.
Policy Changes
This policy may be updated to suit services, technology, journalistic practices or regulations. The effective date and latest version number will be listed at the beginning. Material changes will be announced as appropriate via the site or direct communications when necessary. New consent will be requested if changes in the purposes of Processing require it.
Complaints and Contact
Questions, objections, requests for exercise of rights, incident reports, or privacy complaints can be submitted to:
Personal Data Manager and Controller: PT Alliance Penanusa Indomedia, manager of GARIS BUMI
Site: www.garisbumi.com
Email: Garisbumiofficial@gmail.com with subject PRIVACY
Address: Graha Bumi Building, 4th Floor, South Jakarta, Indonesia
Complaints related to journalistic products will be directed to the Editor in Charge and handled based on press mechanisms. Complaints regarding the Processing of Users' Personal Data are handled by management's designated functions.
Applicable Law
This policy is subject to the laws of the Republic of Indonesia. The main references include Law Number 27 of 2022 concerning Protection of Personal Data; Law Number 40 of 1999 concerning the Press; Law Number 11 of 2008 concerning Electronic Information and Transactions as last amended by Law Number 1 of 2024; Government Regulation Number 71 of 2019 concerning Implementation of Electronic Systems and Transactions; regulations regarding governance for the implementation of electronic systems for child protection; Journalism Code of Ethics; Cyber Media Reporting Guidelines; as well as other implementing regulations that apply from time to time.
Our Commitment
GARIS EARTH respects privacy, processes Personal Data in a limited manner for legitimate and transparent purposes, maintains data security according to the level of risk, and does not sell User Personal Data.