{"id":8764,"date":"2026-06-24T14:48:39","date_gmt":"2026-06-24T14:48:39","guid":{"rendered":"https:\/\/institutpendidikan.ac.id\/?page_id=8764"},"modified":"2026-06-24T15:02:55","modified_gmt":"2026-06-24T15:02:55","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/institutpendidikan.ac.id\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\"><div data-vc-full-width=\"true\" data-vc-full-width-temp=\"true\" data-vc-full-width-init=\"false\" data-vc-stretch-content=\"true\" class=\"vc_row wpb_row vc_row-fluid vc_row-no-padding\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_raw_code wpb_raw_html wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<!--\r\n  IPI Garut Privacy Policy Content Only\r\n  Paste this HTML inside the content\/body area of the official IPI Garut website page.\r\n  Header, navigation menu, and footer are intentionally removed because they are already provided by the website theme.\r\n-->\r\n\r\n<section class=\"ipi-privacy-page\" id=\"ipi-privacy-policy\">\r\n  <div class=\"ipi-privacy-container\">\r\n    <div class=\"ipi-privacy-hero\">\r\n      <div class=\"ipi-privacy-hero__content\">\r\n        <p class=\"ipi-privacy-eyebrow\">Governance and Digitalization<\/p>\r\n        <h1>Personal Data Protection and Privacy Policy<\/h1>\r\n        <p class=\"ipi-privacy-lead\">\r\n          Institut Pendidikan Indonesia Garut is committed to protecting personal data through lawful,\r\n          transparent, accountable, and secure data processing practices.\r\n        <\/p>\r\n      <\/div>\r\n      <div class=\"ipi-privacy-summary\" aria-label=\"Policy summary\">\r\n        <h2>Policy Summary<\/h2>\r\n        <p>\r\n          This policy supports institutional compliance with Indonesia's Personal Data Protection Law and\r\n          recognized international privacy principles for higher education governance.\r\n        <\/p>\r\n      <\/div>\r\n    <\/div>\r\n\r\n    <div class=\"ipi-privacy-meta\" aria-label=\"Policy metadata\">\r\n      <div><strong>Effective Date<\/strong><span>24 June 2026<\/span><\/div>\r\n      <div><strong>Version<\/strong><span>1.0<\/span><\/div>\r\n      <div><strong>Policy Owner<\/strong><span>TDSI<\/span><\/div>\r\n      <div><strong>Review Period<\/strong><span>Annually or when required<\/span><\/div>\r\n    <\/div>\r\n\r\n    <div class=\"ipi-privacy-layout\">\r\n      <aside class=\"ipi-privacy-toc\" aria-label=\"Privacy policy contents\">\r\n        <h2>Contents<\/h2>\r\n        <ol>\r\n          <li><a href=\"#pp-introduction\">Introduction<\/a><\/li>\r\n          <li><a href=\"#pp-scope\">Scope of Policy<\/a><\/li>\r\n          <li><a href=\"#pp-categories\">Categories of Personal Data<\/a><\/li>\r\n          <li><a href=\"#pp-purposes\">Purposes of Processing<\/a><\/li>\r\n          <li><a href=\"#pp-legal-basis\">Legal Basis<\/a><\/li>\r\n          <li><a href=\"#pp-consent\">Consent Mechanism<\/a><\/li>\r\n          <li><a href=\"#pp-rights\">Rights of Data Subjects<\/a><\/li>\r\n          <li><a href=\"#pp-accuracy\">Data Accuracy and Updating<\/a><\/li>\r\n          <li><a href=\"#pp-security\">Security Measures<\/a><\/li>\r\n          <li><a href=\"#pp-third-party\">Third-Party Systems<\/a><\/li>\r\n          <li><a href=\"#pp-disclosure\">Disclosure and Sharing<\/a><\/li>\r\n          <li><a href=\"#pp-retention\">Data Retention<\/a><\/li>\r\n          <li><a href=\"#pp-breach\">Incident Response<\/a><\/li>\r\n          <li><a href=\"#pp-website\">Website and Cookies<\/a><\/li>\r\n          <li><a href=\"#pp-awareness\">Awareness<\/a><\/li>\r\n          <li><a href=\"#pp-review\">Review<\/a><\/li>\r\n          <li><a href=\"#pp-contact\">Contact<\/a><\/li>\r\n          <li><a href=\"#pp-evidence\">Additional Evidence<\/a><\/li>\r\n        <\/ol>\r\n      <\/aside>\r\n\r\n      <article class=\"ipi-privacy-article\">\r\n        <section id=\"pp-introduction\" class=\"ipi-privacy-section\">\r\n          <h2>1. Introduction<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut is committed to protecting personal data and ensuring that all\r\n            data processing activities are conducted lawfully, fairly, securely, transparently, and responsibly.\r\n          <\/p>\r\n          <p>\r\n            This Personal Data Protection and Privacy Policy explains how Institut Pendidikan Indonesia Garut\r\n            collects, uses, stores, protects, shares, retains, and disposes of personal data in the implementation\r\n            of higher education, academic services, research, community service, institutional administration,\r\n            digital services, public communication, and sustainability reporting.\r\n          <\/p>\r\n          <p>\r\n            This policy is established in alignment with Law of the Republic of Indonesia Number 27 of 2022\r\n            concerning Personal Data Protection and with internationally recognized data protection principles,\r\n            including accountability, transparency, lawfulness, purpose limitation, data minimization, accuracy,\r\n            storage limitation, integrity, confidentiality, and information security.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-scope\" class=\"ipi-privacy-section\">\r\n          <h2>2. Scope of Policy<\/h2>\r\n          <p>\r\n            This policy applies to all personal data processed by Institut Pendidikan Indonesia Garut through\r\n            institutional activities, academic systems, administrative systems, websites, online forms, learning\r\n            platforms, communication channels, information systems, and third-party services used to support\r\n            institutional operations.\r\n          <\/p>\r\n          <p>This policy applies to:<\/p>\r\n          <ul>\r\n            <li>students and prospective students;<\/li>\r\n            <li>lecturers, education staff, researchers, and institutional personnel;<\/li>\r\n            <li>alumni;<\/li>\r\n            <li>parents or guardians, where applicable;<\/li>\r\n            <li>research participants and community service beneficiaries;<\/li>\r\n            <li>partners, vendors, guests, and institutional stakeholders;<\/li>\r\n            <li>website visitors and users of digital services managed by Institut Pendidikan Indonesia Garut.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n\r\n        <section id=\"pp-categories\" class=\"ipi-privacy-section\">\r\n          <h2>3. Categories of Personal Data Processed<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut may process personal data according to institutional needs and\r\n            applicable legal requirements. The categories of personal data may include:\r\n          <\/p>\r\n          <ul>\r\n            <li>identity data, such as name, student identification number, employee identification number, national identification number, place and date of birth, gender, and citizenship;<\/li>\r\n            <li>contact data, such as address, phone number, email address, and emergency contact;<\/li>\r\n            <li>academic data, such as study program, course registration, attendance, grades, academic progress, thesis or final project records, graduation records, and academic history;<\/li>\r\n            <li>administrative data, such as registration records, financial administration records, scholarship information, and correspondence;<\/li>\r\n            <li>employment data, such as position, work unit, employment status, attendance, performance administration, and professional records;<\/li>\r\n            <li>digital identity data, such as username, institutional email, access logs, IP address, device information, and system activity records;<\/li>\r\n            <li>documentation data, such as photos, videos, certificates, event records, and institutional publication materials;<\/li>\r\n            <li>other data required for education, research, community service, regulatory reporting, accreditation, institutional governance, and sustainability reporting.<\/li>\r\n          <\/ul>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut limits the collection of personal data to data that is relevant,\r\n            adequate, and necessary for legitimate institutional purposes.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-purposes\" class=\"ipi-privacy-section\">\r\n          <h2>4. Purposes of Personal Data Processing<\/h2>\r\n          <p>Personal data may be processed for the following purposes:<\/p>\r\n          <ul>\r\n            <li>student admission, registration, and academic administration;<\/li>\r\n            <li>academic learning services, academic advising, assessment, and graduation administration;<\/li>\r\n            <li>student affairs, scholarships, alumni affairs, and career development services;<\/li>\r\n            <li>human resource administration and institutional employment management;<\/li>\r\n            <li>research, publication, community service, and academic development;<\/li>\r\n            <li>institutional communication, documentation, reporting, and public information;<\/li>\r\n            <li>quality assurance, accreditation, institutional ranking, and sustainability reporting;<\/li>\r\n            <li>operation, maintenance, integration, monitoring, and security of information systems;<\/li>\r\n            <li>compliance with laws, regulations, government reporting, and institutional obligations;<\/li>\r\n            <li>protection of institutional rights, safety, cybersecurity, and service continuity.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n\r\n        <section id=\"pp-legal-basis\" class=\"ipi-privacy-section\">\r\n          <h2>5. Legal Basis for Processing<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut processes personal data based on one or more lawful bases,\r\n            including:\r\n          <\/p>\r\n          <ul>\r\n            <li>consent from the data subject;<\/li>\r\n            <li>contractual or academic relationship between the data subject and the institution;<\/li>\r\n            <li>compliance with legal and regulatory obligations;<\/li>\r\n            <li>performance of institutional duties in the field of higher education;<\/li>\r\n            <li>legitimate institutional interest, provided that such interest does not override the rights of the data subject;<\/li>\r\n            <li>protection of vital interests, safety, or public interest where applicable.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n\r\n        <section id=\"pp-consent\" class=\"ipi-privacy-section\">\r\n          <h2>6. Consent Mechanism<\/h2>\r\n          <p>\r\n            Where consent is required, Institut Pendidikan Indonesia Garut obtains consent through appropriate\r\n            mechanisms, including written forms, online forms, system registration, institutional agreements,\r\n            academic forms, website notices, or other clear affirmative actions.\r\n          <\/p>\r\n          <p>\r\n            The institution ensures that consent is provided voluntarily, specifically, and clearly for the relevant\r\n            processing purpose. Data subjects may withdraw consent where the processing is based on consent,\r\n            subject to legal, academic, administrative, or contractual obligations that may still apply.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-rights\" class=\"ipi-privacy-section\">\r\n          <h2>7. Rights of Data Subjects<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut respects the rights of data subjects in accordance with applicable\r\n            data protection regulations. Data subjects may request:\r\n          <\/p>\r\n          <ul>\r\n            <li>access to their personal data;<\/li>\r\n            <li>correction or completion of inaccurate personal data;<\/li>\r\n            <li>explanation of the purpose and legal basis of processing;<\/li>\r\n            <li>restriction or postponement of processing where applicable;<\/li>\r\n            <li>withdrawal of consent where processing is based on consent;<\/li>\r\n            <li>deletion or destruction of personal data where legally permitted;<\/li>\r\n            <li>information regarding disclosure or transfer of personal data;<\/li>\r\n            <li>submission of complaints related to personal data processing.<\/li>\r\n          <\/ul>\r\n          <p>\r\n            Requests related to personal data rights may be submitted through the official contact channel designated\r\n            by Institut Pendidikan Indonesia Garut.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-accuracy\" class=\"ipi-privacy-section\">\r\n          <h2>8. Data Accuracy and Updating<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut takes reasonable steps to ensure that personal data processed by the\r\n            institution is accurate, complete, relevant, and up to date according to the purpose of processing.\r\n          <\/p>\r\n          <p>\r\n            Students, staff, lecturers, and other data subjects are encouraged to update their personal information\r\n            through official academic, administrative, or institutional channels when changes occur.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-security\" class=\"ipi-privacy-section\">\r\n          <h2>9. Personal Data Security Measures<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut applies technical and organizational measures to protect personal data\r\n            from unauthorized access, misuse, alteration, disclosure, loss, destruction, or unlawful processing.\r\n          <\/p>\r\n          <p>Security measures may include:<\/p>\r\n          <ul>\r\n            <li>user authentication and role-based access control;<\/li>\r\n            <li>access limitation based on institutional duties and responsibilities;<\/li>\r\n            <li>secure system administration and account management;<\/li>\r\n            <li>backup and recovery mechanisms;<\/li>\r\n            <li>monitoring of system access and activity logs;<\/li>\r\n            <li>data confidentiality obligations for authorized personnel;<\/li>\r\n            <li>information system maintenance and security updates;<\/li>\r\n            <li>secure storage and controlled access to institutional records;<\/li>\r\n            <li>awareness activities related to data protection and information security.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n\r\n        <section id=\"pp-third-party\" class=\"ipi-privacy-section ipi-privacy-section--highlight\">\r\n          <h2>10. Third-Party Systems and Service Providers<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut may use third-party systems and service providers to support academic,\r\n            administrative, learning, digital communication, and information system operations.\r\n          <\/p>\r\n          <p>\r\n            For core academic information system services, including SIAKAD and integrated academic administration,\r\n            Institut Pendidikan Indonesia Garut uses services provided by SEVIMA. SEVIMA has obtained ISO\/IEC\r\n            27001:2022 certification for Information Security Management System, which supports the assurance that\r\n            the academic information system provider applies recognized information security management practices.\r\n          <\/p>\r\n          <p>\r\n            Third-party service providers are expected to process personal data only for authorized institutional\r\n            purposes and in accordance with contractual, legal, confidentiality, and security requirements. Institut\r\n            Pendidikan Indonesia Garut maintains institutional responsibility for ensuring that third-party processing\r\n            supports the protection of personal data.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-disclosure\" class=\"ipi-privacy-section\">\r\n          <h2>11. Disclosure and Sharing of Personal Data<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut may disclose or share personal data only when necessary and lawful,\r\n            including to:\r\n          <\/p>\r\n          <ul>\r\n            <li>government authorities and higher education regulatory bodies;<\/li>\r\n            <li>accreditation, quality assurance, or institutional ranking bodies;<\/li>\r\n            <li>academic and administrative service providers;<\/li>\r\n            <li>banking, scholarship, insurance, or student service partners where relevant;<\/li>\r\n            <li>research or community service partners with appropriate safeguards;<\/li>\r\n            <li>parties authorized by law, regulation, court order, or official institutional obligation.<\/li>\r\n          <\/ul>\r\n          <p>Personal data is not sold, traded, or disclosed for unrelated commercial purposes.<\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-retention\" class=\"ipi-privacy-section\">\r\n          <h2>12. Data Retention<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut retains personal data only for as long as necessary to fulfill academic,\r\n            administrative, legal, regulatory, archival, accountability, accreditation, and institutional reporting purposes.\r\n          <\/p>\r\n          <p>\r\n            Retention periods may vary depending on the type of data, applicable law, institutional record retention\r\n            schedules, and operational requirements. When personal data is no longer required, the institution may\r\n            delete, anonymize, archive, or securely destroy the data in accordance with applicable procedures.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-breach\" class=\"ipi-privacy-section\">\r\n          <h2>13. Personal Data Breach and Incident Response<\/h2>\r\n          <p>\r\n            In the event of a personal data security incident or suspected data breach, Institut Pendidikan Indonesia\r\n            Garut will take appropriate steps to assess, contain, investigate, respond to, and recover from the incident.\r\n          <\/p>\r\n          <p>The response may include:<\/p>\r\n          <ul>\r\n            <li>identification of affected systems and data;<\/li>\r\n            <li>containment of unauthorized access or exposure;<\/li>\r\n            <li>internal reporting to the responsible institutional unit;<\/li>\r\n            <li>corrective and preventive actions;<\/li>\r\n            <li>notification to affected data subjects and\/or relevant authorities where required by applicable law;<\/li>\r\n            <li>documentation of the incident and improvement of security controls.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n\r\n        <section id=\"pp-website\" class=\"ipi-privacy-section\">\r\n          <h2>14. Website, Cookies, and Digital Services<\/h2>\r\n          <p>\r\n            The official website and digital services of Institut Pendidikan Indonesia Garut may collect limited\r\n            technical data, such as IP address, browser type, device information, access time, pages visited, and\r\n            interaction logs. This information is used to maintain website security, improve services, analyze access\r\n            performance, and support institutional communication.\r\n          <\/p>\r\n          <p>\r\n            Cookies or similar technologies may be used to improve website functionality and user experience.\r\n            Users may manage cookie preferences through browser settings.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-awareness\" class=\"ipi-privacy-section\">\r\n          <h2>15. Awareness and Institutional Responsibility<\/h2>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut promotes awareness of personal data protection and information\r\n            security among relevant personnel, system users, and institutional units.\r\n          <\/p>\r\n          <p>\r\n            Each authorized user of institutional data is responsible for maintaining confidentiality, using data only\r\n            for legitimate institutional purposes, preventing unauthorized disclosure, and reporting suspected misuse\r\n            or security incidents through official channels.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-review\" class=\"ipi-privacy-section\">\r\n          <h2>16. Review and Continuous Improvement<\/h2>\r\n          <p>\r\n            This policy is reviewed periodically to ensure alignment with applicable laws, institutional needs,\r\n            technological developments, information security requirements, and good governance practices.\r\n          <\/p>\r\n          <p>\r\n            Institut Pendidikan Indonesia Garut is committed to continuous improvement in personal data protection,\r\n            cybersecurity, academic system governance, and responsible digitalization.\r\n          <\/p>\r\n        <\/section>\r\n\r\n        <section id=\"pp-contact\" class=\"ipi-privacy-section ipi-privacy-section--contact\">\r\n          <h2>17. Contact for Personal Data Protection<\/h2>\r\n          <p>\r\n            Questions, requests, or complaints related to this Personal Data Protection and Privacy Policy may be\r\n            submitted to:\r\n          <\/p>\r\n          <dl>\r\n            <div><dt>Responsible Unit<\/dt><dd>Unit Transformasi Digital dan Sistem Informasi<\/dd><\/div>\r\n            <div><dt>Institution<\/dt><dd>Institut Pendidikan Indonesia Garut<\/dd><\/div>\r\n            <div><dt>Email<\/dt><dd><a href=\"mailto:info@institutpendidikan.ac.id\">info@institutpendidikan.ac.id<\/a><\/dd><\/div>\r\n            <div><dt>Website<\/dt><dd><a href=\"https:\/\/institutpendidikan.ac.id\/en\/\">https:\/\/institutpendidikan.ac.id\/<\/a><\/dd><\/div>\r\n            <div><dt>Address<\/dt><dd>Jl. Terusan Pahlawan No.32, RW.01, Sukagalih, Kec. Tarogong Kidul, Kabupaten Garut, Jawa Barat 44151<\/dd><\/div>\r\n          <\/dl>\r\n        <\/section>\r\n\r\n        <section id=\"pp-evidence\" class=\"ipi-privacy-section ipi-privacy-section--evidence\">\r\n          <h2>18. Additional Evidence for UI GreenMetric 7.14<\/h2>\r\n          <p>The implementation of this policy may be supported by the following evidence:<\/p>\r\n          <ul>\r\n            <li>publicly accessible Personal Data Protection and Privacy Policy page on the official website of Institut Pendidikan Indonesia Garut;<\/li>\r\n            <li>screenshot of the official policy page;<\/li>\r\n            <li>appointment or designation of the responsible institutional unit for data protection and information system governance;<\/li>\r\n            <li>consent forms, academic registration forms, or online forms containing privacy notices;<\/li>\r\n            <li>procedures for access rights, data correction, consent withdrawal, and complaint handling;<\/li>\r\n            <li>information security measures applied to institutional systems;<\/li>\r\n            <li>evidence of third-party academic system security assurance, including SEVIMA ISO\/IEC 27001:2022 certification for Information Security Management System;<\/li>\r\n            <li>documentation of awareness, review, or internal coordination related to personal data protection.<\/li>\r\n          <\/ul>\r\n        <\/section>\r\n      <\/article>\r\n    <\/div>\r\n  <\/div>\r\n<\/section>\r\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div><div class=\"vc_row-full-width vc_clearfix\"><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"Governance and Digitalization Personal Data Protection and Privacy Policy Institut Pendidikan Indonesia Garut is committed to protecting personal data through lawful, transparent, accountable, and secure data processing practices. Policy Summary This policy supports institutional compliance with Indonesia's Personal Data Protection Law and recognized international privacy principles for higher education governance. Effective Date24 June 2026 Version1.0 [...]","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-8764","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/pages\/8764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/comments?post=8764"}],"version-history":[{"count":0,"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/pages\/8764\/revisions"}],"wp:attachment":[{"href":"https:\/\/institutpendidikan.ac.id\/en\/wp-json\/wp\/v2\/media?parent=8764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}