# E-Formasi Application Privacy Policy

**Last Updated: August 28, 2025**

## Introduction

This Privacy Policy describes how the E-Formasi Application ("we," "our," or "us") collects, uses, and protects your personal information when you use our functional position application system.

## Information We Collect

### Personal Information
- Name and identification details
- Employee ID (NIP) and institutional affiliation
- Contact information (email, phone)
- Educational background and qualifications
- Professional experience and certifications
- Application documents and attachments

### Technical Information
- IP address and browser information
- Login timestamps and session data
- File upload metadata
- System interaction logs

## How We Use Your Information

We use your personal information to:
- Process functional position applications
- Verify qualifications and eligibility
- Communicate application status updates
- Maintain system security and integrity
- Generate reports and analytics (anonymized)
- Comply with government regulations

## Data Protection

We implement industry-standard security measures:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication systems
- Regular security audits and updates
- Access controls and user permissions
- Secure file storage with backup systems
- Network monitoring and intrusion detection

## Data Sharing

We do not sell, trade, or transfer your personal information to third parties except:
- Government agencies as required by law
- Authorized personnel for application processing
- Technical service providers under strict confidentiality
- Legal compliance or court orders

## Your Rights

You have the right to:
- Access your personal data
- Request data corrections
- Delete your account (subject to legal requirements)
- Withdraw consent where applicable
- File complaints with supervisory authorities

## Data Retention

We retain your data for:
- Active applications: Duration of processing + 1 year
- Archived applications: 7 years for compliance
- System logs: 2 years for security purposes
- Account data: Until account deletion request

## Cookies and Tracking

We use essential cookies for:
- User authentication and session management
- Security protection (CSRF tokens)
- User preferences and settings
- System functionality and performance

## International Transfers

Data processing occurs within Indonesia's borders and complies with:
- Indonesian Data Protection Law
- Government regulation standards
- International security best practices

## Contact Information

For privacy-related questions or requests:
- **Email**: privacy@eformasi.kemendagri.go.id
- **Address**: Ministry of Home Affairs, Indonesia
- **Phone**: +62-21-xxxx-xxxx

## Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. Users will be notified of significant changes through:
- Email notifications
- Website announcements
- System login notifications

## Compliance

This Privacy Policy complies with:
- Indonesian Personal Data Protection Law
- Government information security standards
- ISO 27001 security management principles
- International privacy best practices

By using our application, you acknowledge that you have read and understood this Privacy Policy.