Privacy & Policy

ASCO Automotive

Last updated: July 2026.

Asco Automotive (“Company“, “We“, or “ASCO“) recognizes that Personal Data is a matter of importance whose confidentiality, security, and use must be safeguarded responsibly. Accordingly, Asco Automotive is committed to conducting all activities of acquisition and collection; processing and analysis; storage, rectification, and updating; display, announcement, transfer, dissemination, or disclosure; and/or deletion or destruction of Personal Data in accordance with Law No. 27 of 2022 on Personal Data Protection and its implementing regulations in force in the Republic of Indonesia.

This Privacy Policy has been prepared to provide transparency to all users of Asco Automotive’s services regarding how Personal Data is processed across all of the Company’s operational activities. It also aims to give a clear understanding of the rights of users as personal data subjects and of the protective measures implemented by the Company.

This Privacy Policy applies to all services and business activities of Asco Automotive, including but not limited to the official website, digital applications, showroom services, authorized dealers, test drive services, authorized workshops, customer service, marketing promotions, survey activities, corporate events, and any other digital services owned or managed by Asco Automotive.

1. Definition and Meaning of Personal Data

For the purposes of this Privacy Policy, “Personal Data” means any data relating to an individual who is identified or identifiable, whether directly or indirectly, through electronic or non-electronic systems.

Personal Data may include:

  • Full name;
  • Identity number;
  • Residential address;
  • Telephone number;
  • Email address;
  • Vehicle information;
  • Transaction information;
  • Digital service usage data;
  • Device location information;
  • User communication information.

The Company treats all Personal Data as confidential information and shall use it solely for the purposes described in this Privacy Policy.

2. Scope of the Privacy Policy

This Privacy Policy applies to all individuals who use, access, or interact with the services of Asco Automotive, including:

A. Website Visitors
Users who access the official Asco Automotive website, whether to seek information, register, or use other digital services.

B. Customers and Prospective Customers
Individuals who purchase or reserve vehicles, take test drives, or use servicing or other services.

C. Promotion and Event Participants
Individuals who participate in marketing activities, surveys, events, giveaways, loyalty programs, or other promotional activities.

D. Partners and Vendors
Third parties who cooperate with Asco Automotive in supporting the Company’s operational activities and services.

E. Digital Service Users
Users of mobile applications, online platforms, chatbots, digital customer services, and other technological features.

3. Types of Personal Data Collected

Asco Automotive may collect various types of Personal Data as required by its services and operations.

A. Identity Data
Identity data is basic information used to recognize and verify the identity of a User. Examples:

  • Full name;
  • KTP (Kartu Tanda Penduduk, Indonesian Identity Card) number;
  • Place and date of birth;
  • Gender;
  • Nationality.

B. Contact Data
Contact data is used for communication between the Company and the User. Examples:

  • Telephone number;
  • Email address;
  • Home address;
  • Social media accounts.

C. Vehicle Data
Vehicle data is used to manage vehicle and after-sales services. Examples:

  • Vehicle Identification Number (VIN);
  • Engine number;
  • Service history;
  • Warranty claim data.

D. Transaction Data
Transaction data is required to process payments and for administrative purposes. Examples:

  • Vehicle purchase data;
  • Payment information;
  • Transaction history;
  • Proof of payment.

E. Digital and Technical Data
This data is collected through the use of the website and applications. Examples:

  • Internet Protocol (IP) address;
  • Browser type;
  • Device type;
  • Geographic location;
  • Service usage history.

F. Communication Records
The Company may retain User communications to improve service quality. Examples:

  • Telephone recordings;
  • Emails;
  • Customer service chats;
  • Complaint forms.

For certain purposes, the User may be required to provide Personal Data in order to fulfill a legal obligation or to perform an agreement. Failure to provide Personal Data for such purposes may be deemed a failure to fulfill a legal obligation or an inability of the User to enter into an agreement with the Company.

The Company may collect information from various sources in accordance with applicable laws and regulations, including Personal Data collected by third parties and/or from public sources, whether new or historical, in the Company’s efforts to continuously provide the best Products and/or Services to Users.

4. Methods of Collecting Personal Data

The Company may obtain Personal Data through various lawful methods in accordance with legal provisions.

A. Direct Collection
Data is provided directly by the User when:

  • Completing forms;
  • Registering;
  • Contacting customer service;
  • Participating in events or promotions.

B. Collection through Websites and Applications
Data may be collected automatically when the User accesses the digital services of Asco Automotive.

C. Collection from Third Parties
The Company may obtain data from authorized dealers, business partners, vendors, and lawful public sources.

D. Use of Cookies
Cookies are used to enhance user experience and to analyze website performance.

5. Purposes of Personal Data Processing

Personal Data is processed for lawful purposes and in accordance with the Company’s operational requirements.

A. Provision of Products and Services
Data is used for:

  • Vehicle purchase processing;
  • Test drive reservations;
  • Servicing;
  • Vehicle unit delivery;
  • Warranty management;
  • Processing of invoices, STNK (Surat Tanda Nomor Kendaraan, Vehicle Registration Certificate), BPKB (Bukti Pemilik Kendaraan Bermotor, Motor Vehicle Ownership Document), and vehicle license plates with the Police.

B. Communication and Service
Data is used for:

  • Responding to customer inquiries;
  • Handling complaints;
  • Providing service notifications;
  • Contacting Users regarding transactions.

C. Promotion and Marketing
The Company may use data to send:

  • Promotions;
  • Newsletters;
  • Special offers;
  • Customer loyalty programs.

D. Business Development
Data is analyzed for:

  • Service evaluation;
  • Product development;
  • Enhancement of customer experience.

E. System Security
Data is used for:

  • Fraud prevention;
  • Security monitoring;
  • Detection of suspicious activity.

The Company may Process the Personal Data provided by the User for other Processing purposes, which the Company shall first communicate to the User, as required or permitted by applicable laws and regulations.

6. Legal Basis for Data Processing

The Processing of Personal Data is carried out on a lawful basis in accordance with applicable laws and regulations, using one of the following bases:

A. Valid and Explicit Consent Given by the User
The User may withdraw consent at any time; however, such withdrawal may affect the User’s experience in using the Company’s Products and/or Services;

B. Fulfillment of Contractual Obligations to the User
The Company may Process Personal Data provided by the User in order to perform agreed obligations, including providing the Company’s Products and/or Services as requested by the User;

C. Fulfillment of Legal Obligations
The Company may Process Personal Data provided by the User in order to carry out certain actions that the Company is required to perform under applicable laws and regulations;

D. Protection of Vital Interests
The Company may Process Personal Data provided by the User in order to protect the User’s vital interests (for example, interests relating to the User’s safety); and/or

E. Fulfillment of Legitimate Interests
The Company may Process Personal Data provided by the User in order to pursue the legitimate interests of the Company or a Third Party, provided that such interests do not infringe upon the interests and rights of the User.

The Company shall ensure that all data Processing is conducted in a transparent and accountable manner.

7. Use of Cookies and Similar Technologies

Asco Automotive uses cookies, analytics tools, pixel tags, and other technologies to support its digital services.

The purposes of using such technologies include:

  • Recognizing User preferences;
  • Storing User sessions;
  • Measuring website performance;
  • Providing relevant content;
  • Supporting system security.

Users may manage their cookie preferences through their respective browsers.

8. Disclosure and Sharing of Data

Under certain conditions, for the Processing of Personal Data in accordance with the purposes set out in this Privacy Policy, the Company may grant access to, and/or disclose, some or all of the User’s Personal Data and share Personal Data with other parties who are officially engaged in cooperation with the Company.

Such parties include:

  • Authorized dealers;
  • IT service providers;
  • Cloud server providers;
  • Payment providers;
  • Marketing partners;
  • Auditors and legal consultants;
  • Government agencies;
  • Other parties in accordance with applicable laws and regulations.

Every third party is required to maintain the confidentiality and security of such Personal Data.

9. Data Storage and Retention

The Company shall retain the Personal Data provided by the User for a certain period of time, for the purposes of:

  • Maintaining records of business activities (business records) for analysis, internal reporting, and/or audit purposes;
  • Complying with retention requirements under applicable laws and regulations;
  • Establishing or enforcing claims and/or disputes, whether ongoing or potentially arising;
  • Improving the User’s experience with the Company and ensuring that the User receives any benefits or rewards to which the User is entitled; or
  • Handling complaints relating to the Company’s Products and/or Services.

The User understands and agrees that the Company may delete the Personal Data provided by the User where such Personal Data is no longer required for the purposes stated above.

10. Transfer of Personal Data Abroad

By using the site or application, or the Company’s Products and/or Services, the User understands and agrees that the User’s information may be transferred, stored, used, processed, and/or relocated to data centers designated by the Company, which may be located outside Indonesia and managed by Third Parties, and which may be subject to different data protection rules. In certain circumstances, courts, law enforcement agencies, regulatory bodies, or security authorities in such other countries may be entitled to access the Personal Data provided by the User.

Notwithstanding the foregoing, the Processing of the User’s Personal Data in connection with the use of the Company’s site, applications, Products and/or Services shall continue to be governed by this Privacy Policy in accordance with applicable laws and regulations.

11. Rights of Users as Data Subjects

Users have various rights in relation to the Personal Data held by the Company.

Such rights include:

A. Right of Access
The User has the right to request information about the Personal Data that the Company holds concerning the User. Upon request, the Company shall provide the User with a copy of such Personal Data.

B. Right to Rectification
The User may request that the Company correct Personal Data that is inaccurate or incomplete. The Company shall use reasonable efforts to keep the Personal Data it uses continuously accurate, complete, and relevant, based on the latest information available.

C. Right to Erasure
The User may request the deletion of data in accordance with legal provisions.

D. Right to Withdraw Consent
The User may withdraw consent to certain data Processing.

E. Right to Object
The User may lodge an objection to certain Processing.

Where the User wishes to submit a request to exercise the rights set out above, the User may do so through the channels/contacts specified in Section 15 of this Privacy Policy.

The Company shall conduct a verification and screening process for all User requests to exercise their rights as Personal Data subjects. For this purpose, the Company may request the User to provide supporting information or documents to substantiate the request. Once verified, the Company shall inform the User of the consequences of exercising such rights. Upon obtaining the User’s consent to such consequences, the Company shall process the User’s request within the time limits prescribed by applicable laws and regulations.

Nevertheless, please be advised that, under applicable laws and regulations and in certain circumstances, the Company reserves the right to refuse a User’s request to exercise the rights described above, including the right to delete or destroy some or all of the User’s Personal Data held by the Company.

The Company may charge an administrative fee for each User request to exercise their rights as a Personal Data subject, in accordance with applicable laws and regulations.

12. Data Security and Protection

Asco Automotive implements various protective measures to safeguard the security of Personal Data.

Such measures include:

  • Use of network security systems;
  • Restriction of data access;
  • Use of passwords and authentication;
  • System security monitoring;
  • Use of encryption technology;
  • Data security training for employees.

The Company periodically conducts security evaluations to enhance the protection of Personal Data. Nevertheless, the User understands that the transmission of information through online means is not entirely secure, and the Company shall not be liable for any loss arising from the damage or loss of the User’s Personal Data occurring beyond the Company’s control, including that caused by unauthorized third parties. Accordingly, the Company strongly advises Users to keep their access credentials and software up to date in connection with the use of the Company’s site or applications, and not to disclose their account passwords stored on the Company’s site or applications to any party.

In the event of an incident relating to the protection of Personal Data, the User understands and agrees that the Company may send notice of such incident to the User electronically.

13. Children’s Privacy

The Company does not knowingly collect Personal Data of children under the age of 16 without the consent of a parent or legal guardian.

Where the collection of a child’s data without valid authorization is discovered, the Company shall promptly delete such data and information and shall not use it for any purpose, except where required to protect the safety of the child or of others as a legal requirement.

14. Amendments to the Privacy Policy

The Company may amend, supplement, and/or replace this Privacy Policy from time to time (with notice to Users) to ensure that this Privacy Policy remains consistent with the procedures and practices followed by the Company in the Processing of Personal Data. The Company shall make the current Privacy Policy available through the Company’s site and/or applications. Accordingly, Users are requested to review this Privacy Policy periodically to determine whether any changes have been made.

If the User continues to use the Company’s site, applications, or Products and/or Services after any amendment or update to this Privacy Policy takes effect, the User shall be deemed to have understood and agreed to be bound by such amendment or update.

15. Company Contact

Should the User have any questions, requests, or complaints, or require further information regarding this Privacy Policy or the management of personal data, the User may contact:

ASCO AUTOMOTIVE
Contact: asco.co.id/contact/
Website: asco.co.id

Users may also contact an authorized dealer or the Asco Automotive customer service.

16. Representations, Warranties, and User Consent

By using the site or application, or the Products and/or Services of Asco Automotive, or by providing Personal Data to the Company or to a Third Party designated by the Company, whether directly or through the User’s lawful representative, the User represents and warrants that:

A. The User has read and understood this Privacy Policy in its entirety and understands the Processing of Personal Data carried out by the Company; and

B. All Personal Data provided by the User is authentic, complete, and accurate.

In certain circumstances, the User may provide to the Company the Personal Data of other individuals (such as the Personal Data of a lawful spouse, family members, or other parties, including parties whom the User represents). In such circumstances, the User represents and warrants that the User has obtained the valid and explicit consent of such individuals as the data subjects, and hereby understands that this representation and warranty constitutes a valid legal basis for the Company to carry out the Processing of the Personal Data of the individuals/parties concerned. The User shall furnish proof of such consent whenever requested by the Company, as necessary. Where the Personal Data provided by the User is incorrect, inaccurate, or unlawfully obtained, all resulting consequences, including legal consequences, shall be the personal responsibility of the User as the provider of the Personal Data. This Policy forms an integral part of all services and activities of Asco Automotive.