Personal Data Protection Commitment

PT LION EXPRESS (LION PARCEL) remains committed to maintaining compliance with Law Number 27 of 2022 concerning Personal Data Protection (PDP Law) through the following measures:

  1. Lion Parcel processes personal data in a limited, specific, lawful, and transparent manner, ensuring the Data Subject is aware of and understands how their data is processed, in accordance with Article 27 of Law 27/2022. Consequently, every customer who makes a shipment provides data to input into Lion Parcel's Shipment Ticket (STT), having given their consent.
  2. Lion Parcel processes personal data in a limited, specific, lawful, and transparent manner, ensuring the Data Subject is aware of and understands how their data is processed, in accordance with Article 27 of Law 27/2022. Consequently, every customer who makes a shipment provides data to input into Lion Parcel's Shipment Ticket (STT), having given their consent.
  3. Lion Parcel ensures that data processing aligns with the purpose of personal data collection, as stipulated in Article 28 of Law 27/2022. Specifically, this purpose is to guarantee that the shipment arrives safely at its destination and within the promised timeframe.
  4. Lion Parcel guarantees the accuracy, completeness, and consistency of personal data by conducting verification and updating or rectifying data no later than 72 hours after receiving a request, as stipulated in Article 29 and Article 30 of Law 27/2022.
  5. Lion Parcel grants the Data Subject access to their data and the processing history/record no later than 72 hours after the request, in accordance with Article 32 of Law 27/2022.
  6. Lion Parcel conducts a Data Protection Impact Assessment (DPIA) if data processing potentially poses a high risk to the Data Subject, as stipulated in Article 34 of Law 27/2022, and as documented under ISO 9001-2015 Certification Guidelines.
  7. Lion Parcel develops and implements technical and operational measures to protect personal data from disruption, and determines appropriate protection levels by considering the nature and risk of the data, as stipulated in Article 35 of Law 27/2022.
  8. Lion Parcel maintains the confidentiality of personal data throughout processing, as stipulated in Article 36 of Law 27/2022. This is achieved by ensuring that only parties with strictly limited access can view the personal data recorded within the Lion Parcel system.
  9. Lion Parcel supervises all parties involved in personal data processing under the company's control, in accordance with Article 37 of Law 27/2022. This guarantees that Lion Parcel maintains precise and accurate records of every party who views, edits, or extracts personal data from the system.
  10. Lion Parcel protects personal data from unauthorized processing and access, and utilizes reliable and accountable security systems, as stipulated in Article 38 and Article 39 of Law 27/2022. All existing data is stored within a cloud storage system that is certified for data security and processing.
  11. Lion Parcel restricts, delays, or denies personal data processing, or refuses to disclose data to Data Subjects when such requests conflict with legal requirements, as stipulated in Article 40 and Article 41 of Law 27/2022.
  12. Lion Parcel shall terminate, erase, or destroy personal data in accordance with retention period provisions, achievement of purpose, Data Subject requests, or if the data was obtained unlawfully, as stipulated in Article 42, Article 43, and Article 44 of Law 27/2022.
  13. Lion Parcel shall notify the Data Subject and and relevant authorities no later than 72 hours following a personal data protection failure. Furthermore, the company shall notify the public in specific cases, as stipulated in Article 46 of Law 27/2022.

By consistently implementing the above obligations, Lion Parcel upholds compliance with the PDP Law and effectively mitigates administrative risks and sanctions, as stipulated in Article 57 of Law 27/2022.