DFSK APP Privacy Policy
Last Updated: January 29, 2026
PT SOKONINDO AUTOMOBILE, located at JL. AGUNG TIMUR IX BLOK O-1 KAV 24, Kel. Sunter Jaya, Kec. Tanjung Priok, Kota Adm. Jakarta Utara, Provinsi DKI Jakarta, (hereinafter referred to as "we" or "us"), acts as the controller of the personal data processed in connection with the the DFSK APP Privacy Policy ("this Privacy Policy"). Personal Data means a single or series of information regarding individual, identified or identifiable separately or in combination with other information, eihter directly or indirectly, through electronic or non-electronic system (“Personal Data”). This Privacy Policy has been prepared in accordance with Law No. 27 of 2022 concerning Personal Data Protection and other applicable laws and regulations of the Republic of Indonesia relating to personal data protection (“Applicable Laws”). We recognize the importance of protecting your Personal Data and privacy are committed to processing such Personal Data in accordance with the Applicable Laws.
The DFSK APP (the "App") allows users to access vehicle information, utilize remote controls, and enjoy various intelligent features through their mobile devices. In providing and operating the App, we may collect, store, disclose, transfer, and/or process Personal Data relating to users. This Privacy Policy explains how we collect and process your Personal Data and details the rights you have as a data subject in connection with your use of the App. The features and services available may vary depending on the operating system. We will collect and process your Personal Data only when you access or use the corresponding features or services.
We will make every effort to ensure that this Privacy Policy is accurate, transparent, and easy to understand. Provisions that significantly affect your rights and interests, as well as those relating to the processing of sensitive Personal Data, have been marked in boldface to draw your attention to them. Please carefully read and ensure you fully understand this Privacy Policy before using any of our products or services. If you have any questions, comments, or suggestions about this Privacy Policy, please contact us using the contact details provided in Section 8 (How to Contact Us).
TABLE OF CONTENTS
How We Collect and Use Your Personal Data
How We Share Your Personal Data
How We Protect Your Personal Data
How We Store Your Personal Data
How We Transmit Your Personal Data to Third Countries
How We Protect the Personal Data of Minors/Children
Your Rights
How to Contact Us
How this Privacy Policy is Updated
How We Collect and Use Your Personal Data
When you use the DFSK APP, we process your Personal Data only for lawful and legitimate purposes necessary to provide you with the services available. For the purposes of this Privacy Policy, "process" or "processing" means any action including obtaining, collecting, managing, analyzing, storing, correcting, updating, displaying, announcing, transferring, disseminating, disclosing, deleting, and/or destroying Personal Data. We would like to specify that certain features function solely by processing your Personal Data locally within the device. The descriptions of these features in this Privacy Policy are provided for your information and do not imply that we will access your Personal Data. Certain features require us to upload your Personal Data to our servers for processing. When you use these features, we (or our service providers) need to process specific Personal Data that you provide or that is generated or collected from third parties.
Function Name | Processing Purpose | Data Category | Description | Lawful Basis for Processing |
Account Registration, Login, Modification, and Deactivation | To facilitate the creation and maintenance of your DFSK APP account, enable information sharing, provide access to order information, and provide other related services. | Personal information overview, identity authentication information, and online identifiers. | Phone number, verification code, password, login device ID, user ID, login IP address, user name (optional), profile picture (optional), email address (optional). | Agree |
Vehicle Connectivity | To enable you to use the remote vehicle control and remote vehicle data access features | Connected Vehicle Services Data | Cell phone number, VIN, license plate number (optional) | Contract performance |
Remote Vehicle Control | To help you control your vehicle remotely. | Connected Vehicle Services Data | Account info, VIN, vehicle control password, vehicle status, and records of user-initiated remote control operations. | Contract performance |
Remote Vehicle Data Access | To help you access vehicle data remotely | Connected Vehicle Services Data | Account info, VIN, vehicle status data, and Vehicle Location Data. | Contract performance |
Vehicle Warnings | To help you receive vehicle warning notifications promptly. | Connected Vehicle Services Data | VIN and vehicle status data. | Contract performance |
Bluetooth key | To facilitate key authentication and vehicle control features through Bluetooth keys. | Personal Common Device Data | VIN, mobile phone MAC address, login device ID, vehicle control password | Contract performance |
Device Operation Safety | To maintain the security and stability of your account and our platform or services, and to prevent malicious software. | Personal frequently used device data and Internet of Vehicles data. | Device information (including device model, unique device identifier, screen resolution, and MAC address) and system logs | Agree |
To provide you with our services, we will request access to the necessary client permissions for information collection. For example, we may request Bluetooth permissions to enable the Bluetooth key vehicle control feature or request internet access permissions to facilitate internet connectivity, monitor network status, and support communication with cloud-based services. For details including client permissions and their applicable use cases, please refer to the Permission Application and Usage Description.
Please note that obtaining permissions to access sensitive data does not necessarily mean that we will collect information about you. We are authorized to collect your information only to the extent necessary under this Privacy Policy, including in instances where we obtain your permission to access sensitive data, and solely for the duration of your use of the service or feature.
How We Share Your Personal Data
We share your Personal Data only for legal, justifiable, necessary, specific, and explicit purposes, and only disclose the Personal Data required to provide the data-driven products and services. We will enter into strict confidentiality agreements with any companies, organizations, or individuals with whom we share your Personal Data and require them to process your personal data in compliance with this Privacy Policy, our instructions, and any other applicable confidentiality or security procedures. When we process sensitive Personal Data or special categories of Personal Data, we require third parties to use data masking and encryption methods to provide enhanced protection for your Personal Data.
We may share your Personal Data in the following ways:
Sharing among SERES entities: For the purposes of this Policy, “SERES” includes PT Sokonindo Automobile, its parent company, subsidiaries, affiliates, and other entities under common ownership or control. To the extent permitted by law, we may share your Personal Data with our affiliates to facilitate legal compliance and to protect the interests of our company, our affiliates, or business partners, you, other users, or the public interest, property, or safety. We will only share the Personal Data necessary to fulfill the above purposes. Our affiliates will not use the shared Personal Data for any purpose other than the stated purpose without your consent;
Sharing with business partners: Some services are provided with the support of authorized business partners for the purposes provided in this Privacy Policy. We may share certain Personal Data with our business partners to enhance customer service and improve the user experience. Our business partners include the following categories: authorized service providers: To provide you with push notification and map-related services, we may share your device information, application information, latitude and longitude data, and other data with our authorized service providers to facilitate the delivery of these services.
Disclosure required under law, such as in connection with government investigations, legal dispute proceedings, or requests;
For further details, please refer to the Third-Party Data Sharing Checklist.
To provide certain standalone features and to enable your access to additional services and features, we may integrate third-party Software Development Kit (“SDK”) into the application. We will carefully assess the intended purpose of each SDK. For more information regarding the purpose, method, and scope of the SDK's processing of personal information, please refer to the Third-Party Data Sharing Checklist.
How We Protect Your Personal Data
We highly value your Personal Data security and have implemented industry-standard, reasonable, and practical security and protection policies to prevent unauthorized access, disclosure, use or breach, or loss of your Personal Data:
Technical and Organizational Data Security Processes
We encrypt your Personal Data and store it using encryption and isolation technologies.
We implement strict controls over data access rights and require multiple authentication methods to protect Personal Data from unauthorized use.
We carefully select business partners and service providers and incorporate Personal Data protection requirements into data processing agreements, audits, assessments, and other activities between the parties;
We provide data security and privacy protection training to enhance employee awareness of the importance of protecting Personal Data.
Security Incident Management
Despite these precautions, please understand that the absolute security of Personal Data cannot be guaranteed. We encourage you to protect your Personal Data appropriately. To address potential risks of Personal Data disclosure, destruction, or loss, SERES has established comprehensive systems that define the criteria for classifying and grading security incidents and breaches, and their corresponding response procedures. SERES has organized a dedicated emergency response team for security incidents. This team implements security protocols for various types of incidents, stops the threat, analyzes and locates the source, and develops corrective actions pursuant to the Security Incident Management Rules.
Pursuant to Applicable Laws, once a user information security incident has been reported, we will promptly provide you with: an overview of the nature of the incident, the Personal Data affected, the potential consequences of the incident, measures taken or proposed to address the incident, and recommendations that may assist you in mitigating any potential adverse effects. We will promptly notify you of any matters related to the incident by push notification, email, mail, phone call, or text message no later than 3 x 24 (three times twenty-four) hours after the incident. If it is not feasible to notify each affected individual, we will make public announcements in a reasonable and effective manner. Additionally, we will proactively report the responses for user data security incidents to regulatory agencies as required by law.
How We Store Your Personal Data
Storage Location
Your Personal Data will be stored in Jakarta, Indonesia.
Storage Period
The retention period for Personal Data collected while you use this product or service shall be determined pursuant to Applicable Laws and the period necessary to achieve the purposes outlined in this Privacy Policy. In addition to mandatory legal requirements, the following outlines our criteria for determining the retention term:
Until the purpose of your products or services is achieved;
For the period necessary to protect your right to exercise your data subject rights;
Whether you agree to a longer retention term;
Dispute resolution
Other reasonable conditions for retention.
After the expiration of the retention term, we will mass delete or anonymize your Personal Data within a reasonable period of time, considering both data management costs and operability.
How We Transmit Your Personal Data to Third Countries
As a global company, SERES conducts business activities worldwide, which means SERES headquarters and our affiliates may access your Personal Data when providing services to you. Cross-border data transmission activities will be carried out pursuant to Applicable Laws in the jurisdiction and the principle of minimum necessity. We shall enter into data transmission agreements with data recipients and implement other appropriate legal precautions to ensure your Personal Data is fully protected during transmission.
How We Protect the Personal Data of Minors/Children
If you are a minor/child and wish to use our products or services, we recommend that you do so under the supervision of a parent or legal guardian. We will protect the confidentiality and security of your information pursuant to Applicable Laws.
We recommend that parents or guardians of minors (children) read this Privacy Policy. Minors should only use our services or provide us with Personal Data with the consent of a parent or guardian. We will only use or disclose minors’ Personal Data collected with parental or guardian consent as permitted by law, as expressly agreed with the parents or guardians, or when necessary to protect the minor. Minors are kindly requested to stop using our services and notify us to take the necessary action if their guardians disagree with their use of these services or the provision of data under this Privacy Policy.
If you are a parent or guardian of a minor/child and have questions about Personal Data held about the minor under your care, please contact us using the contact information provided in this Privacy Policy.
Your Rights
You generally have the right to:
Withdraw consent at any time where processing is based on consent;
Obtain information regarding the identity of parties to whom Personal Data has been disclosed;
Request that we send a copy of your Personal Data;
Request that we send some of your data to you or to other data controllers in a common electronic format;
Request that we update or correct your Personal Data to maintain its accuracy;
Request that we terminate the processing of your Personal Data;
Request that we delete or destroy your Personal Data from our records under certain circumstances;
Request that we restrict the processing of your Personal Data under certain circumstances;
Object to our processing of your Personal Data under certain circumstances (such as when we process your data for direct marketing purposes);
Object to our processing of your Personal Data when it is based on user profiling or automated decision-making; and
Other data subject rights provided under Applicable Laws.
We will actively cooperate with you in exercising the above legal rights. You may contact us at any time using the contact information provided in 8. How to Contact Us. Please note that to effectively respond to your request to exercise your rights, we may require you to provide additional information (such as to verify your identity).
However, these rights in certain circumstances under Applicable Laws. For example, we may restrict such rights if we can demonstrate a lawful basis for processing your Personal Data, if providing the data would disclose the Personal Data of other data subjects, or if we are legally prohibited from disclosing such data.
If you are not satisfied with our response, you may submit a complaint to the jurisdictional regulatory agency in your location at any time.
How to contact us
If you have any questions regarding the processing of your Personal Data, please read this Privacy Policy first. If you have additional questions not addressed in this Privacy Policy, please contact us using the information provided below.
Contact Phone No. : 02150842851
Email : automobilesokonindo@gmail.com
Address : JL. AGUNG TIMUR IX BLOK O-1 KAV 24
Desa/Kelurahan Sunter Jaya, Kec. Tanjung Priok, Kota Adm.
Jakarta Utara, Provinsi DKI Jakarta
How this Privacy Policy is Updated
We will update this Privacy Policy as necessary to provide you with improved services and as SERES expands its business. However, we will not limit your rights under this Privacy Policy without your explicit consent. We will notify you of any updates to the content of this Privacy Policy through appropriate means (such as pop-up notifications or message alerts). Your use or continuous use of our products and/or services after we update this Privacy Policy (we will promptly notify you of any updates) means that you agree to the terms of this Privacy Policy (including any updates), and consent to our collection, use, retention, and sharing of your Personal Data under this Privacy Policy.
We will retain prior versions of this Privacy Policy for your reference and review.