Contents
1. Who We Are
This Privacy Policy applies to PT. Vernel Agro Indonesia, operating under the brand VWoodPellet, a wood pellet producer and exporter headquartered in Sumatra, Indonesia. When this policy refers to "VWoodPellet", "we", "us", or "our", it refers to PT. Vernel Agro Indonesia.
We operate the website at vwoodpellet.com and all language subpaths (e.g., /fr/, /ar/, /ko/). We are the data controller for personal data collected through this website.
To contact us regarding data protection matters, please write to: [email protected]
2. Data We Collect
2.1 Data You Provide Directly
When you submit our contact form, you may provide:
- Full name
- Business email address
- Company name
- Phone number (including country code)
- Subject and message content (your inquiry)
You are not required to provide a phone number or company name; those fields are optional. Name, email, and inquiry message are required to process your request.
2.2 Data Collected Automatically
When you visit our website, we or our service providers may automatically collect:
- IP address (anonymised where technically feasible)
- Browser type and version
- Operating system
- Referring URL
- Pages visited and time spent on each page
- Date and time of visit
- Cookie identifiers (see Section 5)
2.3 Data We Do Not Collect
We do not collect sensitive personal data (special categories under GDPR Article 9), such as racial origin, health information, or religious beliefs. We do not collect payment card details on this website.
3. How We Use Your Data
We use the data we collect for the following purposes:
- Responding to inquiries: to read, process, and reply to messages submitted via our contact form.
- Export business communication: to follow up on product inquiries, share specifications, and discuss commercial terms.
- Website analytics: to understand how visitors use our website and to improve content and performance (via Google Analytics / Google Tag Manager, where consent has been granted).
- Security and fraud prevention: to detect and prevent spam, bot submissions, and misuse via Cloudflare Turnstile.
- Legal compliance: to comply with applicable laws, regulations, or enforceable government requests.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Legal Basis (GDPR)
For users located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with equivalent data protection laws, we process personal data on the following legal bases:
- Legitimate interests (Article 6(1)(f) GDPR): processing contact form submissions to respond to business inquiries is in our legitimate interest as a B2B exporter, and does not override your rights.
- Consent (Article 6(1)(a) GDPR): for non-essential cookies (analytics, marketing), we process data only when you have given explicit consent via our cookie consent banner (CookieYes).
- Legal obligation (Article 6(1)(c) GDPR): where applicable law requires us to retain or disclose data.
You may withdraw consent for cookie-based processing at any time by adjusting your preferences in the CookieYes banner (accessible via the "Cookie Settings" link in our footer).
5. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies. We obtain consent before setting non-essential cookies via our CookieYes consent management platform.
5.1 Cookie Categories We Use
- Strictly Necessary: Required for the website to function (e.g., security tokens, session state, Cloudflare Turnstile for form spam prevention). These are set without consent.
- Analytics: Google Analytics (via Google Tag Manager) collects anonymised data on how visitors use the site. Set only with your consent.
- Functional: Remember your language or cookie preference choices. Set only with consent where non-essential.
5.2 Managing Cookies
You can manage or withdraw cookie consent at any time by clicking the "Cookie Settings" link in the website footer, or by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies may affect website functionality.
For more information about how Google uses data, see: Google Privacy Policy.
6. Third-Party Services
We use the following third-party services that may process personal data on our behalf:
- Google Tag Manager / Google Analytics — website analytics. Data is processed by Google LLC (US). Governed by Google's Terms of Service and Privacy Policy.
- Cloudflare Turnstile — bot and spam detection for our contact form. Operated by Cloudflare, Inc. (US). Processes IP address and browser signals. See Cloudflare Privacy Policy.
- CookieYes — consent management platform. Records and manages your cookie preferences. See CookieYes Privacy Policy.
- Hosting / CDN provider — our website infrastructure. Server access logs may record IP addresses for security and performance purposes.
We do not sell your personal data to third parties. We do not share your data with third parties for their own marketing purposes.
7. International Data Transfers
PT. Vernel Agro Indonesia is based in Indonesia. When data is transferred to or processed by third-party services based in the United States (e.g., Google, Cloudflare), such transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent transfer mechanisms recognised under applicable law.
By submitting a contact form, you acknowledge that your data may be processed in countries outside your own, including Indonesia and the United States, under appropriate safeguards.
8. Data Retention
We retain contact form submissions (name, email, company, and inquiry content) for up to 3 years from the date of submission, or for as long as necessary to maintain a business relationship with you — whichever is longer. After this period, we securely delete or anonymise your data.
Analytics data collected via Google Analytics is retained according to Google's data retention settings, which we configure to a maximum of 14 months.
Cookie consent records (managed via CookieYes) are retained for 1 year from the date of consent.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention obligations.
- Right to restriction: request that we restrict processing of your data in certain circumstances.
- Right to data portability: receive your data in a structured, commonly used format.
- Right to object: object to processing based on legitimate interests.
- Right to withdraw consent: withdraw consent for cookie-based processing at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10. Children's Privacy
Our website is directed at business professionals and is not intended for children under the age of 16. We do not knowingly collect personal data from individuals under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website following any update constitutes your acknowledgement of the revised policy.
12. Contact & Data Inquiries
For all data protection enquiries, rights requests, or complaints, please contact:
- Entity: PT. Vernel Agro Indonesia
- Brand: VWoodPellet
- Location: Sumatra, Indonesia
- Email: [email protected]
- Website: vwoodpellet.com
We aim to respond to all data-related requests within 30 calendar days. If you are located in the EEA and are not satisfied with our response, you may contact your national supervisory authority (e.g., CNIL in France, ICO in the UK, or the relevant authority in your country).