Balivizem – KVKK / GDPR Explicit Consent Text

Version 1.0 – October 2026

1. Data Controller

This text has been prepared to obtain your consent to the processing of the personal data you share through the balivizem.com website and the Balivizem application, within the scope of the processing stated below that is based on your explicit consent. The text has been prepared taking into account Law No. 6698 on the Protection of Personal Data (KVKK), Indonesian Personal Data Protection Law No. 27/2022 (UU PDP) and, to the extent applicable, the EU General Data Protection Regulation (GDPR).

Name: PT Balivizem Balikeys Group ("Balivizem")

Address: Jalan Gunung Soputan No. 1A, Pemecutan Kelod, Denpasar Barat, Kota Denpasar, Bali 80119, Indonesia

NIB: 0403260107415

• E-mail: [email protected]
• Telephone / WhatsApp: +62 851-9053-8501 (Global), +90 850 346 81 13 (TR)
• Website: balivizem.com

Detailed information on the legal bases on which your personal data is processed is in the separately provided Disclosure Notice / Privacy Policy. This Explicit Consent Text covers only processing that depends on your consent.

2. Personal Data to Be Processed

Within the scope of visa, KITAS, company incorporation (PT PMA) and related consultancy services, the following data may be processed.

Identity — Full name, date and place of birth, nationality, gender, marital status

Travel document — Passport information and scan, current/previous visa and KITAS information, entry-exit records

Contact — E-mail, telephone, WhatsApp number, addresses in Turkey and Indonesia

Visual — Passport-style photograph

Professional and financial — Occupation, employer information, bank account statement, proof of income, sponsor information

Customer transaction — Application history, uploaded documents, invoices, payment records (card details are processed by the payment institution and are not stored by Balivizem)

Family — Spouse/child information and documents (in family visa applications)

Transaction security — IP address, cookie and device information, login records, consent records

Special category — Health report/insurance information, criminal record (SKCK, etc.), biometric data (fingerprint, facial photograph – in immigration authority procedures)

Special category data is processed only when requested by the Indonesian authorities for the type of visa/permit you apply for and only to the extent required.

3. Purposes of Processing

Based on your explicit consent, your data is processed for the following purposes:

• Processing of your special category personal data (health, criminal record, biometric) for the preparation and submission of visa, KITAS and residence permit applications

• Transfer of your application documents to business partners abroad (lawyers, notaries) for review and filing

• Sharing of your application status with a reseller or corporate (B2B) business partner when you apply through that partner

• Sending renewal reminders before your visa expires and suggesting additional services suitable for you

• If you give consent, sending campaigns, announcements and newsletters (Article 5)

Processing based on legal grounds other than consent, such as the conclusion and performance of a contract, legal obligations or legitimate interest, is explained in the Disclosure Notice and is outside the scope of this text.

4. Transfer and Transfer Abroad

Since Balivizem is established in Indonesia, the data you provide from Turkey or another country is transferred to Indonesia and to the following recipients. (Recipient — Purpose of transfer — Location)

Indonesian Immigration Authority (Imigrasi), Ministry of Law and Human Rights, OSS/BKPM and other competent institutions — Visa, KITAS, company incorporation applications — Indonesia

Partner lawyers and notaries — Document review and official application filing — Indonesia

Resellers and B2B business partners — Following applications coming through their own channel — Turkey / other

Website, software and server providers (WordPress hosting, Bubble.io, e-mail service, cloud storage) — Hosting the website and application and sending notifications — USA / EU

Payment institutions — Payment transactions — Depending on the payment provider

Insurance companies — Arranging compulsory health insurance (if you request it) — Indonesia / other

Advertising and analytics services (Meta, Google) — Measuring site visits and displaying advertisements if you give cookie consent — USA / EU

Recipients access only the data necessary for the relevant purpose. Balivizem takes appropriate technical and administrative security measures in transfers.

Consent for the cookies used on our website is obtained, separately from this text, through the cookie notice on entry to the site. Details are in the Cookie Policy.

5. Commercial Electronic Communication

If you give consent, Balivizem may contact you by e-mail, SMS, WhatsApp and telephone for campaigns, discounts, announcements of new services, newsletters and visa renewal offers.

This consent is optional; not giving it does not prevent you from receiving services. You can withdraw your consent at any time through the "unsubscribe" link in each message, through the Profile > Communication Preferences screen of your balivizem.com account, or by writing to [email protected].

Notifications about your application status, missing documents, payments and invoices are not commercial messages; they are sent for the performance of the service regardless of your consent.

6. Your Rights, Withdrawal of Consent and Retention

You can withdraw your consent at any time, either entirely or only for one heading. Withdrawal does not affect the lawfulness of processing carried out up to that date. However, withdrawing your consent for special category data or transfer abroad may mean that your ongoing visa/permit application cannot be completed.

Under KVKK Art. 11, UU PDP Art. 5–13 and GDPR Art. 15–22 you have the following rights:

• To learn whether your data is being processed and to request information

• To learn the purpose of processing and whether it is used in accordance with that purpose

• • To know the third parties to whom it is transferred
• • To request correction of incomplete or inaccurate data
• • To request deletion, destruction or anonymization of data

• To object to an outcome against you resulting from analysis by automated systems

• To claim compensation for damage caused by unlawful processing

You can send your requests to [email protected] or to the postal address above; they are answered within 30 days at the latest.

Your data is retained until you withdraw your consent or the purpose of processing ends; statutory retention periods (e.g. tax and accounting records) are reserved. At the end of the period, data is deleted, destroyed or anonymized.

7. Statement of Consent

Accepting that I have read the Disclosure Notice and understood this Explicit Consent Text, I give consent, separately for each heading I tick below, of my own free will:

• Special category data: I consent to the processing of my health, criminal record and biometric data for my visa/permit applications.

• Transfer abroad: I consent to the transfer of my personal data to the recipients and countries in Article 4.

• Sharing with business partners: I consent to my application status being shared with the relevant reseller or B2B business partner where it acts as intermediary.

• Commercial communication (optional): I consent to being contacted by e-mail, SMS, WhatsApp and telephone for campaigns and announcements.

Your consents are obtained through the balivizem.com website and the Balivizem application. The date, time, your IP address and the version of the text you consented to are recorded automatically by the system.