About us

Roni Marpaung Studio Legal (the “Firm”, “we”, “our”, or “us”) is an Indonesian law firm specialising in dispute resolution with its office based in Jakarta. We are committed to respecting your privacy. This includes dealing with your personal information responsibly and in accordance with the requirements of applicable Indonesian data protection laws and employing appropriate security measures to protect your personal information.

This Privacy Notice (the “Notice”) describes the ways in which we collect, use and share the personal information you provide to us, or that we otherwise collect or receive in the course of operating our business and our website, rmstudiolegal.com (the ”Site”). It also sets out how we store and protect such information and describes certain rights you may have with respect to the personal information that we hold about you.

The scope of this notice

This Notice applies in the following circumstances:

• when we conduct open-source searches on you in connection with our business development or business acceptance processes;
• when we agree to provide legal services to you or the organisation you work for;
• when you or the organisation you work for are a counterparty of one or more of our clients;
• when you request information from us or provide information to us;
• when you apply for a role or work experience opportunity, open day or insight event with us;
• when you visit our offices and our Site;
• if you are an alumni of the Firm;
• when you attend our seminars or other hosted events (including virtual events organised by us and hosted on third party platforms); and
• when you are entered onto our mailing lists to receive publications and other marketing emails.

Use of cookies: We use cookies on our Site. A cookie is a small file of letters and numbers that is sent by our web server to your computer or mobile device when you access our Site. For more information on cookies, visit www.allaboutcookies.org.

Cookies can be disabled by changing the settings on your browser, though some parts of our Site may not function well if you choose to do so.

By continuing to use this without changing your browser settings, you agree to our use of cookies as described above.

What information do we collect about you and how?

1. Business development and business acceptance
   We collect personal information about prospective clients and their beneficial owners, controllers and/or directors as part of business development initiatives and our business acceptance process. The type of personal information we may collect includes name, address, nationality, government issued identification documents, business interests, track record and employment history. We obtain this information from you or your employer directly and from publicly available open sources either directly or through a third party.
2. Legal services and keeping you up to date with relevant marketing and events
   The type of personal information that we may collect includes current and historical information including your name and contact details (such as your address, email address and telephone numbers) and identifiers such as your organisation, employment history, professional and business expertise and positions held.
   We will also collect personal information you choose to provide to us directly, or, for example, through your use of our online services, and information about your other dealings with us and our clients, including contact we have with you in person, by telephone, letter, email or online. We obtain personal information from your IP address and the operating systems and web browsers that you use to access our Site. It enables us to identify which organisations have visited our Site and we use this information to compile statistical data on the use of those sites to help us to improve the user experience.
3. Recruitment applications and employment
   When you apply for or accept a role with us, you may provide us with your full name, date of birth, nationality, education and qualification details, gender, resume, CV, photograph, passport details, bank account details, marital status, home address, home telephone number, mobile telephone number and other details set out in your application.
4. Alumni
   If you are a former employee and have joined or wish to join our alumni programme, we will collect personal information such as your name, contact details, email address, information about your employment with and after the Firm and any other information we may have received from you that is relevant to the alumni programme.
   This information is used to keep in touch with you and help you to engage with the programme. You can provide us with as little or as much information as you wish. Your personal information may be shared with third parties who help us to organise events to which you may be invited on a need-to-know basis only.

How we use your personal information

We will only use your personal information if and to the extent that applicable local law allows. We will therefore only process your personal information if:

• it is necessary for the performance of a contract with you or the organisation you work for;
• it is necessary in connection with a legal obligation;
• you have given your consent (where necessary) to such use or the organisation you work for has obtained your consent (where necessary) to share your information with us; or
• if we (or a third party) have a legitimate interest which is not overridden by your interests or your rights and freedoms. Such legitimate interests include the provision of legal services, running the Firm’s business and marketing relevant services directly to you.

We may use your personal information to:

• consider whether we can pursue certain business development initiatives;
• comply with our legal obligations to identify and verify the identity of our clients and their beneficial owners and to identify and assess the risks of money laundering and terrorist financing which may apply to our business;
• deliver legal services to you and/or the organisation you work for, if you are a client;
• carry out identity and security checks when you visit our offices (including capturing your image on CCTV);
• run the firm’s business (e.g. carry out administrative or operational processes, including recruitment);
• maintain and develop our business relationship with you;
• improve our services and products to you, if you or the organisation you work for are a client or prospective client;
• identify services you may be interested in;
• send you marketing and invite you to events;
• monitor and analyse our business; or
• process and respond to requests, enquiries or complaints received from you.

We will only retain your personal information for as long as is necessary for the purpose for which it was collected, including for the purposes of complying with any legal, regulatory, accounting or reporting requirements. Personal information will be retained in accordance with the applicable data protection and other legislation unless we agree otherwise with you, in writing.

Disclosure of your personal information

We own the database rights in the personal information collected. We do not trade in or rent out this personal information.

In addition, subject to compliance with Indonesian privacy laws, we may exchange your personal information with third parties where:

• You have provided written consent to us sharing your personal information in this way;
• We are under a legal, regulatory or professional obligation to do so (for example, in order to comply with anti-money laundering requirements) or in order to enforce or apply our engagement contract (or other client terms) or to protect the rights and interests, property, or safety of our Firm, clients or others;
• All, or substantially all the assets of Firm are merged with or acquired by a third party, or we expand or re-organise our business, in which case your personal information may form part of the transferred or merged assets or we may need to transfer your personal information to new entities or third parties through which our business will be carried out;
• It   is relevant in the circumstances to disclose the personal information to our clients, your employer or place of business, your professional advisers and parties with whom we have co-promotional arrangements (such as jointly sponsored events);
• We provide anonymous statistical personal information about users of our Site and related usage personal information to reputable third parties, including analytics and search engine providers; or

We may share, transfer or disclose your personal information with third parties including:

• our clients, your professional advisers and your employers or place of business;
• third parties involved in the provisions of services to clients including solicitor, local counsel and other professional advisers;
• our professional advisers, auditors and insurers;
• third party service providers to whom we outsource services, for example archival, auditing, reference checking, professional advisory (including legal, accounting, financial and business consulting), IT support, mailing house, delivery, website, social media, research, banking, payment, client contact, data processing, insurance, forensic, litigation support, data room, marketing and security services;
• third party technology organisations, including cloud service providers, such as data storage platforms; and
• third parties with whom we have co-promotional arrangements (such as jointly sponsored events).

Security

The transmission of personal information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our online services; any transmission is at your own risk. Once we have received your personal information, we will take reasonable steps to use procedures and security features to try to prevent unauthorised access, modification or disclosure. For example, electronic communications through non-secure web platforms including WhatsApp may not be secure, virus-free or successfully delivered. If you communicate with us using a non-secure web platform, you assume the risks that such communications between us are intercepted, not received, delayed, corrupted or are received by persons other than the intended recipient. We take reasonable steps to hold personal data securely in electronic or physical form, including the following:

• We store personal information in access-controlled premises or in electronic databases requiring logins and passwords.
• We require our third-party data storage providers to comply with appropriate personal information security industry standards.
• All partners and staff and third-party providers with access to confidential personal information are subject to confidentiality obligations.
• All partners and staff with access to confidential personal information receive training on personal data protection under Indonesian privacy laws for the purpose of preventing failure to protect personal information and we require our third-party providers with access to confidential personal information to do the same.

Status of this notice

Your use of our Site and online services to us constitutes your acceptance of the terms of this Notice. Technologies and personal data governance practices are constantly developing. We may therefore need to revise this Notice in the future. You should therefore review this page regularly to ensure that you are aware of any changes to its terms.

How to contact us

If you would like further information on the collection, use, disclosure, transfer or processing of your personal information, or would like to discuss your entitlement to, or exercise of, any of the rights listed above, please email us at hello@rmstudiolegal.com.