3.1. Sources of Data Collection: We collect personal data directly from you.

3.2. Data from Shareholders: We collect your personal data when you become our shareholder. This data is collected directly from you. The personal data we collect includes:

1. Name, surname
2. Address
3. Phone number
4. Email address
5. Contact details
6. Nationality
7. Work
8. Date of birth
9. Tax Number
10. Identification number
11. Passport number
12. Blood type
13. Taking pictures
14. Video
15. Bank account
16. Number of shares
17. Signature
18. Gender
19. Religious beliefs
20. Marital status
21. Place of birth

3.3. Data from Directors, Commissioners, Committee Members: If you are nominated or appointed as a director, commissioner or member of our committee, we will collect your personal data directly. The personal data we collect includes:

(1) Nomination and Election Process:

• • • An identity card or government-issued document to verify your identity
    • First name, last name
    • Gender
    • Taking pictures
    • Age
    • Educational background
    • Professional experience
    • Director and managerial positions in other organizations

(2) Appointment and Position of Director/Commissioner/Committee Membership:

• • • Citizen’s KTP and official identity documents
    • Immigration and residence documents, including residency permits, stay permits, work permits, visas and similar documents
    • No
    • Gender
    • Citizen number
    • Passport number
    • Date of birth
    • Age
    • Nationality
    • religion
    • Place of birth
    • Height
    • Training notes
    • Attendance at our activities
    • Marital status
    • Information about people with whom you have a legal relationship
    • Preference
    • Blood type
    • Address
    • Phone number
    • Email address
    • Contact details
    • Bank account number
    • Vehicle registration number
    • Educational background
    • Work
    • Professional history
    • Director or position in another organization
    • Attendance at board of directors, subcommittee, or shareholder meetings
    • Directors’ salaries
    • Securities depository information
    • Name of securities company
    • Director’s performance
    • Other information as required by law or good corporate governance principles

3.4. Data from Shareholder Meetings: When you register or attend our shareholder meetings, we process your data including:

1. 1. No
   2. Address
   3. Phone number
   4. Email address
   5. Number of shares currently owned
   6. Citizen or passport number
   7. The questions you ask
   8. Images, video, and audio are recorded during the meeting

3.5. Additional Data Collection: If you participate in our activities and we need to collect additional personal data, we will notify you and process the data in accordance with the PDP Law.

3.6. Certain Personal Data: If we need to process certain personal data (for example, personal financial data, health data, biometric data or other sensitive data as determined by law), we will clearly inform you of the specific types of personal data we collect and the reasons for processing either in this privacy notice or through other appropriate channels. We will process such data in compliance with laws and regulations and implement appropriate safeguards to ensure its security and confidentiality.

3.7. Disclosure of Third Party Data: If you disclose other people’s personal data to us, you must do so lawfully and in compliance with the PDP Act. This includes informing data subjects of this privacy notice and other relevant documents before or at the time of disclosure.