Privacy Policy
Effective 18 August 2026. Atalen is an independent editorial publication operated from Jalan Kebayoran Baru No. 23, 12190 Jakarta Selatan, DKI Jakarta, Indonesia. This policy explains, in plain language, what information is collected through this website, on what basis it is processed, how long records are kept, and how a reader can exercise their rights or raise a question about how their information is handled. It is written for the general readership of Atalen and applies to every page published under this domain.
1. Scope of this document
This policy covers information generated when a person browses Atalen's pages, subscribes to editorial updates where such a feature is offered, submits the contact form, or corresponds with the editorial desk by email or telephone. It applies equally to casual readers, registered contributors, guest writers, and organisations that send press material for editorial consideration. It does not extend to websites operated by third parties that are linked from an article, even where that link appears within Atalen's own content, because those destinations maintain separate policies that a reader should consult independently. Where Atalen refers to "we," "Atalen," or "the publication" in this document, the reference is to the editorial operation described above and not to any advertiser, sponsor, or syndication partner. This document is reviewed at least once a year and whenever a material change is made to how information is collected or used.
2. Information collected
When a reader completes the contact form on this website, Atalen receives the name, email address, and message text that the reader chooses to supply; no further personal detail is requested as a condition of sending a message. The web server that hosts Atalen automatically records technical information for every visit, including the requesting IP address, browser and operating system identifiers, the page requested, the referring page where available, and the date and time of the request; this is standard server log behaviour common to essentially all websites and is not specific to any individual reader. If Atalen later introduces an email newsletter, the only additional information collected would be the email address supplied at sign-up and, where relevant, delivery and open statistics reported in aggregate by the sending platform. Readers are asked not to include sensitive categories of information, such as details about health conditions, financial accounts, or government identification numbers, inside free-text fields such as the contact form message box, because such fields are not designed to hold sensitive data securely. Atalen does not knowingly collect information from children, and the website is directed at a general adult readership.
3. Legal basis for processing
Where a reader voluntarily submits the contact form, the processing of that message is based on consent, since the reader has taken a deliberate action to initiate correspondence and can withdraw from further communication at any time by simply not replying. Server log data is processed on the basis of Atalen's legitimate interest in operating a secure and reliable website, diagnosing technical faults, and preventing abusive automated traffic; this interest is balanced against the limited, non-identifying nature of most log fields. Where Indonesian data protection law or another applicable framework requires a specific lawful basis for a given activity, Atalen relies on the basis that most accurately reflects the purpose described in this policy, and will identify a different basis in writing if a new processing activity requires one. Atalen does not sell personal information to third parties and does not use reader information to build advertising profiles beyond the aggregate, non-identifying analytics described in the Cookie Policy.
4. Retention periods
Contact form messages and any resulting correspondence are kept for up to 24 months from the date of the last exchange, after which they are deleted unless a longer period is required to resolve an open editorial correction, a legal request, or a dispute. Raw server access logs are retained for a rolling period of 90 days for security and fault-assessment purposes and are then automatically purged by the hosting environment. Aggregated, non-identifying analytics summaries, where measurement cookies are enabled by a reader's cookie choice, may be retained for up to 26 months, consistent with common analytics-industry practice, but such summaries are not linked back to an individual reader. If a newsletter feature is introduced, subscriber email addresses are kept for as long as the subscription remains active and are removed within 30 days of an unsubscribe request. Backup copies of the website, which may include the categories of data described above, are rotated on a schedule of 30 days and are not treated as a means of extending the retention periods stated in this section.
5. Reader rights and how to exercise them
A reader may ask Atalen to confirm whether personal information about them is held, to receive a copy of that information, to correct inaccurate details, to have information deleted where retention is no longer necessary, and to object to a particular processing activity described in this policy. A request can be sent to [email protected] or by post to the address at the top of this page, and should include enough detail, such as the email address used in prior correspondence, for Atalen to locate the relevant records without requesting unnecessary additional information. Atalen aims to acknowledge a rights request within five business days and to provide a substantive response within 30 calendar days; if a request is unusually complex, Atalen will explain the delay and provide a revised timeline in writing. There is no charge for a first request in a twelve-month period; a reasonable administrative fee may apply to a manifestly repetitive request, and Atalen will state the fee before proceeding. A reader who is not satisfied with Atalen's response retains the right to raise the matter with the relevant supervisory authority in their jurisdiction, as described in section 9 below.
6. Third-party processors
Atalen uses a small number of named service providers to operate this website, and each is engaged only to the extent needed for the function described. The website is hosted on infrastructure provided by a commercial web-hosting and content-delivery provider, which processes server logs and page-request data as described in section 2. Where anonymous measurement is active, an analytics processor receives aggregated page-view and referrer information under its own data-processing terms, which limit its use of that information to providing statistics back to Atalen. Outbound editorial correspondence may pass through a standard business email provider, which stores message content for the duration of Atalen's own email retention settings. Atalen requires each processor, by contract or by accepting the processor's standard terms of service, to use the information provided only for the agreed purpose and to apply reasonable technical and organisational safeguards; Atalen does not authorise a processor to use reader information for the processor's own independent marketing purposes.
7. Cookies and similar technologies
This website uses a limited set of cookies, each described in full, including its name, purpose, and maximum lifespan, in the separate Cookie Policy linked in the footer of every page. In summary, a session cookie named atalen_session supports continuity between pages for up to 24 hours, a preference cookie named atalen_cookie_choice remembers a reader's cookie decision for up to 180 days, and, where enabled, an anonymous measurement cookie may remain active for up to 13 months to support aggregate visit statistics. No cookie used on this website is designed to build an individually identifiable advertising profile. A reader can change or withdraw cookie consent at any time using the "Cookie Settings" link in the website footer, and can also remove cookies directly through their browser's own privacy controls.
8. International transfers
Because Atalen's hosting and, where applicable, analytics providers operate technical infrastructure in more than one country, information described in this policy may be processed on servers located outside Indonesia, including in jurisdictions within the Asia-Pacific region and, for some infrastructure providers, in the United States or the European Economic Area. Where information is transferred in this way, Atalen selects providers that maintain recognised safeguards, such as standard contractual clauses or an equivalent transfer mechanism recognised under the provider's own compliance framework, and that are contractually bound to protect the information to a standard consistent with this policy. Atalen does not transfer reader information to a processor located in a jurisdiction that lacks any meaningful data-protection safeguard for the categories of information described in section 2. A reader may request further detail about a specific transfer mechanism by writing to the contact address given in section 5.
9. Complaints and contact procedure
A question, correction request, or complaint about this policy should be sent to [email protected], by telephone to +62 21 2184 7207 during office hours, or by post to Jalan Kebayoran Baru No. 23, 12190 Jakarta Selatan, DKI Jakarta, Indonesia. Atalen's editorial office operates Monday to Friday, 09:00 to 17:00 Western Indonesia Time, and aims to send an initial acknowledgement of any privacy-related message within two business days. A complete response is typically provided within 30 calendar days of the original message; where a complaint concerns a possible data-protection breach, Atalen will additionally provide an assessment of the matter and any recommended precautionary step within a reasonable period appropriate to the circumstances. If a reader believes that a complaint has not been resolved satisfactorily through direct correspondence, they may refer the matter to the personal data protection authority with jurisdiction over Indonesia, or to the relevant authority in their own country of residence, without needing Atalen's prior agreement to do so.
10. Revision history
This policy is dated at the top of the page and is updated whenever Atalen changes a material aspect of how information is collected, used, or retained. The current version, effective 18 August 2026, clarified the retention periods described in section 4 and named the categories of processor described in section 6. The previous version, dated 2 February 2026, introduced the description of the anonymous measurement cookie referenced in section 7 following the addition of aggregate analytics reporting to the website. The version dated 20 October 2025 was the first published edition of this policy and accompanied the initial launch of the contact form described in section 2. Atalen keeps a copy of each superseded version on file and will provide it on request to a reader who wishes to compare changes over time.
Atalen — Jalan Kebayoran Baru No. 23, 12190 Jakarta Selatan, DKI Jakarta, Indonesia · +62 21 2184 7207 · [email protected]