Privacy Policy

Hasanuddin University respects your privacy. This policy explains what personal data we process when you use Hasanuddin University’s website and apps, why we use it, how we protect it, and the rights you have.

Last updated: 13 October 2026. This policy replaces the version of 5 October 2026.

Scope

This policy applies to:

  • the website www.unhas.ac.id;
  • the eOffice UNHAS mobile app, Hasanuddin University’s electronic correspondence and disposition app, which is also available at e-office.unhas.ac.id;
  • other apps and digital services managed by Hasanuddin University that link to this page.

It does not apply to third-party websites or services linked from our services.

Data controller and contact

The personal data controller is Hasanuddin University (Universitas Hasanuddin), Jl. Perintis Kemerdekaan Km. 10, Tamalanrea, Makassar, South Sulawesi 90245, Indonesia. Its information systems and digital services are managed by the Institute for Digital Transformation and Artificial Intelligence (LTDKA).

Data we process

Website

  • Technical data recorded automatically in server logs: IP address, browser and device type, time of access, pages visited, and site search terms.
  • Visit statistics through Google Analytics 4 (see Cookies and analytics).
  • Data you send us yourself, for example through a form or email: name, email address, phone number, and the content of your message.

eOffice UNHAS app

University leaders and staff use this app to manage incoming letters, dispositions, notices, and outgoing letters. Users do not sign up themselves; accounts are created by the system administrators for authorised users. The data processed is:

  • Account and employment data: name, staff number or username, work unit, position, email address, and phone number.
  • Correspondence content: letters, dispositions, notes, and the files and documents users create or upload as attachments.
  • Usage and technical data: activity history in the app (for example when a letter was opened, forwarded, or approved), device type, operating system and app version, and error logs that keep the service reliable.

The app only requests the device permissions it needs to work; they are listed on the app’s store page. You can revoke permissions in your device settings, although some features may then stop working. The app shows no advertising.

Other apps and services

Other apps and services that link to this policy only process the data they need to work, under the same principles. If an app needs types of data beyond those described above, the details are added to this page.

Purposes and legal bases

We process personal data to:

  • run the university’s education, research, community service, and administration, including official correspondence;
  • authenticate users and manage access rights;
  • keep our systems secure, reliable, and performant;
  • answer questions and requests;
  • produce statistics that help us improve our services;
  • meet legal obligations, including record-keeping.

We rely on the legal bases recognised by Indonesia’s Personal Data Protection Law (Law No. 27 of 2022): performing tasks in the public interest, providing public services, or exercising Hasanuddin University’s authority under the law; complying with legal obligations; performing a contract, such as an employment relationship; legitimate interests; or your consent.

Sharing

We do not sell or rent personal data. We only share it where necessary:

  • with work units within Hasanuddin University according to their duties, for example the recipients of letters and dispositions in eOffice UNHAS;
  • with service providers that process data on our behalf under confidentiality obligations, namely PT Integra Teknologi Solusi, which develops and maintains the eOffice UNHAS app, and Google, which provides website analytics and app distribution;
  • with government or law enforcement authorities where the law requires it.

Some third-party services, such as Google Analytics, may process data outside Indonesia. We use them with regard to the personal data transfer provisions of the Personal Data Protection Law.

Storage and retention

Data is stored on servers managed or contracted by Hasanuddin University for as long as it is needed for its purpose or required by law:

  • website server logs are kept for a limited period for security and troubleshooting;
  • Google Analytics statistics are kept according to the Google Analytics retention settings;
  • letters, dispositions, and documents in eOffice UNHAS are official records and are kept in line with Law No. 43 of 2009 on Archives and Hasanuddin University’s records retention schedule;
  • eOffice UNHAS accounts are deactivated when a user is no longer authorised, while data that forms part of official records is kept for as long as those records must be kept.

When the retention period ends, the data is destroyed or anonymised.

Security

We apply reasonable technical and organisational measures to protect data from unauthorised access, alteration, disclosure, or deletion, including role-based access control, encrypted connections (HTTPS) for web services, backups, and system monitoring.

No system is completely secure. If a personal data protection failure occurs, we will notify the affected data subjects and the competent authority in writing within 3 × 24 hours, as required by the Personal Data Protection Law.

Your rights

Under the Personal Data Protection Law, you have the right to:

  • obtain information about how your personal data is processed;
  • complete, update, and correct inaccurate data;
  • access and obtain a copy of your personal data;
  • end the processing of, delete, or destroy your personal data;
  • withdraw consent you have given;
  • object to decisions based solely on automated processing;
  • suspend or restrict processing;
  • obtain and use your personal data in a commonly used or machine-readable format;
  • sue and receive compensation for violations in the processing of your personal data.

Some rights may be limited where the data is needed for legal obligations, record-keeping, or official duties, as provided by law. Send requests to dsitd@unhas.ac.id with your name, the service concerned, and your request. We may ask you to verify your identity before acting on it.

Account and data deletion

Accounts for eOffice UNHAS and other staff apps are created and deactivated by the system administrators. To request that your account be deactivated or your personal data deleted:

  1. email dsitd@unhas.ac.id, preferably from your official university email address, with the subject “Data deletion request – [app name]”;
  2. include your name, staff number or username, and the data you want deleted;
  3. we will act on the request once your identity is verified and let you know the outcome.

Account data and personal data we are not required to keep will be deleted. Letters and documents that have become official records are kept in line with archival regulations.

Cookies and analytics

The website uses Google Analytics 4 to measure visits in aggregate, for example which pages are opened most. Google Analytics sets cookies in your browser; we do not use them for advertising. The site may also use functional cookies, for example to remember your language choice. Embedded third-party content, such as YouTube videos, may set cookies under that party’s own policy.

You can refuse or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on.

Children

Our services are intended for students, academic and administrative staff, partners, and the public, and are not designed specifically for children. Where children’s data must be processed, we do so with the consent of a parent or guardian, as required by the Personal Data Protection Law.

Other links and changes to this policy

Our services may link to third-party sites that have their own privacy policies. We may update this policy as our services or the law change; the date of the latest update is shown at the top of this page, and significant changes will be announced on the website or in the relevant app.