Direct marketing + profiling + tracking technologies are subject to UU PDP consent + lawful basis requirements + Indonesian sectoral law overlays. (1) Direct Marketing: per Article 18 + general marketing communications require Data Subject opt-in consent + may rely on legitimate interests for non-electronic mail to existing customers with clear opt-out + each electronic marketing communication shall include unsubscribe/opt-out mechanism. (2) Profiling: any automated processing including profiling that has legal effects or substantial similar effects requires opt-out per Article 11 + Data Protection Impact Assessment per Article 45. (3) Cookies + Similar Tracking Technologies: per UU PDP + coordinated with UU ITE (Electronic Information and Transactions Law) + PP 71/2019 on Electronic System and Transaction Implementation - websites and apps must (a) provide notice of cookie use; (b) obtain consent for non-essential cookies including analytics + advertising + social media + functional non-essential; (c) provide cookie preference center allowing granular consent; (d) allow withdrawal as easy as giving. (4) Behavioural Advertising: opt-in consent required + transparency about data shared with ad partners + ad tech vendors + DMP Data Management Platforms + DSP Demand-Side Platforms + SSP Supply-Side Platforms + Real-Time Bidding (RTB) + retargeting + cross-device tracking. (5) Sensitive Categories: behavioural targeting based on Specific Personal Data (sensitive) prohibited without explicit consent including health + political + religious + sexual + biometric + genetic + child. (6) Children Behavioural Advertising: no targeted advertising to children under 17 except as authorised by parental consent + restricted to age-appropriate content. (7) Marketing Preference Center: customer-accessible preference center showing all marketing channels (email + SMS + push + WhatsApp + voice + postal) + opt-in/opt-out controls + frequency settings + records + audit. (8) Indonesian e-Commerce: coordinated with Indonesia e-Commerce Roadmap + Trade Law + Consumer Protection Law (UU Perlindungan Konsumen) + OJK financial promotion regulations + BI payment regulations. (9) Cross-Border Ad Tech: data shared with foreign ad tech vendors subject to UU PDP cross-border transfer requirements. Coordinates with GDPR ePrivacy + UK ICO cookie guidance + India DPDP + Singapore PDPA DNC + Indonesia UU Trade + Indonesia Consumer Protection + KPI Indonesian Broadcasting Commission. Indonesia PDP Marketing + Profiling applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.