Name and Surname E-mail Address Password Confirm Password EXTERNAL PRIVACY POLICY DEFINITIONS In this policy, unless the context clearly indicates otherwise: “applicable laws” means all laws and regulations that the company is required to comply with; “company” means SMD Technologies Proprietary Limited, a private company with registration number 2015/107801/07, duly incorporated in accordance with the laws of the RSA and “we” or “us” shall have a corresponding meaning; “data subject” means the natural or juristic person to whom personal information relates; “PAIA” means the Promotion of Access to Information Act, 2 of 2000 as amended from time to time; “personal information” means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to: information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth; information relating to the education or the medical, financial, criminal or employment history; any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular; biometric information; personal opinions, views or preferences; correspondence that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; the views or opinions of another individual about the data subject; and the name of the data subject if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the data subject; “POPIA” means the Protection of Personal Information Act, 4 of 2013, together with any regulations published thereunder; “processing” means any activity that involves use of personal information. It includes any operation or activity or any set of operations, whether or not by automatic means, concerning Personal Information, including: the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; dissemination by means of transmission, distribution or making available in any other form; or merging, linking, as well as restriction, degradation, erasure or destruction of Personal Information; “record” means any recorded information: regardless of form or medium, including any of the following: writing on any material; information produced, recorded or stored by means of any tape recorder, computer equipment, whether hardware or software or both, or other device, and any material subsequently derived from information so produced, recorded or stored; label, marking or other writing that identifies or describes anything of which it forms part, or to which it is attached by any means; book, map, plan, graph or drawing; photograph, film, negative, tape or other device in which one or more visual images are embodied so as to be capable, with or without the aid of some other equipment, of being reproduced; in the possession or under the control of the company; whether or not it was created by the company; and regardless of when it came into existence; “special personal information” means personal information concerning the: religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health, sex life or biometric information of a data subject; or the criminal behaviour of a data subject to the extent that such information relates to: the alleged commission by a data subject of any offence; or any proceedings in respect of any offence allegedly committed by a data subject or the disposal of such proceedings; “policy” means this external privacy policy. PURPOSE OF THIS POLICY This policy explains how the company obtains, uses, processes and discloses your personal information and special personal information. It is important that you read this policy carefully before submitting any personal information to us. By submitting any personal information to us, you provide consent to the processing of your personal information as set out in this policy. Please do not submit any personal information to us if you do not agree to any of the provisions of this policy. If you do not consent to the provisions of this policy, or any part of this policy, we may not be able to engage in business transactions with you or consider any job applications from prospective employees. We will only use your personal information in accordance with this policy and any applicable laws. The onus is on you to take all necessary and appropriate steps to protect your personal information. INFORMATION WHICH THE COMPANY MAY COLLECT FROM YOU We may collect the following information from you: personal information and special personal information; records of correspondence; details of transactions that you carry out with us; terms and conditions of trade and other legal agreements that you conclude with us; financial information; credit bureau information; sensitive or special categories of personal information, including biometric information; device and online identifiers and related information; internet, application and network activity, such as cookies, browser visits and use of our networks; any records generated by or within the company; any records and information provided to us by a third party. If you provide the company with any personal information of a third party, we assume that you have obtained the necessary consent from the third party. It is your obligation to obtain consent and inform the third party that you need to disclose their personal information to us and that we will process the personal information in accordance with the provisions of this policy. HOW WE COLLECT INFORMATION We collect your personal information and special personal information as follows: directly or indirectly from you, including through the use of our websites and other online platforms; and/or from third parties. PURPOSE OF PROCESSING PERSONAL INFORMATION The company processes personal information and special personal information, where applicable, to inter alia: transact and communicate with you; create and maintain your account; market our products; resolve complaints and/or queries; conduct criminal, employment history, qualification and reference checks on prospective employees; develop, monitor and improve our systems, processes and service delivery; comply with regulatory and contractual obligations; monitor and control access to the company premises. RETENTION OF YOUR INFORMATION We may retain your personal information indefinitely, unless you object, in which case we will only retain it if we are permitted or required to do so in terms of any applicable laws. However, as a general rule, we will retain your information in accordance with retention periods set out in the applicable laws, unless we deem it necessary to retain it for longer for a lawful purpose. SHARING OF PERSONAL INFORMATION We may disclose your personal information to third parties in the following circumstances: statutory oversight bodies, regulators or judicial commissions of enquiry making a request for data; any court, administrative or judicial forum, arbitration, statutory commission, or ombudsman making a request for data or discovery in terms of the applicable rules; South African Revenue Services, or another similar authority; South African Police Services and South African Qualifications Authority; cloud-based services such as data storage, network, email and security services; third party organizations providing legal services; auditing and accounting bodies; to a prospective purchaser of any of the company, including its business and/or assets; anyone making a successful application for access in terms of POPIA or PAIA; and subject to the provisions of POPIA and other relevant legislation, we may share information about your creditworthiness with any credit bureau or credit providers industry association or other association for an industry in which the company operates. If you do not consent to the company disclosing any personal information to third parties, please contact us. We may, however, not be able to transact with you if such disclosure is necessary. TRANSBORDER FLOWS OF PERSONAL INFORMATION We may need to transfer your personal information to our related parties and service providers in countries outside of the RSA. These countries may not have data-protection laws similar to those of the RSA. Where this is done, we will transfer this personal information in accordance with the provisions of POPIA. INFORMATION SECURITY MEASURES The security and confidentiality of your personal information is important to us. We have implemented reasonable technical, administrative, and physical security measures to protect personal information from unauthorised access or disclosure and improper use. We are committed to ensuring that our security measures which protect your personal information are continuously reviewed and updated where necessary. Personal information is stored on secured servers, personal computers and mobile devices and in secure manual record-keeping systems. In processing any personal information, we have deployed a range of physical, electronic, and other security measures to protect the security, confidentiality and integrity of the personal information that we hold. These measures include, inter alia: access control: access to our information systems is controlled through identity and access management controls and personal information is only made available to personnel who require the personal information to perform a specific job/task; internal policies and training: employees are bound by internal information security policies and must process information securely. All employees must complete training about privacy and information security; third party agreements: any third party who processes personal information on behalf of the company are bound to implement appropriate safeguards and comply with POPIA; information technology safeguards: the company has implemented firewalls and malware protection to safeguard against security breaches; ongoing monitoring: we regularly monitor and review our compliance with internal policies and industry best practice. YOUR RIGHTS You have the right to make a request to access the information we hold on you and correct, amend or delete (subject to all applicable laws) your personal information, or object to how your personal information is processed. Please refer to our PAIA manual on how to make such a request. We will take reasonable steps to ensure that all personal information is kept as accurate, complete and up to date as reasonably possible but may not always expressly request you to verify and update your personal information, unless this process is specifically necessary. We expect that you will notify us from time to time in writing of any updates required in respect of your personal information. In addition, you may object to, cancel, correct or modify the email or telephonic communications that you have chosen to receive from us. If you have any questions concerning your personal information or how to exercise the abovementioned rights, contact us at PAIA@smdtechnologies.com. You have the right to lodge a complaint with the information regulator. You can email the office of the information regulator with your complaint/query at inforeg@justice.gov.za or contact the office telephonically on 012 406 4818. Visit their website for more details: https://www.justice.gov.za/inforeg/contact.html. UPDATING OF THIS MANUAL This manual will be updated by the information officer on a regular basis. Show privacy policy Please confirm that you agree to our privacy policy Only fill in if you are not human Login
