The Privacy Notice explains how SSC Legacy obtains, uses and discloses your personal information, in accordance with the requirements of the Protection of Personal Information Act (“POPIA”).
At SSC Legacy we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.
It is our policy to respect your privacy regarding any information we may collect and process while operating on our website or through any dealings with us at our physical store.
All employees are required to sign and adhere to an Employee Consent and Confidentiality Agreement.
The policy applies to any and all actions we take regarding your personal information including:
a) The collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
b) Dissemination by means of transmission, distribution or making available in any other form; or
c) Merging, linking, as well as restriction, degradation, erasure or destruction of information.
The type of personal information we collect:
We collect and process your personal information mainly for;
Correct identification, account accuracy, to be able to contact you in relation to services delivered, to understand your needs to deliver services accordingly.
To do this we may need the following;
- Name, e-mail address, telephone numbers
How we get the personal information and what we use it for:
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- For communication purposes.
Processing of your information is necessary for pursuing the legitimate interest of SSC Legacy as stipulated by the POPI act.
We also receive personal information indirectly, from the following sources in the following scenarios:
- Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.
We may share this information with:
- Internal employees only
We will ensure that anyone to whom we pass your personal information agrees to treat your information with the same level of protection as we are obliged to.
When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal information that we remain responsible for, is kept secure.
All reasonable steps are taken by SSC Legacy to de-identify you from your data as well as supplying only the minimum data required to service our client/patient to the best of our capabilities.
When will we process your personal information:
In terms of the Protection of Personal Information Act (POPIA), the justification ground which we base our processing on consist out of the following:
- The data subject or a competent person where the data subject is a child consents to the processing. Kindly note that you have the right to withdraw your consent;
- The processing is necessary to carry out actions for the conclusion or performance of a contract to which the data subject is a party;
- The processing complies with an obligation imposed by law on the business;
- The processing protects a legitimate interest of the data subject;
- The processing is necessary for the proper performance of a public law duty by the business;
- The processing is necessary for pursuing the legitimate interests of the business or of a third party to whom the information is supplied.
How we store your personal information:
Your information is securely stored on a server on site, protected by real-time, up-to-date firewalls and anti-virus software. Where necessary, off-site, cloud-based servers are used for long term storage and back-up; these services comply with the South African POPI Act. All redundant and unused physical documentation gets shredded on a weekly basis.
We keep your information for a minimum x years or until.
When necessary, the information will be disposed of correctly in line with the company’s Data Destruction Policy as well as applicable legislation, ensuring the proper destruction and removal of data in such a way that it will no longer be accessible or retrievable.
Like most website operators, SSC Legacy collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. SSC Legacy’s purpose in collecting non-personally identifying information is to better understand how SSC Legacy’s visitors use its website. From time to time, SSC Legacy may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
SSC Legacy also collects potentially personally-identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on https://www.ssclegacy.com blog posts. SSC Legacy only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below.
Gathering of Personally-Identifying Information
Certain visitors to SSC Legacy’s websites choose to interact with SSC Legacy in ways that require SSC Legacy to gather personally-identifying information. The amount and type of information that SSC Legacy gathers depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at https://www.ssclegacy.com to provide a username and email address.
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Links To External Sites
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites, products or services.
www.ssclegacy.com uses Google AdWords for remarketing
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
SSC Legacy may collect statistics about the behaviour of visitors to its website. SSC Legacy may display this information publicly or provide it to others. However, SSC Legacy does not disclose your personally-identifying information.
To enrich and perfect your online experience, SSC Legacy uses “Cookies”, similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.
Your data protection rights:
- You are entitled to access your personal data by sending a written request to Howard Griffith at firstname.lastname@example.org or Lynette Quirk at email@example.com. We may charge you a fee for this service as set out in terms of Condition 8 of POPIA.
- You may also request SSC Legacy to correct or supplement any of your personal data which SSC Legacy will undertake as soon as practical.
- You may request the destruction of your personal data. Howard Griffiths, our Information Officer, and Lynette Quirk, our Deputy Information Officer will consider your request in light of any other laws or regulations prohibiting SSC Legacy from destroying your personal data.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us Howard Griffiths at firstname.lastname@example.org if you wish to make a request.
How to complain:
If you have any concerns about our use of your personal information, you can make a complaint to us by contacting us at email@example.com
You can also complain to the Information Regulator if you are unhappy with how we have used your Information.
Their contact details are as follows:
The Information Regulator (South Africa)
33 Hoofd Street
Forum III, 3rd Floor Braampark
P.O Box 31533
Braamfontein, Johannesburg, 2017
Complaints email: complaints.IR@justice.gov.za