Effective Date: 16-08-2020
Brandability, A Division Of Bidvest Office, shall take all reasonable steps to protect the personal information of users. For the purpose of this clause, “personal information” shall be defined as detailed in the Promotion of Access to Information Act 2 of 2000 (PAIA). The PAIA may be downloaded from: http://www.polity.org.za/attachment.php?aa_id=3569.
We collect two basic types of information from You from Your use of the Website: Personal Data and Non-Personal Data.
“Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
As a general matter, You can browse the Website without submitting Your Personal Data to Us. However, there are a number of circumstances in which You may supply Us with Your Personal Data.
We collect the following Personal Data from You:
The following are the most common ways in which You give Your Personal Data:
We do NOT sell or license Your Personal Data to any third party.
In addition to the specific purposes for which We may process Your Personal Data set out in this clause, We may also process any of Your Personal Data where such processing is necessary for compliance with a legal obligation to which We are subject, or in order to protect Your vital interests or the vital interests of another natural person.
Specifically, We use Your Personal Data for the following:
Personal Data that We process for any purpose shall not be kept for longer than is necessary for that purpose or those purposes.
We will retain Your Personal Data for a maximum period of 6 months.
In some cases, it is not possible for Us to specify in advance the periods for which Your Personal Data will be retained. In such cases, We will determine the period of retention based on our legitimate interests, namely the proper administration of Our Website and business.
Notwithstanding the other provisions of this Section, We may retain Your Personal Data where such retention is necessary for compliance with a legal obligation to which We are subject, or in order to protect Your vital interests or the vital interests of another natural person.
We follow generally accepted industry standards to protect the information submitted to Us, both during transmission and once We receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorised alteration, unauthorised disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in Our possession. This includes, for example, firewalls, password protection and other access and authentication controls.
We use HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is an internet communication protocol that protects the integrity and confidentiality of data between your computer and www.brandability.co.za. The use of HTTPS makes sure your communication with us is:
Encrypted — The data You exchange with Us is secure from eavesdroppers. That means that when You are browsing www.brandability.co.za, nobody can track Your activities across multiple pages, or steal the data exchange between Your computer and www.brandability.co.za.
Integral — The use of HTTPS preserves the integrity of data. Your data cannot be modified or corrupted during transfer.
Authenticated — HTTPS protocol authenticates your communication with Us. This ensures that You are always communicating with Our servers.
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information You transmit to Us or store on the Website, and You do so at Your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of Our physical, technical, or managerial safeguards. If You believe Your Personal Data has been compromised, please contact Us our Contact Us page.
If We learn of a security systems breach, then We attempt to notify You electronically so that You can take appropriate protective steps. We may post a notice through the Website if a security breach occurs.
Non-Personal Data includes information that does not personally identify You, but may include tracking and usage information about Your location, demographics, use of the Website and the internet.
When You interact with the Website, We may collect Non-Personal Data and Our servers may automatically keep an activity log of Your use of the Website.
Generally, We collect and store the following Non-Personal Data:
We may disclose or share Non-Personal Data (or other information, other than Personal Data) in any other manner that We deem appropriate or necessary.
Among other things, We will disclose Non-Personal Data to third parties to help Us determine how users use parts of the Website and who Our users are so that We can improve the Website.
We will also disclose Non-Personal Data to Our partners and other third parties about how Our users collectively use the Website.
We may also collect and store information about You that We receive from other sources to, among other things, enable Us to update and correct the information contained in Our database and to better customise Your experience on the Website.
We collect and store Your device’s source IP address which may disclose the location of Your device at the time You access the Website. Advertisements and certain content may be directed to You as a result of this information.
In some cases, the Website can deliver content based on Your current location if You choose to enable that feature. If You enable that feature, Your current location will be stored locally on Your device which will be used by the Website to serve You certain content tied to Your location. If You elect to have Your location-based searches saved to Your history, We will store such information on Our servers.
We may process Your Account Data (“Account Data“). The Account Data may include Your name and email address. The source of the Account Data is You. The Account Data may be processed for the purposes of operating Our Website, providing Our Services, ensuring the security of Our Website and Services, maintaining back-ups of Our databases and communicating with You. The legal basis for this processing is consent.
We may process information that You post for publication on Our Website or through Our Services (“User Content Data“). The User Content Data may be processed for the purposes of enabling such publication and administering Our Website and Services. The legal basis for this processing is consent.
We may process information contained in any enquiry You submit to Us regarding Our Goods and/or Services (“Enquiry Data“). The Enquiry Data may be processed for the purposes of offering, marketing and selling relevant Goods and/or Services to You. The legal basis for this processing is consent.
We may process information relating to Our customer relationships, including customer contact information (“Customer Relationship Data“). The Customer Relationship Data may include Your name, Your contact details, and information contained in communications between You and Us. You are the source of the Customer Relationship Data. The Customer Relationship Data may be processed for the purposes of managing Our relationships with customers, communicating with customers, keeping records of those communications and promoting Our Goods and Services to customers. The legal basis for this processing is Our legitimate interests, namely the proper management of Our customer relationships.
We may process information relating to transactions, including purchases of Goods and Services, that You enter into with Us and/or through Our Website (“Transaction Data”). The Transaction Data may include Your contact details, Your card details, the transaction details, and/or your PayFast/Ozow/Mobicred/Payabill/Payflex/PayGate authentication details. The Transaction Data may be processed for the purpose of supplying the purchased Goods and Services and keeping proper records of those transactions. The legal basis for this processing is our legitimate interests, namely the proper administration of Our Website and business and a contract between user and you or taking steps at user request to enter a contract.
We may process information that You provide to Us for the purpose of subscribing to Our email notifications and/or newsletters (“Notification Data“). The Notification Data may be processed for the purposes of sending You the relevant notifications and/or newsletters. The legal basis for this processing is consent.
We may process information contained in or relating to any communication that You send to Us (“Correspondence Data“). The Correspondence Data may include the communication content and metadata associated with the communication. Our Website will generate the metadata associated with communications made using the Website contact forms. The Correspondence Data may be processed for the purposes of communicating with You and record-keeping. The legal basis for this processing is Our legitimate interests, namely the proper administration of Our Website and business and communications with users.
We use the information from different portions of the Website, all of which are owned and operated by Us, and We may combine information gathered from multiple portions of the Website into a single user record. We also use and/or combine information that We collect or receive from third party sources to enhance, expand, and check the accuracy of Your user records.
If You are a citizen of the EU, We have summarised the rights that You have under the General Data Protection Regulation (GDPR) in this Section. Some of the rights are complex, and not all of the details have been included in Our summaries. Accordingly, You should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
Right to Access. You have the right to confirmation as to whether or not We process Your Personal Data and, where We do, access to the Personal Data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of Personal Data concerned and the recipients of the Personal Data. Providing the rights and freedoms of others are not affected, We will supply You with a copy of Your Personal Data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.
Right to Rectification. You have the right to have any inaccurate Personal Data about You rectified and, taking into account the purposes of the processing, to have any incomplete Personal Data about You completed.
Right to Erasure. In some circumstances, You have the right to the erasure of Your Personal Data without undue delay. Those circumstances include: the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; You withdraw consent to consent-based processing; You object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the Personal Data has been unlawfully processed.
However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
Right to Restrict Processing. In some circumstances, You have the right to restrict the processing of Your Personal Data. Those circumstances are: You contest the accuracy of the Personal Data; processing is unlawful but You oppose erasure; We no longer need the Personal Data for the purposes of Our processing, but You require Personal Data for the establishment, exercise or defence of legal claims; and You have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, We may continue to store Your Personal Data. However, We will only otherwise process it: with Your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
Right to Object to Processing. You have the right to object to Our processing of Your Personal Data on grounds relating to Your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in Us; or the purposes of the legitimate interests pursued by Us or by a third party. If You make such an objection, We will cease to process the Personal Data unless We can demonstrate compelling legitimate grounds for the processing which override Your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
You have the right to object to Our processing of Your Personal Data for direct marketing purposes (including profiling for direct marketing purposes). If You make such an objection, We will cease to process Your Personal Data for this purpose.
You have the right to object to Our processing of Your Personal Data for scientific or historical research purposes or statistical purposes on grounds relating to Your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Right to Data Portability. To the extent that the legal basis for Our processing of Your Personal Data is consent, or that the processing is necessary for the performance of a contract to which You are party or in order to take steps at Your request prior to entering into a contract, and such processing is carried out by automated means, You have the right to receive Your Personal Data from Us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
Right to Complain to a Supervisory Authority. If You consider that Our processing of Your Personal Data infringes data protection laws, You have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of Your habitual residence, Your place of work or the place of the alleged infringement.
Right to Withdraw Consent. To the extent that the legal basis for Our processing of Your Personal Data is consent, You have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
You may exercise any of Your rights in relation to Your Personal Data through written notice to Us. See Our Contact Details at the end of this Policy.
If You are located in the European Economic Area, Your Personal Data will be processed by Brandability. As part of providing the Website, this Personal Data may be transferred to other regions, including to Canada and the United States. Such transfers will be completed in compliance with relevant Data Protection Legislation.
When Brandability processes Personal Data in the course of providing the Website, Brandability will:
In this Section, We provide information about the circumstances in which Personal Data of citizens of the European Union may be transferred to countries outside the European Economic Area (EEA).
We have offices and facilities in Botswana and South Africa. The European Commission has made an “adequacy decision” with respect to the data protection laws of Botswana and South Africa. Transfers to Botswana and South Africa will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission. A copy of the use of standard protection clauses adopted or approved by the European Commission can be obtained through: ec.europa.eu
The hosting facilities for Our Website are situated in South Africa. The European Commission has made an “adequacy decision” with respect to the data protection laws of South Africa. Transfers to South Africa will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission. A copy of the use of standard protection clauses adopted or approved by the European Commission can be obtained through: ec.europa.eu
You acknowledge that Personal Data that You submit for publication through Our Website or Services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such Personal Data by others.
The legal basis for this processing is Our legitimate interests, namely the proper administration of Our Website and business and communications with users.
Our data protection officer’s contact details are: email@example.com.
In general, if You register on the Website, You may update the information You have provided to Us.
When You register on the Website, You may be able to indicate Your preferences regarding marketing communications. You may be able to change those preferences and select the categories of communications that interest You.
You will not be able to opt-out of receiving certain service-related or transactional communications relating to the Website unless You cancel Your registration or subscription.
We provide You with reasonable access to the Personal Data that You may provide through the Website.
At any time, You may legitimately object to the processing of Your Personal Data, except if otherwise provided by applicable law. You may decline to share certain Personal Data with Us, in which case We may not be able to provide to You some of the features and functionality of the Website.
You may update, correct, or delete Your Account Data and preferences at any time by accessing Your Account settings page on the Website. If You wish to access or amend any other Personal Data We hold about You, or to request that We delete any information about You that We have obtained from an Integrated Service, You may contact Us. Please note that while any changes You make will be reflected in active user databases instantly or within a reasonable period of time, We may retain all information You submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where We otherwise reasonably believe that We have a legitimate reason to do so.
We will however retain Your information needed for administrative and transactional communications.
We do not knowingly collect Personal Data from children under 13 years of age in the USA or 16 years of age in the European Union. The Website is not directed to children under the age of 13 in the USA or 16 in the European Union. We will not knowingly allow children under 13 in the USA or 16 in the European Union to register for or become users of the Website.
If You are under 13 in the USA or 16 in the European Union years of age, You should not provide Personal Data to Us.
If We discover that a child under the age of 13 in the USA or 16 in the European Union has provided Us with Personal Data and We do not have parental consent, We will immediately delete that child’s information.
To help ensure that You receive ads that are relevant to Your interests on the Website, Our advertisers’ services, and elsewhere on the Internet, We and third parties (including service providers, advertisers, and advertising companies) may collect information about Your online activities over time and across different sites, apps, and devices. We and third parties may use that information to help understand audience segments. Advertisers may use the segments to determine the audience groups to which they wish to deliver particular ads. Through this process, We do not use information that directly identifies You.
Opt Out. You can opt out of receiving interest-based advertising on Your computer or laptop from some companies, including Us and Our service providers.
If You wish to opt out of receiving interest-based advertising on Your mobile device, please see the advertising preferences information on support.apple.com for iOS devices or support.google.com for Android devices.
Opting out does not mean You will no longer receive advertising. It means that the company or companies from which You opted out will no longer deliver ads tailored to Your web preferences and usage patterns.
If you have questions or concerns regarding this policy or if you need to make a request please contact us at:
|Mail:||3 Twist Street, Belmont Office Park Bellville 7530 Cape Town Western Cape South Africa|
|Contact Data Protection Officer:||firstname.lastname@example.org|