Privacy Notice

1. INTRODUCTION

 

Respecting and protecting your privacy and Personal Information (refer to the definition of Personal Information at the end of this notice) is very important to triVector (Pty) Ltd. It is also a Constitutional right and good business practice requirement which we take very seriously.

 

This Privacy Notice applies to you, the data subject, and governs the relationship with triVector.

 

For more detailed information with regards to the processing and protecting of your personal information please contact the triVector Information Officer as stipulated in section 10 below.

 

In line with the 8 Conditions for Lawful Processing of Personal Information as set out in the Protection of Personal Information Act no 4 of 2013 (the Act), we-

 

• Accept joint responsibility and accountability with you to responsibly manage and protect your Personal Information when providing our services and solutions to you;
• Undertake to collect and process only such Personal Information which is necessary given the purpose for which it is processed and to assist you with your required solutions, conclude the necessarily related agreements and consider the legitimate legal interests of everyone concerned, as required by the Act. We will at all times respect your right to withdraw your consent for the processing of your Personal Information;
• Undertake to only use your Personal Information for the purpose for which the information is essential to enable us to assist you or provide solutions to you;
• Undertake not to share or further process your Personal Information with anyone or for any reason if not required for assisting you with your solutions or as required in terms of legislation or regulations;
• Undertake to take reasonably practicable steps to ensure that information is complete, accurate, not misleading and, where necessary, is updated;
• Undertake to be open and transparent on the nature, extent and reasons for processing Personal Information;
• Undertake to safeguard and protect your Personal Information in our possession;
• Undertake to freely confirm what Personal Information we hold of you, to update and rectify the Personal Information upon request and to keep it for no longer than required.

By providing us with your Personal Information, you agree to this Privacy Notice and authorise triVector to process such information as set out herein and you authorise triVector and any associated entities or third parties (where applicable) for the purposes set out herein.

 

We will not use your Personal Information for any other purpose than that set out in this Privacy Notice and we will take the necessary steps to secure the integrity and confidentiality of Personal Information in our possession and under our control by taking appropriate and reasonable measures to prevent loss of, damage to or unauthorised destruction of your Personal Information and to prevent the unlawful access to, or processing of Personal Information.

 

2. REASONS FOR PROCESSING PERSONAL INFORMATION

 

triVector, or the entities who provide or assist with the solutions you required (if any), need to collect, use and keep your Personal Information as prescribed by relevant legislation and regulations and for reasons such as:

 

• To provide all relevant services in accordance with your mandate to us as set out in the engagement letter and to maintain our relationship;
• To respond to your queries;
• To confirm and verify your identity or to verify that you are an authorised user for security purposes;
• To comply with all legislative or regulatory requirements related to services provided to you by us;
• To satisfy any requirement by a professional body or network to which we are a member;
• To fulfil our contractual obligations to you, for example to ensure that invoices are issued correctly, to communicate with you and to carry out instructions and requests, and for ensuring you are able to access our premises when required;
• For processing personal data during the recruitment process and for keeping records of the process. This allows us to manage the recruitment process, assess and confirm your suitability for employment or contracting opportunities.
• For any other operational purposes required to assist you with the solutions you require;
• To comply with our legal obligations to you, for example health and safety obligations while you are on any of our premises, or to a third party;
• In connection with possible requirements by the Information Regulator or other Government agencies allowed by law, legal proceedings, or court rulings.

 

3. BUSINESS ACTIVITIES FOR WHICH PERSONAL INFORMATION IS PROCESSED

 

• Providing Professional Services as per client mandate;
• Administering, managing and developing our businesses and services;
• Security, quality and risk management activities;
• Complying with any requirement of law, regulation or a professional body of which we are a member;
• Recruitment and Employment purposes.

triVector collects a range of information about you during the recruiment process.

This includes:

• your name, address and contact details, including email address and telephone number;
• any personal data you have included in your curriculum vitae (CV) for example date of birth, marital status, etc.;
• details of your qualifications, skills, experience and employment history;
• information from interviews and phone-screenings you may have;
• information about your current level of remuneration, including benefit entitlements; and
• information about your entitlement for employment;

 

We may collect this information in a variety of ways. For example, data might be contained in application forms or CVs (including when these are sent to us through LinkedIn and other websites, or from Employment Agencies, as part of speculative applications, referrals or queries), obtained from your passport or other identity documents, or collected through interviews or other methods of assessment.

 

We may also collect personal data about you from third parties, such as references supplied by former employers. We will seek information from third parties only once a job offer has been made to you.

 

Data will be stored in a range of different places, including on your application record, in our HR management systems, in our CV database on MS Office 365 and our email system.

 

 

4. SHARING OR TRANSFER OF PERSONAL INFORMATION

 

Our employees will have access to your Personal Information to administer and manage our services and internal business processes. Your information may be shared for the purposes of the recruitment process. This includes sharing with members of the HR team and interviewers involved in the recruitment process.

 

We will not share your personal data with other third parties, unless your application for employment is successful and we need to make you an offer of employment. We will then share only what is necessary of your personal data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the screening and vetting agencies to obtain necessary criminal records checks.

 

In general, we do not share your Personal Information with third parties (other than service providers acting on our behalf) unless we have a lawful basis for doing so.

 

CROSS BORDER

We may need to share Personal Information outside of South Africa (in terms of POPI) or the European Economic Area (in terms of GDPR) for purposes as set out in this Privacy Notice Statement. This will be done in very limited circumstances and in strict adherence of all requirements of the Act and other relevant legislation.

 

THIRD PARTY PROVIDERS/OPERATORS

We may need to share your Personal Information and/or utilise software or online platforms to enter and process your information for business management purposes. This will only be done in strict adherence to the requirements of the Act. We also have agreements in place to ensure that they comply with the privacy requirements as required by the Act.

 

triVector may also disclose your information:

 

• Where we have a duty or a right to disclose in terms of legislation, regulations or industry codes;
• Where we believe it is necessary to protect our rights;
• When explicitly requested by you;
• With professional advisers, for example, law firms, as necessary to establish, exercise or defend our legal rights and obtain advice in connection with the running of our business. Personal Information may be shared with these advisers as necessary in connection with the services they have been engaged to provide.
• To law enforcement, regulatory and other government agencies and to professional bodies, as required by and/or in accordance with applicable law or regulation. We may also review and use your personal information to determine whether disclosure is required or permitted.

 

5. INFORMATION SECURITY

 

We are legally obliged to provide adequate protection for the Personal Information we hold and to stop unauthorised access and use thereof. We will, on an ongoing basis, continue to review our security controls and related processes to ensure that your Personal Information remains secure.

 

Generally accepted standards of technology and operational security have been implemented to protect information from loss, misuse, alteration, or destruction. All our employees are trained on information security and are required to keep Personal Information confidential and only authorised persons have access to such information.

 

When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal information that we remain responsible for, is kept secure.

 

6. RETENTION OF PERSONAL INFORMATION

 

We shall only retain and store Personal Information for the period for which the data is required to serve its primary purpose or a legitimate interest or for the period required to comply with an applicable legal requirement, whichever is longer.

 

In some circumstances we may ask your consent to retain your Personal Information for a specified period, for another reason that is compatible with the original purpose, for example, to retain your curriculum vitae (CV) in our recruitment database for other future opportunities.

 

7. YOUR RIGHTS: ACCESS TO INFORMATION

 

You have the right to request a copy of the Personal Information we hold about you. To do this, simply contact us via the numbers/addresses provided below or on our website and specify what information you require. We will need proof of authorisation or a copy of your ID document to confirm your identity before providing details of your personal information.

Please note that any such access request may be subject to a payment of a legally allowable fee.

 

8. AMENDMENTS TO YOUR INFORMATION

 

You have the right to ask us to update, correct or delete your personal information. We will require proof of identity and/or authority before making changes to personal information we may hold of you. We would appreciate it if you would keep your personal information accurate and up to date.

 

9. COOKIE POLICY

 

Our policy is to use cookies only to improve the way we do business with you or when they’re essential to the way the site works.

 

THE TYPES OF ACTIVITIES WE MAY USE COOKIES FOR ARE TO:

To find out how people use our sites, such as how often they visit, which pages they go to, and which links they click on, so that we can improve our websites. To help us to provide relevant information, such as details of products, services and other information that you may be interested in. We do not use any cookies to store any personal data or other data that could be used to identify you as an individual.

 

Whenever possible, we will list the cookies used on our websites. triVector currently uses a Session ID cookie which is purely for collecting website performance-based metrics. triVector does not collect or store any personal data through our website.

 

HOW TO TURN OFF COOKIES
You can turn off cookies in your browser settings. If you do turn them off, it is important to remember that you may not be able to use all of the services on our websites. You can find out more about turning off cookies at the independent website allaboutcookies.org

 

10. HOW TO CONTACT US

 

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this Privacy Notice.  

If you have any queries about this notice, or need further information about our privacy practices, wish to withdraw consent, exercise preferences or access or correct your personal information, please contact us at: This email address is being protected from spambots. You need JavaScript enabled to view it.

Alternatively you can contact us on the numbers/addresses listed under the contact us section of our website.

 

Any additional information or concerns can be found and raised with the Information Regulator, who can be contacted as shared below, but please feel free to contact us first to discuss any questions or concerns you may have:

Website: https://www.justice.gov.za/inforeg/

Tel: 012 406 4818

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Personal Information is defined by the Protection of Personal Information Act (the Act) as:

 

“information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to—

 

1. information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
2. information relating to the education or the medical, financial, criminal or employment history of the person;
3. any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
4. the biometric information of the person;
5. the personal opinions, views or preferences of the person;
6. correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
7. the views or opinions of another individual about the person; and
8. the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person”.