Data Processing Ownership
Contact the Information Officer: firstname.lastname@example.org
Download our PAIA and POPIA manual HERE (200Kb PDF)
- We understand that your privacy and the security of your personal information is extremely important. This policy sets out what we do with your personal information, what we do to keep it secure, from where and how we collect it, as well as your rights in relation to the personal information we hold about you.
- This policy applies if you interact with us, including by using our website
- If you don’t want to read all the detail, here are the things we think you’d really want to know:
- We share your personal information with third parties where it is necessary to provide services to you or to perform our functions.
- You have a number of rights over your personal information and the different ways in which you can exercise those rights is set out in this notice under paragraph 9.
- We do send direct marketing, if we’re allowed to. We do this to encourage you to engage in our alumni network, participate in sector research and attend any events that we feel will be of benefit to you. If you want us to stop you can request us to stop and opt-out of receiving our marketing communication.
- We also use your information to display more relevant online material relating to our services/functions on our website, on other websites and online media channels.
Who are we?
When we say “we” or “us” in this policy, we are referring to The Oppenheimer Memorial Trust.
What sorts of personal information do we hold?
In order to interact with you we will collect, hold and use the following personal information –
- information that you provide to us such as your name, address, identification number, telephone number, email address, and any feedback you give to us, including by phone, email, or when you communicate with us via our website;
- information about the services that we provide to you or the functions we perform (including for example, the things we have provided to you, when and where, the way you use our services, and so on);
- information about whether or not you want to receive marketing communications from us;
- information about any device you have used to access our services (such as your device’s make and model, browser or IP address); and
- your contact details and details of the emails and other electronic communications you receive from us, and how you interact with them. For example whether the communication has been opened, if you have clicked on any links within that communication and the device you used. We do this because we want to make sure that our communications are useful to you, so if you don’t open them or don’t click on any links in them, we know we need to improve our services.
Our legal basis for processing your personal information
Whenever we process your personal information we have to have something called a “legal basis” for what we do. The different legal bases we rely on are –
- Consent –You have told us you are happy for us to process your personal information for a specific purpose(s).
- Legitimate interests – The processing is necessary for us to conduct our business, but not where our interests are overridden by your interests or rights.
- Performance of a contract – We must process your personal information in order to be able to provide you with one of our products or services.
- Legal obligation – We are required to process your personal information by law.
How do we use your personal information?
We may use your information in the following ways –
- To perform our functions – we need to use your personal information to perform our functions insofar as they relate to you and to our interactions with you.
- To improve interactive experience with us – we try to understand the community we serve so that we can improve your interactive experience with us.
- Analytics and profiling – we use your personal information for statistical analysis and to help us understand you more.
- Contacting you – we use your personal information to contact you. This may be in relation to a service update, an issue you have raised with us, to conduct market research or to ask for your feedback.
- Marketing and advertising – we use your personal information to provide relevant marketing communications (including by email, phone, SMS, WhatsApp or online advertising), relating to our alumni network, sector research and events that we feel will be of benefit to you, and those of our third party partners or affiliates. As part of this, online advertising may be displayed on our website.
PERSONAL INFORMATION SHARING
We may share information about you with –
- companies or third parties affiliated to us;
- partners or agents involved in delivering the services offered by us;
- partners or agents that conduct satisfaction surveys and any other surveys related to our functions;
- companies who are engaged to perform services for or on our behalf;
- law enforcement agencies, regulatory organisations, courts or other public entities if we are required by law to do so;
- emergency services; and
- with any entity or forum wherein we may protect ourselves against fraud or exercise our rights.
Cookies and similar technologies
Keeping you informed about our OFFERING/SERVICES
- We would like to tell you from time to time about our alumni network and events that we think you might be interested in. We would like your input into sector research we may conduct from time to time. Where we have consent or it is in our legitimate interests to do so, we may do this by email, text message, WhatsApp, phone, through online advertising or by any other electronic means.
- We won’t send you marketing messages if you tell us not to, but if you are a beneficiary we will send you occasional messages and may send you surveys (you can always opt out of these via the survey email itself). If you wish to amend your marketing preferences, you can do so by clicking the unsubscribe link in any email notification, replying “Stop” to any SMS, or by emailing our Information Officer at email@example.com.
- Please note that it can take a little while for all marketing to stop once you either withdraw your consent or tell us you’d like to opt out of marketing. This is because some marketing may have been identified as relevant to your interests and may already be in transit, meaning it cannot be immediately stopped.
- You have a number of rights under data protection legislation which, in certain circumstances, you may be able to exercise in relation to the personal information we process about you.
- These include –
- the right to access a copy of the personal information we hold about you;
- the right to correction of inaccurate personal information we hold about you;
- the right to restrict our use of your personal information;
- the right to be forgotten; and
- the right to object to our use of your personal information.
- Where we rely on consent as the legal basis on which we process your personal information, you may also withdraw that consent at any time.
- If you are seeking to exercise any of these rights, please contact our Information Officer at firstname.lastname@example.org. Please note that we will need to verify your identity before we can fulfil any of your rights under data protection law. This helps us to protect the personal information belonging to our customer against fraudulent requests. You may also refer to our PAIA and POPIA Manual for details at our website: https://www.omt.org.za/
Automated decision making and profiling
We do not use any purely automated processing processes to bring about a decision – including profiling – on the establishment, implementation or termination of an employment relationship.
How long will we keep your personal information for?
We take protecting your personal information seriously and are continuously developing our security systems and processes. Some of the controls we have in place are –
- we limit physical access to our buildings and user access to our systems to only those that we believe are entitled to be there;
- we use technology controls for our information systems, such as firewalls, user verification, strong data encryption, and separation of roles, systems and data; and
- we utilise industry standards to support the maintenance of a robust information security management system.
If you would like to exercise one of your rights as set out in the “Your Rights” section above, or you have a question or a complaint about this policy, or the way your personal information is processed, please contact our Information Officer by email on email@example.com or telephone on +27 11 551 9500
INFORMATION REGULATOR (SOUTH AFRICA)
The Information Regulator (South Africa) is an independent body established in terms of section 39 of POPIA. The Information Regulator is empowered to monitor and enforce compliance by public and private bodies with the provisions of the POPIA Act. They may be accessed at –
27 Stiemens Street
Contact: firstname.lastname@example.org or
Last updated June 2021.