Privacy policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make use of www.reg24.co.za (the “Site”).

INTRODUCTION

  1. Registration 24 operates in the Republic of South Africa. The company is fully compliant with the Protection of Personal Information Act No. 4 of 2013 (“POPIA”) and acts as both a responsible party and a operator on behalf of data subjects that Registration 24 performs processing for. Registration is committed to compliance with all relevant South African laws in respect of personal data, and the protection of the “rights and freedoms” of individuals whose information Registration collects and processes in accordance with POPIA.
  2. This Data Privacy Policy Notice is intended to provide transparency to data subjects about what happens with their personal data.
  3. POPIA applies to the processing of personal data wholly or partly by automated means (i.e. by computer) and to the processing other than by automated means of personal data (i.e. paper records) that form part of a filing system or are intended to form part of a filing system.
  4. POPIA will apply to the processing of all personal information for a responsible party where the responsible party is domiciled in the Republic of South Africa.

PERSONAL DATA

  1. Personal data is only stored if volunteered by the data subject.
  2. Registration 24 endorses and adheres to the POPIA principal of ‘minimality’ whereby Registration 24 only collects, processes or stores the minimum amount of data that it requires to provide the requested service.
  3. Different data is required at different points of the service provided by Registration 24 and is not all collected at the same time.
  4. Depending on the service provided, this can include any or all the following data:
    • name and surname
    • email address;
    • contact telephone number;
    • delivery address;
    • passport or national ID;
    • username and password for Registration 24 account access;
    • vehicle information
  5. In certain cases Registration 24 may require additional information for either the service provided or any other legitimate reason. In these instances Registration 24 will always seek consent from the data subject, together with an explanation of why the additional information is necessary.

LEGAL BASIS FOR OBTAINING OR REQUESTING PERSONAL INFORMATION

  1. Registration 24 requests personal information in its capacity as a responsible party and obtains personal information from responsible parties for processing purposes in its capacity as an operator.
  2. The legal basis for collecting personal information is primarily as follows:
    1. predominantly based on consent received from a data subject and on a legitimate business need to provide the data subject with the service requested;
    2. where Registration 24 is under legal obligation to collect personal information;
    3. in order to protect the legitimate interests of the data subject;
    4. where processing is necessary to carry out actions for the conclusion or performance of a contract to which the data subject is party;
    5. where processing is necessary for pursuing the legitimate interests of the responsible party or of a third party to whom the information is supplied.

PURPOSE FOR WHICH WE COLLECT PERSONAL INFORMATION

  1. Registration 24 is a responsible party and operator under POPIA.
  2. Registration 24 uses personal information in a number of different ways, including but not limited to:
    1. providing the services requested by the data subject;
    2. providing the data subject or the responsible party with customer support inquiries;
    3. to communicate with the data subject on changes to services, policies, terms and conditions or other important information.

DATA SUBJECT RIGHTS

  1. In accordance with POPIA, data subjects are provided with the following rights by DPO South Africa:
    1. Right  to be notified that personal information about him, her or it is being collected or his, her or its personal information has been accessed or acquired by an unauthorised person;
    2. Right to request access to his, her or its personal information and to establish whether a responsible party holds personal information of that data subject;
    3. Right to request the correction, destruction or deletion of his, her or its personal information;
    4. Right to object, on reasonable grounds relating to his, her or its particular situation to the processing of his, her or its personal information; as well as to object at any time to the processing of personal information for purposes of direct marketing;
    5. Right not to be subject  to a decision  based solely on the basis of the automated processing of his, her or its personal information intended to provide a profile of such person;
    6. Right to submit a complaint to the Regulator regarding the alleged interference with the protection of the personal information of any data subject or to submit a complaint to the Regulator in respect of a determination of an adjudicator; and
    7. Right to institute civil proceedings regarding the alleged interference with the protection of his, her or its personal information.

RETENTION OF PERSONAL AND OTHER DATA

  1. All data that is required to be retained for compliance, legal, archiving, client support or ongoing processing is retained for only as long as is absolutely required, where after it is erased and disposed of.

CONSENT

  1. By the Data Subject providing consent, and being advised about this privacy policy, he is giving Registration 24 permission to process personal data specifically for the purpose of the requested service.
  2. Consent is required by Registration 24 to proceed with the requested service and will be explicitly requested and given.

GENERAL INFORMATION

  1. Registration 24 has appointed a board approved Data Protection Officer (who acts in the same capacity as an Information Officer under POPIA) to ensure the enforcement and compliance with POPIA. Any requests, complaints or communications by staff, third parties, service provides, data subject, controllers, processors or the data security authority should be directed to the following email, namely admin@reg24.co.za.
  2. Registration 24 as a responsible party and operator, its staff, third parties and service providers are all subject to the Data Protection Policy and this Data Privacy Policy, under the control of the Data Protection Officer.
  3. Registration 24 will never sell, share or obtain personal information for any purpose whatsoever, unless it receives the data subject’s consent, and that the recipient is POPIA compliant and has the appropriate security facilities in place.