Privacy policy
PRIVACY POLICY NOTICE of THE RAMBAM TRUST
A trust registered in terms of the Trust Property Control Act, 57 of 1988, with Trust Number IT5367/95(T), hereinafter referred to as “the Trust”.
1. DEFINITIONS
The following definitions shall apply to this Notice –
- Data Subject shall mean the person to whom Personal Information relates.
- Personal information shall mean information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:
- information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
- information relating to the education or the medical, financial, criminal or employment history of the person;
- any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
- the biometric information of the person;
- the personal opinions, views or preferences of the person;
- correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
- the views or opinions of another individual about the person; and
- the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person
- POPIA shall mean means the Protection of Personal Information Act, 2013.
- Processing shall mean means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including:
- the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
- dissemination by means of transmission, distribution or making available in any other form; or merging, linking, as well as restriction, degradation, erasure or destruction of information,
and “Process”, when used as a verb, shall refer to any act of Processing
2. THE TRUST
- The Trust understands that your privacy is important. Therefore, your Personal Information is confidential and will only be used and recorded in accordance with the applicable data protection legislation, including but not limited to POPIA. We are committed to being transparent about how we collect and use data.
- This Notice explains how your Personal Information is Processed in connection with all services we provide.
3. TYPES OF PERSONAL INFORMATION AND PURPOSE OF PROCESSING
- The Trust may Process, amongst others, the following Personal Information:
- your name, identity number and/or passport number;
- your physical and postal addresses;
- your email addresses;
- your fixed line telephone and cell phone numbers;
- recent statements from of your banking account and/or credit card/s;
- a list of your assets and liabilities;
- your place of employment and contact details;
- The name and contact details of a relative and/or close friend;
- [The Personal Information can be collected in several ways. Generally, the Personal Information will be provided directly by you. From time to time, your Personal Information may be collected from third parties. Personal Information will only be collected from a third party with your consent or where permitted by law and subject to any conditions the law imposes.
- Your Personal Information will only be Processed for the following purposes, and any other for which your consent has been explicitly requested by the Trust or which is expressly authorised by law:
- To determine if you qualify for a loan in terms of the legal requirements of the Trust;
- To determine your creditworthiness and that of any suretyships provided as security for the loan;
- To determine the terms of the loan and particularly the repayment periods in view of the information submitted to the Trust.
4. TRANSFER OF PERSONAL INFORMATION OUTSIDE OF SOUTH AFRICA
- The Trust will not transfer any of your Personal Information to any third party outside South Africa unless:
- the recipient is subject to a law, binding corporate rules or binding agreement which:
- effectively upholds principles for reasonable Processing of that Personal information that are substantially similar to the conditions for the lawful Processing of Personal Information provided for in terms of POPIA; and
- includes provisions, that are substantially similar to the provisions of POPIA, relating to the further transfer of Personal Information from the recipient to third parties in a foreign
country;
- you have consented to the transfer;
- the transfer is necessary for the performance of a contract between you and the Trust and you, or for the implementation of pre-contractual measures taken at your request;
- the transfer is necessary for the conclusion or performance of a contract concluded in your interests between the Trust and a third party; or
- the transfer is for your benefit of the data subject, it is not reasonably practicable to obtain your consent to that transfer; and if it were reasonably practicable to obtain your consent, you would be likely to give it.
- the recipient is subject to a law, binding corporate rules or binding agreement which:
5. WITHDRAWAL OF CONSENT
You have the right to withdraw your consent to the Trust Processing your Personal Information, provided that the lawfulness of the Processing of the Personal Information before such withdrawal or the Processing of Personal Information will not be affected.
6. ACCESS TO STORED PERSONAL INFORMATION
- You have the right at any time to request the Trust to provide you with:
- the details of any of your Personal Information that the Trust holds, including any record relating to your Personal Information; and
- the details of the manner in which the Trust has Processed your Personal Information.
- Such request shall be made in writing by submitting the Request Form, which is available on request from the Information Officer of the Trust or may be accessed here. Please refer to our Policy Statement and Manual, which is accessible here [insert link to Policy Statement and Manual] for further information.
7. RIGHT TO REQUEST CORRECTION, DESTRUCTION, OR DELETION OF PERSONAL INFORMATION
- You may request the Trust to:
- correct or delete any of your Personal Information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained; or to
- destroy or to delete a record of your Personal Information that the Trust is no longer authorised to retain.
- This request can be made by submitting the Data Subject Action Request Form which, which form is available on of request from the Information Officer of the Trust.
- On receiving any of the requests as set out above, the Trust shall follow the process as set out in the Trust’s Data Subject Action Request Policy.
8. HOW THE COMPANY PROTECTS YOUR DATA
- The Trust has internal policies and controls in place to ensure that your Personal Information is not lost, accidentally destroyed, misused, disclosed, or accessed by anyone other than by its employees in the performance of their duties in relation to the supply of products or services to you.
- Access to the Trust’s systems is restricted to employees and internal restrictions are applied such that only certain employees are authorised to access your Personal Information, in terms of our Data Protection Policy.
- Where the Trust engages any other person to process Personal Information on its behalf, they do so on written instructions, are under a duty of confidentiality, and are obliged to implement appropriate technical and organizational measures to ensure data security.
9. RETENTION OF PERSONAL INFORMATION
In accordance with our Data Protection Policy, we will retain Personal Information only for as long as is necessary for its intended purpose, unless there is a legal obligation or a lawful reason to retain that Personal Information.
10. GOVERNING LAW
This Notice is subject, and will be interpreted according, to the laws of the Republic of South Africa.
11. REQUESTS AND NOTICES
All requests, notices or other communications that you may direct to the Trust in terms of this Notice must addressed to the Information Officer, at rambam@mweb.co.za