Who we are
The Rural Development SA Trust (RDTSA) is a registered NPO serving as the fundraising and implementation arm for InvestRural®, a rural development initiative backed by the National House of Traditional Leaders.
All enquiries should be forwarded to:
Stevie Snyman
stevie@rdtsa.co.za
+27 63 283 0475
THE PROTECTION OF PERSONAL INFORMATION ACT (POPIA) USER PRIVACY PROTOCOLS POLICY
- Preamble
The purpose of this policy is to advise the user (data subject) of the Rural Development Trust (The Trust) platform on why data is collected and processed, what data is in focus as well as how it is processed. The Trust is committed to full compliance with the POPI Act insofar as the utilisation and disclosure of data subject to personal information (PI) is concerned. Hence, technical and operational measures have been put in place to protect data subject privacy and the Trust invites all data subjects and/or requesters to engage with the Information Officers in respect to any matter related hereto.
- Scope of Application
This policy applies to data subjects under the POPI Act and its principles extend to the Promotion of Access to Information Act (PAIA) in respect of requesters of records held by the Trust. PI applies to both natural and juristic persons. Data subjects and requesters are invited to engage with the Information Officers about any matter about the POPIA and PAIA, including but not limited to updating PI, deletion of PI, and complaints in respect of how PI is being processed and updating consent for electronic direct marketing. The email address provided on the Trust’s platform facilitates these types of engagement.
- Definition of Personal Information (PI)
‘‘Personal information’’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to—
(a) information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
(b) information relating to the education or the medical, financial, criminal or employment history of the person;
(c) any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
(d) the biometric information of the person; (e) the personal opinions, views or preferences of the person;
(f) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
(g) the views or opinions of another individual about the person; and
(h) the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person;
- Purpose of Collecting and Processing PI
The Trust processes PI for various purposes including for –
- Engaging in various forms of direct marketing;
- Facilitating transactions with data subjects;
- Collecting data for statistical purposes to improve its services;
- Fulfilling its contractual obligations to its members and donors;
- Complying with the provisions of statute and regulations;
- Attending to the legitimate interests of data subjects;
- Identifying prospects for enhanced service delivery and funding sustainability;
- Tracking data subject activity on the Trust’s platform and its links as well as their transactions with the Trust;
- Providing data subject information to the Trust rural shop partners to use the information to market their services to data subjects who have consented as envisaged in the POPI Act. The Trust’s rural shop partners who are recipients of PI are business organisations who are permitted to use the information only for lawful sales, marketing, and engagement;
- Confirm and verify data subject identity or verify that they are authorised users for security purposes;
- Conducting research;
- Audit and record-keeping purposes; and
- In connection with legal proceedings.
- Lawful Basis
In respect of the processing of PI, as stated above, the Trust will adhere to the conditions for the lawful processing of PI, based on its desire to provide data subjects services in their best interests as well as a legitimate interest of the Trust’s to achieve its organisational objectives.
- Data Subject Rights
Data subjects have the right to request that the Trust provide them with access to their PI, rectify or correct their PI, erase PI or restrict the processing of PI, including refraining from sharing it or otherwise providing it to any third parties. Data subjects also have the right to raise complaints with the Trust. The afore-going rights may be subject to certain limitations under applicable law. To access any of these rights, data subjects may engage our Information Officers.
- Categories of Personal Information (PI) Collected and Processed
The Trust collects information about data subjects who may be the clients of the rural shop, project partners and donors. It also collects the information of its employees and suppliers as well as third parties that are part of its scope of operation.
With respect to the clients of the rural shop, project partners and donors some or all of the following categories of personal information on data subjects, historical or current will be collected-
- Name and surname
- Identity Number
- Gender
- Contact details (email, mobile)
- Birth date
- Organisation and/or Community name (where applicable)
The Trust’s platform may collect information using “cookies” which allows the Trust to collect standard internet visitor usage information.
- Disclosure of Information
The Trust may disclose data subject’s PI to its rural shop partners who are involved in the delivery of products or services. The Trust has agreements in place to ensure that it complies with the privacy requirements as required by the POPI Act.
The Trust may also disclose data subject PI:
- Where it has a duty or a right to disclose in terms of law and/ or industry codes;
- Where it believes it is necessary to protect its rights.
- Information Security
The Trust is legally obliged to provide adequate systems, and technical and operational protection for the PI that it holds and to prevent unauthorized access to as well as prohibited use of PI. The Trust will therefore regularly review its security controls and related processes to ensure that the PI of data subjects remains secure.
PI is treated as confidential and not disclosed unless required by law. High-level Information Technology controls and anti-virus programmes, as well as access controls and passwords are in place. Assessment of data quality controls are in place to ensure the accuracy and completeness of personal information.
A third-party service provider is mandated to ensure the safeguarding of registered person personal information. Personal information is stored at a third-party service provider who is subject to POPIA provision in the Service Level Agreement. The Trust’s internal server hard drives are protected by firewalls and hardcopy files are archived at a secured place. Employees and rural shop partners sign confidentially agreements which are part of the contractual agreement.
- Information Officers are:
(a). Stevie Snyman
063 283 0475
(b). Okuhle Mavikela