MC DESIGN AND CONTRACTING (PTY) LTD

PROTECTION OF PERSONAL INFORMATION ACT, 4 OF 2013 (“POPIA” / “POPI ACT”)

INTRODUCTION

1. MC Design and Contracting is committed to protecting the privacy of its clients, suppliers, affiliates and associates and to ensure that your personal information is collected and processed in a lawful and transparent manner.
2. The purpose of this policy is to explain how MC Design and Contracting obtain, use and disclose your personal information in accordance with the legislative requirements.

DEFINITIONS

1. The Definitions as set out in Section 1 of POPIA shall be applicable as if specifically incorporated herein

COLLECTION AND PROCESSING OF INFORMATION

The collection and processing of personal information is for the purposes of:

1. Complying with legislative duties, responsibilities and obligations imposed by various laws in the Republic of South Africa applicable to the business and trade of MC Design and Contracting. These laws include, but are not limited to, the Income Tax Act, 58 of 1968, Value Added Tax Act, 89 of 1991; National Credit Act 34 of 2005; Companies Act, 71 of 2008 etc;
2. Conducting internal credit and criminal checks (where applicable)
3. To conduct stakeholder satisfaction research or statistical analysis.
4. Maintaining and updating our supplier and client database;
5. Auditing and record keeping;
6. Executing and performing our services in terms of any service level agreements and/or performance of a contract to which the data subject is a party;
7. To protect the interests of our clients and suppliers;
8. To ensure the proper performance of a public law duty by a public body;
9. Collecting the personal information is necessary for pursuing the legitimate interests of MC Design and Contracting or that of a third party to whom the information is supplied; and
10. For legal purposes.

DISCLOSURE OF INFORMATION

1. MC Design & Contracting may disclose personal information from a data subject to our service providers who are involved in the delivery of our products and services to you. Please note that this policy is applicable to all our suppliers, service providers, associates and affiliates and they are subjected hereto.
2. We may further disclose your personal information where we:

• Have a legal duty to do so in terms of the Laws of the Republic and/or in terms of industry codes; and
• Believe that it is necessary to protect our rights.
• Have to fulfil client requirements

INFORMATION SECURITY

1. MC Design & Contracting is legally obliged to provide adequate protection of personal information and to prevent unauthorised access and use of personal information. MC Design & Contracting is committed to, on an ongoing basis, review its security controls and systems to ensure that your personal information is secured.
2. To date, our security measures include:

• Physical security monitoring on our premises;
• Armed response and CCTV Monitoring;
• Computer and Network Security;
• Restricted access to personal information and confidentiality policies and agreements;
• Monitoring access and usage of private information;
• Investigating and reacting to security incidents / breaches.

RIGHTS TO ACCESS YOUR INFORMATION AND CORRECTION OF YOUR INFORMATION

1. You have the right to request a copy or details of the personal information we hold about you. In this regard, you are referred to our manual in terms of the Promotion of Access to Information Act, 2 of 2000 (PAIA) as amended, which manual can be downloaded at www.mcdesign.co.za. Our manual sets out the procedures for requesting access to records and the applicable fee(s) payable.
2. You furthermore have the right to request MC Design and Contracting to update, correct or delete your personal information.
3. Please note that MC Design and Contracting reserves the right to request proof of your identification and or authority before any record is provided and our information is updated, corrected and or deleted.

RETENTION PERIODS

MC Design do not retain records of personal information any longer than is necessary for achieving the purposes for which the information was collected or subsequently processed. A archive retention period document is maintained (MAN 25) and personal records are destroyed within the required time frames, in a manner which prevents its reconstruction.

CONTACT

Should you have any queries pertaining to this policy, your are welcome to contact the following persons:

• Ettiene Steyn (CEO and Information Officer)
  TEL: (041) 451- 3249
  FAX: (041) 451 – 3347
• Pamela van Wyk (SHEQ Manager and Deputy Information Office)
  TEL: (041) 450 – 2817
  EMAIL: pamela.vanwyk@mcdesign.co.za
  FAX: (041) 451 – 3347