Who are we?

Gondwana Plus (Pty) Ltd (“Sebenza” or “we”) are a “Responsible Party”, or an “Operator”, depending on the circumstances, in terms of the Protection of Personal Information Act 4 of 2013 (“POPIA”) with respect to your Personal Information. As such, we want to take certain steps to make sure that you are fully aware of exactly who we are, the types of Personal Information we process, how we process it, who we may need to share it with, as well as what your rights are in relation to our processing of your Personal Information in terms of POPIA.

As will become clear to you in this notice, we process all personal information in order to enable us to do business with you and to provide products and services to you as requested. In this notice, “you” means you as an individual or in your representative capacity of a juristic person with whom we are dealing and whose Personal Information we may need to collect and process in order to provide the requested products and/or services.

What Personal Information do we collect and process?

When you engage with us, or we engage with you, you may need to provide us with the following Personal Information, including but not limited to:

• Your first and last name;
• Your identity number;
• Your entity name;
• Your entity registration number;
• Director / member particulars;
• Phone / mobile number;
• Your banking details and other financial information pertaining to you or the entity that you represent;
• VAT registration number;
• Trade references and their personal information;
• Physical address;
• E-mail address or other contact details;
• Statutory information.

Please note that we collect and record all internet communications, correspondence, and details of your dealings with us, regardless of the medium of communication, as well as any engagement you have with our platform (Sebenza.taxi) or our website (Sebenza.tech). In addition, we collect and generate information in relation to your profile as a user and client of ours.

Unless we are specifically required to do so, in which case we will inform you and obtain your consent, we do not collect any special personal information as defined in section 26 of POPIA, including your religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sexual orientation or biometric information.

What do we do with your Personal Information, and why do we collect it?

We take the privacy of our data subjects (clients, employees, suppliers, users, etc.) very seriously. We only collect and process personal information for specific purposes that are connected to our legitimate business interests and clients, which we generally need to comply with our obligations towards you and also to comply with obligations imposed upon us in terms of applicable laws regulating our activities.

The Personal Information you provide to Sebenza in your dealings with us is primarily processed for the purposes of enabling us to comply with our contractual and lawful obligations. However, we do want to highlight a few specific instances which are also connected to our legitimate business purposes:

• To provide or manage any information, products and/or services requested by you pursuant to your dealings with us.
• To evaluate whether or not to offer, extend or modify any offering or services requested by, or provided to, you.
• Using, processing, sharing/transferring or engaging in analytics of your Personal Information for legitimate business purposes and for new and existing business or product development.
• To establish your needs, requirements and preferences in relation to the products and/or services provided by us and/or our clients from time to time.
• To allocate unique identifiers to you for the purpose of processing your Personal Information, securely storing, retaining, and recalling your Personal Information from time to time, regardless of whether you conclude an agreement with us or not.
• For general administration purposes pertaining to our administration of the Sebenza platform and the clients and campaigns on it.
• To improve the quality of our products and services.
• To analyse your Personal Information collected for research and statistical purposes.
• To transfer your Personal Information across the borders of South Africa to other jurisdictions, should it be required in the legitimate pursuit of Sebenza’s business requirements.
• To identify products and services offered by our clients that may be of interest to you, and to inform you about such products and/or services.
• To investigate and attempt to resolve any queries, complaints or requests you may have from time to time.
• To verify that the personal information provided is true and accurate.

• To, unless you expressly “opt out”, process your Personal Information as defined above for the purposes of marketing and advertising to you of products and/or services provided by us or any of our clients on the Sebenza platform.
• To, for the purposes of enhancing the scope of products and services we can offer to you or the method of delivery of same, share or transfer all or any part of your Personal Information to a third party who is a potential business partner or actual provider/supplier of outsourced services to us.
• To, at any time procure or share information relating to your creditworthiness and risk profile from or with any registered credit bureau or credit provider’s industry association or industry body, which includes information pertaining to your credit history, financial history, judgements, default history and sharing information for purposes of risk analysis, tracing and related purposes.

Who do we share your Personal Information with?

For us to maintain the high standards of product and service delivery you have come to appreciate, we are required to share your personal information with some of our affiliates (i.e., group companies), suppliers, service providers and business partners (“approved third parties”). We use service providers, clients, and suppliers whom we trust, with whom we have agreements. They are required to keep your personal information secure and confidential, and to use it only for the purposes we have agreed to, provided we are comfortable that they are securing your personal information.  If you are interested in who these approved third parties are, you can ask us and direct your enquiry to our Information Officer at Wesley.dorning@sebenza.co.za.

Where do we store your Personal Information, and how long do we store it for?

First, you should know that we only store your Personal Information for as long as we need to in order to fulfil a purpose for which we initially collected it, which may include either complying with our obligations towards you as a user or client, or to comply with applicable laws that require us to do so. All your personal information is stored securely by Sebenza through the use of its servers, some of which may be cloud-based. In storing your Personal Information, we may transmit or transfer Personal Information outside South Africa to a foreign country; as such, Personal Information may be stored on servers located outside of South Africa in foreign countries that have different data protection laws in place. We are comfortable that these foreign countries protect Personal Information to an extent that compares to the way in which we do, which is acceptable to us.

What are your Rights?

It is important that you know that you have certain rights in terms of POPIA, and we want you to know exactly what they are and how they relate to us. As a data subject in relation to Sebenza, you have the following rights:

• You have the right to always be informed
  We will always do our best to make sure that you know what personal information is being collected, how it is being collected, how it is being used, how long it will be kept and whether it will be shared with third parties. We endeavour to be transparent about how we process your personal information. You are also always welcome to ask us, and we will tell you.

• You have the right to access your personal information
  You can ask us at any time for a copy of the personal information we hold about you, and we will provide you with access to it in the most effective way possible.

• You have the right to correct your personal information
  You can ask us to update your personal information or delete any information that is no longer accurate, as we want to ensure your information is accurate and complete.

• You have the right to object to our processing of your personal information
  We don’t want to process your information if you don’t want us to, but please bear in mind that it may affect our ability to fulfil our obligations towards you.

• You have the right to lodge a complaint
  If you feel that we are not processing your personal information lawfully, we encourage you, and would always appreciate it if you spoke with us first and laid a complaint to our Information Officer. However, you can also lodge a complaint with the Information Regulator if you feel that we are not complying with POPIA. The Information Regulator’s contact details are reflected below:
  
  

The contact details of the Information Regulator are:

The Information Regulator (South Africa)

Website: https://inforegulator.org.za/

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

PO Box 31533

Braamfontein, Johannesburg, 2107

With that said, we have (and continue to) implement reasonable security measures and protocols to protect the personal information we hold. These measures are to protect any personal information we hold from being disclosed without authorisation, from loss, damage, destruction or unauthorised access. As you will appreciate, nothing is 100% secure in this day and age. Therefore, we ask that if you suspect that either you or we have had an information security breach, please notify us immediately so that we can take action.

Should you have any questions regarding this privacy notice and Sebenza’s POPIA compliance efforts, please direct them to our Information Officer at the following email address: Wesley.dorning@sebenza.taxi.