BKB GROUP
PROTECTION OF PERSONAL INFORMATION POLICY
Preamble
The BKB Group Protection of Personal Information Policy (also referred to as the “Privacy Policy”) is formulated in terms of and in accordance with the Protection of Personal Information Act 3 of 2014 (“POPIA”) and Financial Intelligence Centre Act 38 of 2001(“FICA”). This policy sets out the BKB Group’s protocols for Processing of Personal Information, promotes the awareness of the rights of individuals and juristic persons whose Personal Information is processed in the course of its business, as well as encourages adherence to the compliance obligations place on the BKB Group as an accountable institution.
A. DEFINITIONS
- “Accountable institution” means a person referred to in Schedule 1 of the FICA, and as defined in terms of Section 1 of FICA.
- “BKB Group” means BKB Limited, a public company duly incorporated in terms of the company laws of the Republic of South Africa, with registration number 1998/012435/06 and with registered office situated at 61 Grahamstown Road, North End, Port Elizabeth, including all of its business units and subsidiaries as listed in Schedule 1 hereto.
- “Data Subject” means the Person whose Personal Information is Processed.
- “Information Officers” means those BKB officials (listed in schedule 2 hereto) appointed and registered as Information Officers with the regulator and who is responsible for encouraging
compliance by the BKB Group with the lawful Processing of Personal Information.
- “Law” means any law of general application and includes the common law and any statute, constitution, decree, treaty, regulation, directive, ordinance, by-law, order or any other enactment of legislative measure of government (including local and provincial government) statutory or regulatory body which has the force of law;
- “Personal Information” means information relating to an identifiable Person as defined in section 1 of POPIA.
- “Process, Processing or Processed” means, without limitation, the collection, use, storage, variation, merging, linking, dissemination and destruction of Personal Information and “Further Processing” shall bear a similar meaning, but will only occur after the initial Processing of Personal Information.
- “Person” means a natural or juristic person.
- “Special Personal Information” means Personal Information as referred to in Section 26 of POPIA.
- When referring to a “Duly Authorised Representative”, “Agent” or “Proxy” in this policy document, such authorisation shall be in writing and, where applicable, comply with the requirements of Chapter 1 of the Financial Intelligence Centre Act 38 of 2001 or the Consumer Protection Act 68 of 2008 and accompanying regulations or any other applicable Law as the case may be.
B. INTRODUCTION
- The BKB Group is committed to serve its clients, employees and all other stakeholders to the best of its abilities and, in doing so, to protect their Personal Information. This policy aims to achieve that purpose and to ensure lawful Processing of Personal Information.
- This Privacy Policy is applicable to any Person who deals, transacts with or is within the employ of the BKB Group. To give further effect thereto, this Privacy Policy is incorporated by reference in any agreement, dealing or transaction between the Data Subject and the BKB Group in respect whereof Personal Information is provided to or collected or otherwise Processed by the BKB Group.
- It is important for the Data Subject to familiarise him-/ her-/itself with the contents hereof to be adequately informed about why and how their Personal Information is Processed and their rights and entitlements under POPIA.
- The BKB Group has duly appointed Information Officers as prescribed by POPIA. The contact details of the Information Officers are set out in schedule 2 hereto.
C. CONSENT FOR THE PROCESSING OF PERSONAL INFORMATION
- The BKB Group will not Process Personal Information without the consent of the Data Subject, either personally or on his/her/its behalf by a Duly Authorised Representative or Proxy, save where the Processing of such Personal Information is required by Law.
- The supply of Personal Information is voluntary, unless the supply of such information is required by Law.
- The BKB Group requires specific Personal Information to be provided by the Data Subject in order to inter alia carry out its business functions, serve the interests of its clients, provide its services, sell its products and perform in terms of contracts.
- The BKB Group acknowledges a Data Subject’s right to object to the Processing of Personal Information.
- Whilst the BKB Group acknowledges a Data Subject’s right to object to the Processing of Personal Information, the BKB Group reserves the right to withdraw or refuse its services or products where a Data Subject unreasonably refuses to consent to the Processing of Personal Information.
D. SOURCING OF PERSONAL INFORMATION
The BKB Group collects Personal Information directly from Data Subjects, save where:
- Personal Information is supplied by a Duly Authorised Proxy or mandated Agent of the Data Subject;
- the Data Subject has consented to Personal Information being collected by third parties;
- the collection thereof from third parties is required by Law or forms part of a public record.
E. CLASSIFICATION OF PERSONAL INFORMATION PROCESSED
- The following Personal Information is Processed by the BKB Group:
- Information identifying individuals or juristic entities, including but not limited to: names and surnames, identification or registration numbers, tax number, VAT number, passport number, sex, age, marital status, employment information, residential information or business address, nationality, citizenship, home language, preferred communication language or such other Personal Information as may be required to enter into a business relationship with the Data Subject.
- Financial information, including, but not limited to the Data Subject’s financial institution, bank account number, branch code, salary/income, credit score or such other financial information necessary to give effect to a transaction.
- Contact information, including, but not limited to physical addresses, electronic mail addresses, fax numbers, telephone numbers, cellphone numbers, postal addresses or such other contact information necessary to maintain the business relationship between the BKB Group and the Data Subject.
- The BKB Group will not Process any Special Personal Information as defined by POPIA without the consent of the Data Subject, unless required by Law or otherwise justified in terms of POPIA.
F. PURPOSE OF PROCESSING OF PERSONAL INFORMATION
- The BKB Group processes Personal Information for the following purposes, depending on the nature of the dealings with the Data Subject:
- applications for credit facilities / advances;
- applications for employment;
- applications from goods and service providers;
- assessing B-BBEE status;
- auction registration and mandates;
- conclusion of contracts;
- creation and maintenance of customer databases;
- direct and indirect marketing;
- human resource purposes;
- legal compliance with statutory laws and regulations;
- maintenance of companies’ security registers;
- conclusion of security documents (bonds, suretyships, cessions etc.);
- sponsorships;
- retail; or
- for any matter necessary or incidental to the effective performance of the BKB Group to give effect to the above matters.
G. SHARING OF PERSONAL INFORMATION WITH THIRD PARTIES
- The BKB Group will not share the Personal Information of a Data Subject unless this has been consented to by the Data Subject, save where the sharing of Personal Information is required by Law.
- The BKB Group shall take reasonable measures to ensure the confidentiality of Personal Information shared with third parties and to ensure that third parties are lawfully Processing Personal Information as prescribed by POPIA.
- Notwithstanding clause G2 above and whilst the BKB Group endeavours to take reasonable steps as contemplated above, it cannot warrant lawful Processing of Personal Information by third parties with whom the Data Subject’s Personal Information has been shared.
- The Data Subject’s Personal Information shall be Processed within the BKB Group by trained employees within the course and scope of their employment within the BKB Group.
H. WHO RECEIVES PERSONAL INFORMATION
- The BKB Group shares or otherwise Processes Personal Information of Data Subjects with various third parties in conducting its business operations. The BKB Group shares or otherwise Processes Personal Information with:
- service providers;
- suppliers;
- employees within the scope and course of their employment;
- regulatory authorities or administrative bodies established by Law;
- industry bodies or associations where necessary;
- its auditors;
- parties to multilateral contracts of which the Data Subject is a party;
- foreign regulatory bodies in the case of cross border transactions; and
- Companies within the BKB Group as listed in Schedule 1.
- In the event of data sharing or Processing in terms of clause H.1.9 above, this will typically occur where the Data Subject has dealings with more than one entity within the BKB Group. For example, a Data Subject may apply for a credit facility with BKB Agrifin and purchase livestock through BKB Livestock or deliver grain to Grainco. In order to facilitate these transactions it is typical that Personal Information will be shared.
- Personal Information is shared within the BKB Group.
I. TRANSBORDER TRANSFER OF PERSONAL INFORMATION
- The BKB Group may from time- to- time transfer or cause the transfer of Personal Information of a Data Subject across national borders during the scope and course of its business and operations.
- The BKB Group shall endeavour to transfer Personal Information across national borders only if the recipient third party in a receiving country is subject to laws or otherwise legally binding rules or agreements affording adequate protection measures for reasonable Processing of Personal Information of a similar nature to the conditions for lawful Processing contained in POPIA.
- The BKB Group shall, where reasonably practicable, obtain the Data Subject’s consent prior to transferring Personal Information across national borders.
J. VARIATION, UPDATING AND RECORD KEEPING OF PERSONAL INFORMATION
- The BKB Group stores Personal Information collected from Data Subjects either in hard copy or electronic format.
- Personal Information may be stored up to a period of 10 (ten) years, save in instances where longer storage thereof is required by Law or the Data Subject has an active account with the BKB Group or otherwise consented thereto.
- Certain financial and transactional information which contains Personal Information of Data Subjects is stored for a period of time specified by Law.
- Whilst the BKB Group takes measures to verify the Personal Information of Data Subjects, it is the shared responsibility of the Data Subject to bring any change in Personal Information or error in respect of Personal Information provided to the attention of the BKB Group. This can be done by contacting the relevant Personal Information Officer.
K. PERSONAL INFORMATION SECURITY
- Whereas the BKB Group processes Personal Information in both hard copy and electronic/digital formats, it is committed to have adequate security measures in place for the prevention of any compromise to Personal Information of Data Subjects under its control.
- Where Personal Information is Processed in hard copy format, the BKB Group, insofar as may be reasonably practicable, stores the Personal Information in secured office space or buildings with one, more or all of the following security features, including but not limited to:
- locked buildings/office spaces with other security features;
- locked filing cabinets;
- SABS Type Approved Safes.
- Where Personal Information is Processed in electronic format, the BKB Group obtains, uses, maintains and actively seeks to improve cyber security measures that protects the integrity of data containing Personal Information and prevents unauthorised access thereto, including the following:
- employment and contracting of information technology specialists;
- specialised software aimed at the prevention of hacking, viruses, other forms of malware and cyber threats;
- encryption of programs and data containing Personal Information.
- Whilst the BKB Group takes reasonable steps to ensure the security and integrity of Personal Information, the systems in place are not immune to being compromised. In the event of Personal Information being compromised, the BKB Group undertakes to notify the Data Subject and Information Regulator of such breach in accordance with POPIA.
L. RIGHT OF ACCESS
- The Data Subject has the right to enquire whether the BKB Group holds any of his/her/its Personal Information and may access Personal Information held by the BKB Group.
- The Data Subject may exercise his/her/its right of access by following the procedure set out in Part V of the BKB Groups Promotion of Access to Information Manual which can be found at www.bkb.co.za.
M. WEBSITE USE
- The BKB Group Protection of Personal Information Policy is applicable to all visitors and users of its website(s).
- In addition to the Personal Information Processed in clause E above, the BKB Group Processes certain technical information of visitors and users of its website(s) and/or their devices based on the Data Subject’s interactions with such website(s). This includes, but is not limited to internet protocol (IP) addresses, device information, time zone settings, location and browser information.
- By visiting and/or otherwise making use of the BKB Group’s website(s), you consent to the aforesaid technical and other Personal Information from interactions with its website(s) being Processed.
- The BKB Group makes use of cookies which allows the Data Subject to be identified upon re-visiting its website(s) and record their preferences in interacting with its website(s). Cookies can be disallowed by the Data Subject by disabling the necessary settings within the Data Subject’s browser
N. DIRECT MARKETING
- Where the Data Subject has consented thereto, the BKB Group Processes Personal Information for the purposes of direct marketing.
- The Data Subject may refuse direct marketing, withdraw consent or opt out of receiving direct marketing communication by contacting the relevant Information Officer (via email or telephonically) listed in Schedule 2 hereto.
- Direct marketing as it appears above only relates to electronic direct marketing.
O. COMPLAINTS AND DISPUTE RESOLUTION
- The BKB Group takes the interests of its clients and employees seriously and respects their data privacy. Should the Data Subject have any concerns, issues or complaints in respect of the Processing of Personal Information, the relevant Information Officer or the Information Regulator can be contacted.
- The contact details of the Information Officers are set out in Schedule 2.
- The contact details of the Information Regulator are as follows:
Physical Address:
JD House
27 Stiemens Street
Braamfontein
Johannesburg
2001
Postal Address:
P.O Box 31533
Braamfontein
Johannesburg
2017
Telephone number: 010 023 5200
E-mail (General Enquiries): enquiries@inforegulator.org.za
P. GENERAL
- This Protection of Personal Information Policy is effective immediately.
- The BKB Group reserves the right to amend its privacy policy at any time.
SCHEDULE 1: BUSINESS UNITS & SUBSIDIARIES
A - BKB LIMITED – INTERNAL BUSINESS UNITS
- Agrifin
- Corporate Services
- Credit Control
- Finance and administration
- Human Resources
- Information, Technology and Communications
- Livestock and Auctioneering
- Property, Sales and Leasing
- Public Relations and Marketing
- Retail
- Wool and Mohair
B - BKB LIMITED - SUBSIDIARY COMPANIES
- Pakhouse Brands (Pty) Ltd
- Grainco (Pty) Ltd
- Atlanta Products (Pty)Ltd
- Home & Hectare (Pty) Ltd
- Lihoai Consultancy (Pty) Ltd
- The House of Fibre (Pty)Ltd
- BKB Distribution Centre (Pty) Ltd
- Farmervet (Pty) Ltd
SCHEDULE 2: INFORMATION OFFICERS
The contact information of the Information Officers who should be contacted before contacting the Chief Information Officer are set out herein below:
The Chief Information Officer is:
Johannette Oosthuizen
Tel: 041 503 3060
Email: jo.oosthuizen@bkb.co.za
BKB LIMITED – INTERNAL BUSINESS UNITS
Business Unit
|
Information Officer
|
Contact Information
|
Agrifin / Credit Control
|
Henk Bosch
|
Tel: 041 503 3341Email: henk.bosch@bkb.co.za
|
Corporate Services
|
Johannette Oosthuizen
|
Tel: 041 503 3060Email: jo.oosthuizen@bkb.co.za
|
Finance and Administration
|
Jacques van Rooyen
|
Tel: 041 503 3303Email: jacques.vanrooyen@bkb.co.za
|
Human Resources
|
Pholisa Monki
|
Tel: 041 503 3026Email: pholisa.monki@bkb.co.za
|
Information, Communication and Technology
|
Irene Grassow
|
Tel: 041 503 3201Email: irene.grassow@bkb.co.za
|
Livestock and Auctioneering
Property, Sales and Leasing
|
|
|
Public Relations and Marketing
|
Jacobus Le Roux
|
Tel: 041 503 3003Email: jacobus.leroux@bkb.co.za
|
Retail
|
Ernest Deyzel
|
Tel: 041 503 3320Email: ernest.deyzel@bkb.co.za
|
Wool and Mohair
|
Wicus Botha
|
Tel: 041 503 3167Email: wicus.botha@bkb.co.za
|
BKB LIMITED – SUBSIDIARY COMPANIES
Company
|
Information Officer
|
Contact Information
|
Grainco (Pty) Ltd
Atlanta Products (Pty) Ltd
|
Adriaan Bezuidenhout
|
Tel: 021 807 8933
Email: adriaan.bezuidenhout@grainco.co.za
|
Home & Hectare (Pty) Ltd
|
|
|
Lihoai Consultancy (Pty) Ltd
The House of Fibre (Pty) Ltd
|
Wicus Botha
|
Tel: 041 503 3167
Email: wicus.botha@bkb.co.za
|
BKB Retail & Fuels
Farmervet
BKBK Distribution Centre
|
Ernest Deyzel
|
Tel: 041 503 3335
Email:ernest.deyzel@bkb.co.za
|