AGSA PRIVACY NOTICE

Privacy notice for purposes of section 5 (a) (i) and section 18 (1) of the Protection of Personal Information Act of 2013

This notice is about the nature, purpose, processing and sharing of any personal information collected via the Auditor-General South Africa (AGSA) website and manually at the AGSA offices. This privacy notice explains AGSA’s information practices when a person provides personal information to AGSA, whether collected online or offline, or when a person accesses AGSA’s website. Personal information may include any identifying number, symbol, email address, physical address, telephone number, location information, online identifier or other particular assignment to the person. AGSA does not require you to register or provide personal information to visit its website. The physical address of the AGSA is:

 4 Daventry Street,

Lynnwood Bridge Office Park

Lynnwood Manor

Pretoria, SA

Personal information

As a general rule, the AGSA may request you to submit or capture certain information including personal information to provide you with the service you desire. And making available of personal information by you is voluntary. If you choose to provide us with personal information on the AGSA website, through such methods as completing a web form or sending us an email, we will use that information to help us provide you with the information or service you have requested or to respond to your message. The information we may receive from you varies based on what you do when visiting our site. By doing so, you are giving the AGSA your consent to use the information for the stated purpose. Any person or competent person may withdraw his, her or its consent, at any time in terms of section 11 (2) (b) of the Popia, provided that the lawfulness of the processing of personal information before such withdrawal or the processing of personal information will not be affected. However, not providing certain information may result in the AGSA’s inability to provide you with the service you desire. The AGSA does not share or transfer the information to a third country or international organisation.

Generally, the information requested by the AGSA will be used to respond to your inquiry or to provide you with the service you request. When you visit the AGSA website, certain anonymous information about your visit may be automatically captured. This information includes the name of the internet service provider and the Internet Protocol (IP) address through which you access the Internet; the date and time you access the site; pages that you access while at the site and the internet address of the website from which you linked directly to our site. None of this information is personally identifiable. This anonymous information is used to help improve the site, analyse trends, and administer the site, and is discarded when this process is completed.

Objection to processing of personal information

A person may object in writing on a form that corresponds substantially with form 1 (Annexure A: OBJECTION TO THE PROCESSING OF PERSONAL INFORMATION) to the processing of personal information as contemplated in section 11(3) (a) of the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“PoPIA”), and submit your objection to the AGSA.

Request for correction or deletion of personal information

AGSA may in terms of section 24(1) (a) of PoPIA be required to correct or delete personal information that is in the possession or under the control of the AGSA, or be required to destroy or delete a record of personal information that AGSA is no longer authorised to retain, as contemplated in section 24(1)(b) of PoPIA, by completing form 2 (Annexure B: REQUEST FOR CORRECTION OR DELETION OF PERSONAL INFORMATION).

Complaint regarding interference with the protection of personal information

Personal information provided on the AGSA website will be used only for its intended purpose. AGSA will protect information collected strictly in accordance with the provisions of PoPIA and other relevant information security best practice. A complaint regarding interference with the protection of personal information as contemplated in section 74(1) of PoPIA must be submitted to the Information Regulator in writing on a form that corresponds substantially with part I of form 5 (Annexure C: COMPLAINT REGARDING INTERFERENCE WITH THE PROTECTION OF PERSONAL INFORMATION) at ...................

Furthermore, a complaint regarding a determination made by an adjudicator contemplated in section 74(2) of PoPIA must be submitted to the Information Regulator in writing on a form that corresponds substantially with part II of form 5 (Annexure C: COMPLAINT REGARDING INTERFERENCE WITH THE PROTECTION OF PERSONAL INFORMATION) at ................................

Should you feel that your personal information has been violated, complete the prescribed form and send it to POPIAComplaints@inforegulator.org.za