Data Privacy
Who are we?
7SecondSolar (Pty) Ltd is a software development company, registered in South Africa (hereafter “7SecondSolar”).
From time to time, we process personal information of our employees, clients, consultants, and/or vendors (business contacts) to enable us to do business with them or provide services to them. In this notice, “you” means you as the individual we are engaging with and whose personal information we may need to collect and process to provide the requested services, or to indicate the company you represent. We may need to collect and process your personal information for the purposes described below.
What personal information is collected?
7SecondSolar may collect and processes a wide range of personal information as part of its business operations. In accordance with Section 18 of POPIA we hereby expressly inform you that when you engage with 7SecondSolar (hereafter “7SecondSolar Engagement”), you may need to provide 7SecondSolar with the following, but not limited to, personal information:
- Full names
- Identity numbers
- Registration numbers
- Financial information, including bank account information
- Statutory information
- Physical and postal address particulars
- Telephone numbers
- Email addresses
- Unique identifiers
The above personal information will, depending on the circumstances and purposes for which it is processed pursuant to the relevant 7SecondSolar Engagement, be:
- Personal information that you agree to share with us on request, subject to the agreed terms and conditions, or an underlying agreement
- Personal information that we as the responsible party require to enable legal and regulatory compliance
- Personal information required for the performance of professional services in terms of a contract to which you are a party
- Personal information that is necessary and required to protect your legitimate interests or the legitimate interests of another person
- Personal information that is necessary and required to pursue the legitimate interests of 7SecondSolar or a third party
We may collect and record all telephone calls, internet communication (including IP addresses), all correspondence we have with you irrespective of the medium of communication, details of your 7SecondSolar Engagement, and any visits to our website, mobile application and client portals. In addition, we collect and generate information in relation to your profile as a client or vendor of 7SecondSolar.
We do not collect any special personal information as defined in Section 26 of POPIA, including your religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion (except as is required for identifying a politically exposed person (PEPs) under the Financial Intelligence Centre Act, 2001), health or sexual orientation, or biometric information.
How is your personal information collected?
7SecondSolar may make use of both “active processing” and “inactive processing” methods to collect personal information. When 7SecondSolar makes use of “active processing” to collect your personal information, it has directly been provided with your personal information pursuant to an enquiry in respect of our services, or when you provide personal information to 7SecondSolar pursuant to a specific 7SecondSolar Engagement.
In instances where 7SecondSolar makes use of “inactive processing”, this means that 7SecondSolar has not actively been provided with your personal information, such as when 7SecondSolar deploys passive processing means and certain technologies to collect information from you, such as through the uses of cookies, web beacons, embedded scripts, and/or mobile device identifiers. These passive processing means allow 7SecondSolar to process certain non-personally identifiable information which can perhaps not be linked to you directly.
What do we do with your personal information and why do we collect it?
As a responsible company, employer and corporate citizen, we only collect and process personal information for the purposes of conducting our business activities, pursuing legitimate interests, conducting legal or regulatory compliance activities as required by law or good business practice, or for the purposes for which the information is provided.
The personal information you provide to 7SecondSolar in your 7SecondSolar Engagement is typically processed for the following purpose(s), which are connected to our legitimate business purposes:
- Assessing prospective clients and projects, including risk and creditworthiness
- Showing compliance with the relevant statutory obligations, including government reporting and specific local law requirements
- Handling or defending complaints, disputes, or claims
- Performing professional services and duties
- Promoting 7SecondSolar’s services, including details of events and seminars
- Recruitment and employment opportunities
- Undertaking research relating to professional services activities
Sharing information with 7SecondSolar’s related companies, credit agencies, government agencies, and legal and professional service providers, where appropriate
This notice applies to all data (including all personal information) past, present, or future submitted by you to 7SecondSolar or which we otherwise obtain pursuant to undertaking our normal business activities.
Who do we share your personal information with?
7SecondSolar may transfer personal information or data to 7SecondSolar offices or to affiliates and to data centres in any country, but only for the abovementioned lawful purposes and always subject to 7SecondSolar’s Privacy Policy and the provisions of Section 72 of POPIA.
For project or business purposes it may be necessary to share your personal information with select business contacts on a need-to-know basis. We give you the assurance that we will consistently apply our Privacy Policy to our business contacts and establish a lawful justification, which may include consent, for the sharing of personal information with any third party. We will conclude written agreements with them to ensure your personal information remains secure and confidential, and that it is only used for the agreed purpose.
To assess and determine the risk profile of prospective employees, clients, business partners, and/or projects, we may share your personal information with our preferred verification agencies. The list of current agencies used is available on request from the information officer.
Where do we store your personal information?
7SecondSolar has implemented reasonable technical and organisational information security measures to protect personal information.
All your personal information is stored securely by 7SecondSolar. Personal information may be stored on servers located in foreign countries that have different data protection laws in place. We are comfortable that should any of these foreign countries not protect personal information to an extent required under POPIA, the POPIA standard will apply and will be enforced by 7SecondSolar.
Despite all our attempts to keep your personal information safe and secure, unauthorised access remains a possibility. 7SecondSolar will not take responsibility for anyone outside of 7SecondSolar’s control breaching its security measures. You must review the conditions of use and security of any third-party websites made available through hyperlinks on its website before use.
How long do we store your personal information?
7SecondSolar will store or retain your personal information for the period required in accordance with 7SecondSolar’s legitimate interest to do so or for the period necessary to comply with our legal and regulatory obligations related to the storage of specific types of records and/or information.
How do we make decisions
7SecondSolar does not make decisions based solely on the automated processing of personal information and/or data, including profiling, which produce legal effects that significantly affect the individuals involved. If automated decisions are made, affected persons will be given an opportunity to express their views on the automated decision in question and object to it.
What are your rights?
You have rights when it comes to your personal information, but bear in mind that there may be various considerations in deciding how to deal with any requests you may have. We will review or process the request and in due course provide a response.
Your rights include:
- Right of access – you can ask us for a copy of the personal information we store
- Right to know – you can ask us what personal information is or was shared with any of our business contacts or any third party
- Right to change – you can ask us to update your personal information or delete any personal information that is no longer accurate or relevant
- Right to object – you can object to our processing of your personal information
- Right to report – you can lodge a complaint with the information regulator if you are of the view that we are not complying with POPIA.
The contact details of the Information Regulator are:
The Information Regulator (South Africa)
JD House 27 Stiemens Street Braamfontein Johannesburg, 2001 PO Box 31533 Braamfontein, Johannesburg, 2107 E-mail:inforeg@justice.gov.za
You agree that the laws of the Republic of South Africa shall apply exclusively to any legal dispute.