Responsible entity
Relevant European entity details are being finalised for publication. Contact info@aogroup.co.za for assistance identifying the responsible entity.
EUROPEAN PRIVACY INFORMATION
Privacy and data protection in Europe
This notice explains AO's general approach to personal-data processing where the European Union General Data Protection Regulation applies to a relevant AO entity or processing activity.
GDPR does not necessarily apply to every AO interaction. Its application depends on factors including the responsible entity, its establishment, the location of individuals, the services offered and the processing involved.
Relevant legal entity
Who is responsible
Applicable privacy framework
GDPR, where applicable
The framework that applies to a specific interaction depends on the AO entity involved, the service and the processing activity.
Our approach
Privacy principles we apply
Where GDPR applies, AO's approach is guided by principles including:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Processing
Information AO may process
Categories of information
- Identification details
- Contact information
- Contract and project information
- Project communications
- Account and authentication information
- Billing and financial information
- Support and service records
- Employment or applicant information
- Website and communication activity
Purposes of processing
- Providing services
- Contract administration
- Customer support
- Project and service management
- Invoicing and financial management
- Security and access management
- Recruitment and employment administration
- Legal and regulatory compliance
- Establishing or defending legal rights
- Permitted business communication
Sharing
Sharing and service providers
- Authorised AO personnel
- Relevant affiliated AO entities
- Contracted service providers and processors
- Professional advisers
- Customers or partners where contractually required
- Regulators, courts or authorities where legally required
- Lawful transaction parties
Where third parties process personal data on AO's behalf, AO seeks to use appropriate contractual, confidentiality and security arrangements.
Safeguards
Security and international transfers
Security safeguards
AO seeks to apply organisational and technical safeguards appropriate to the information and the risk involved, including access control, authentication, secure communications where appropriate, monitoring, backup and recovery processes, supplier due diligence, confidentiality obligations and controlled retention and disposal.
International transfers
Where personal data is transferred outside the European Economic Area, the relevant AO entity seeks to apply an appropriate lawful transfer mechanism and supporting safeguards where required.
Your rights
Data-subject rights
Depending on the circumstances, rights may include:
- Access
- Rectification
- Erasure
- Restriction
- Objection
- Data portability
- Withdrawal of consent
- Protection regarding certain automated decisions
- Complaint to a competent supervisory authority
These rights are not absolute and may be restricted by applicable legal, contractual, regulatory or evidential requirements.
Requests
How to submit a European privacy request
Email info@aogroup.co.za with:
- Your full name
- Your relationship with AO
- The relevant AO entity, if known
- The country or jurisdiction involved
- The right you wish to exercise
- Enough detail to identify the relevant information
- Your preferred method of response
AO may request reasonable proof of identity or authority before processing the request. Please do not attach identity documents until AO confirms a secure channel for them.
Documents
Europe privacy documents
Only approved documents are published for download. Pending items are listed for transparency.
GDPR Privacy Notice
Full privacy notice for processing to which the GDPR applies.
- Country or region
- Europe
- Legal entity
- Relevant AO entity — to be confirmed
- Document type
- Privacy Notice
- Status
- Pending legal review
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
European Data-Subject Request Guide
Guidance on exercising GDPR rights where they apply.
- Country or region
- Europe
- Legal entity
- Relevant AO entity — to be confirmed
- Document type
- Request Guide
- Status
- Pending approval
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
Data-Processing Addendum
Contractual data-processing terms for European customers.
- Country or region
- Europe
- Legal entity
- Relevant AO entity — to be confirmed
- Document type
- Contractual Addendum
- Status
- Pending approval
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
Subprocessor List
List of subprocessors, if AO decides to publish one for European processing.
- Country or region
- Europe
- Legal entity
- Relevant AO entity — to be confirmed
- Document type
- Subprocessor List
- Status
- Pending approval
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
Contact
Need help with a privacy matter?
Contact our privacy team if you wish to exercise a privacy right, raise a concern or need assistance identifying the relevant AO legal entity.
Related