AO South African affiliated entities
- Privacy responsibility
- Pieter Hendrik du Toit, Information Officer
- Privacy contact
- info@aogroup.co.za
SOUTH AFRICA PRIVACY INFORMATION
Privacy and data protection in South Africa
AO's South African affiliated entities are committed to processing personal information lawfully, reasonably and securely in accordance with the Protection of Personal Information Act (POPIA).
This page summarises our South African approach. Access to records held by these entities is dealt with separately under the Promotion of Access to Information Act (PAIA).
Relevant legal entity
Who is responsible
Applicable privacy framework
POPIA and PAIA
The framework that applies to a specific interaction depends on the AO entity involved, the service and the processing activity.
Our approach
Privacy principles we apply
AO seeks to apply POPIA's conditions for lawful processing:
- Accountability
- Processing limitation
- Purpose specification
- Further processing limitation
- Information quality
- Openness
- Security safeguards
- Data subject participation
Processing
Information AO may process
Categories of information
- Identification details
- Contact information
- Contract and project information
- Project communications
- Account and authentication information
- Billing and financial information
- Support and service records
- Employment or applicant information
- Website and communication activity
Purposes of processing
- Providing services
- Contract administration
- Customer support
- Project and service management
- Invoicing and financial management
- Security and access management
- Recruitment and employment administration
- Legal and regulatory compliance
- Establishing or defending legal rights
- Permitted business communication
Sharing
Sharing and service providers
- Authorised AO personnel
- Relevant affiliated AO entities
- Contracted service providers and processors
- Professional advisers
- Customers or partners where contractually required
- Regulators, courts or authorities where legally required
- Lawful transaction parties
Where third parties process personal data on AO's behalf, AO seeks to use appropriate contractual, confidentiality and security arrangements.
Safeguards
Security and international transfers
Security safeguards
AO seeks to apply organisational and technical safeguards appropriate to the information and the risk involved, including access control, authentication, secure communications where appropriate, monitoring, backup and recovery processes, supplier due diligence, confidentiality obligations and controlled retention and disposal.
International transfers
Where personal information is transferred outside South Africa, the relevant AO entity seeks to apply an appropriate lawful transfer basis and supporting safeguards where required.
Your rights
Data-subject rights
Depending on the circumstances and applicable law, a data subject may have the right to:
- Be notified about the collection and use of personal information
- Request confirmation of and access to personal information
- Request correction of inaccurate or incomplete information
- Request deletion or destruction where legally permitted
- Object to certain processing
- Object to direct marketing
- Lodge a complaint with the Information Regulator
These rights are not absolute and may be restricted by applicable legal, contractual, regulatory or evidential requirements.
Requests
How to submit a South African privacy request
Email info@aogroup.co.za with:
- Your full name
- Your relationship with AO
- The relevant AO entity, if known
- The country or jurisdiction involved
- The right you wish to exercise
- Enough detail to identify the relevant information
- Your preferred method of response
AO may request reasonable proof of identity or authority before processing the request. Please do not attach identity documents until AO confirms a secure channel for them.
Documents
South Africa privacy documents
Only approved documents are published for download. Pending items are listed for transparency.
POPIA Compliance Statement
AO's statement of approach to the conditions for lawful processing.
- Country or region
- South Africa
- Legal entity
- AO South African entities
- Document type
- Compliance Statement
- Status
- Published
Open Web page
Web page
PAIA Manuals
Entity-specific PAIA manuals and the access-to-information process.
- Country or region
- South Africa
- Legal entity
- AO South African entities
- Document type
- PAIA Manual
- Status
- Published
Open Web page
Web page
POPIA Objection Form
The prescribed form for objecting to processing.
- Country or region
- South Africa
- Legal entity
- AO South African entities
- Document type
- Prescribed Form
- Status
- Pending approval
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
POPIA Correction or Deletion Form
The prescribed form for requesting correction or deletion.
- Country or region
- South Africa
- Legal entity
- AO South African entities
- Document type
- Prescribed Form
- Status
- Pending approval
Final approved document pending publication. For assistance, contact info@aogroup.co.za.
Contact
Need help with a privacy matter?
Contact our privacy team if you wish to exercise a privacy right, raise a concern or need assistance identifying the relevant AO legal entity.
Related