Privacy & Data Protection

Data Protection Policy

At Numata, we are big supporters of data privacy and protection. This page explains our compliance with GDPR and POPIA legislation.

What Personal Information Do We Collect?

Personal Information is normally collected directly from our job applicants, potential employees and employees, a CLIENT or a potential CLIENT. We may also use other sources, subject to restrictions under applicable law, to assist in obtaining relevant Personal Information about you, including – Identification data – such as your name, surname, gender, photograph, date of birth, identification number, language. Contact details – such as home address, telephone, email addresses, and emergency contact details. Employment details – such as employment history, performance and disciplinary records, grievance procedures, and sickness/holiday records. Educational and professional background – such as academic/professional qualifications, education, CV/resumé, reference letters and interview notes. Spouse, beneficiary & dependents information, marital status. Financial information – such as banking details, tax information, payroll information, salary, benefits, expenses, and company allowances. IT information – information required to provide access to our IT systems and networks such as IP addresses, log files, login information, and software/hardware inventories. 

Automatic Data Collection: We may also have access / collect Personal information that we collect automatically when you visit our website. 

Third-Party Data Collection: We may also collect information about you through our trusted third-party sources to assist us in providing product and service offerings to you, including Recruitment information (including references and other information included in a CV or cover letter or as part of the application process). Employment records (including job titles, work history, working hours, training records and professional memberships).

Purpose For Which The Information IS Being Collected.

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

• Where we need to perform the contract, we have entered with you.
• Where we need to comply with a legal obligation.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Is The Supply Of The Information Voluntary Or Mandatory?

Supplying certain types of information is mandatory in terms of legislation and regulations.

Any Particular Law Authorising Or Requiring The Collection Of The Information

If your Personal Information is collected in terms of a particular law authorising or requiring the collection of the information, we will take steps to ensure that you are aware of that.

The Data Protection Act 2018 and thereafter unless and until the GDPR is no longer directly applicable in the UK, the General Data Protection Regulation ((EU) 2016/679) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and then any successor legislation to the GDPR or the Data Protection Act 2018. and, The Protection of Personal Information Act, 4 of 2013 (known as POPI) section 14 of the South African Constitution, also Section 32(1), as it provides that national legislation must be enacted to give effect to the right of access to information in reference to the Promotion of Access to Information Act, 2 of 2000 (PAIA).

As a Data Subject You Do Have The Following Rights:

RIGHT TO BE NOTIFIED: The right to be notified that – Personal Information about you is being collected – And your Personal Information has been accessed or acquired by an unauthorised person. RIGHT OF ACCESS: The right to establish whether we hold Personal Information of you and to request access to your Personal Information.

• Request for access to record form
  
  
  
  
• Outcome of request and of fees payable
  
  

1. We do not make, and will not accept, facilitation payments or “kickbacks” of any kind, such as small, unofficial payments made to secure or expedite a routine government action by a government official, or payments made in return for a business favour or advantage.

Complaint Process:

If you believe that this office has not replied to your access request or has not handled your Personal Information in a reasonable manner, please address your concerns first with our Information Officer. You may also choose to make a complaint to the Information Regulator.

• Objection To The Process Of Personal Information
  
  
  
  
• Request For Correction Of Deletion Of Personal Information Or Destroying Of Record Of Personal Information
  
  
  

Our Contact Particulars

• Process Personal Data only on the written instructions from a CLIENT unless NUMATA is required by the laws of any member of the European Union or by the laws of the European Union applicable to NUMATA to process Personal Data (Applicable Laws). Where NUMATA is relying on laws of a member of the European Union or European Union law as the basis for processing Personal Data, NUMATA shall promptly notify the CLIENT of this before performing the processing required by the Applicable Laws unless those Applicable Laws prohibit NUMATA from so notifying the CLIENT;

• Not to transfer any Personal Data outside of the EEA unless the following conditions are fulfilled:

• The CLIENT or NUMATA has provided appropriate safeguards in relation to the transfer;

  • The data subject has enforceable rights and effective legal remedies;

  • NUMATA complies with its obligations under the Data Protection Legislation by providing an adequate level of protection to any Personal Data that is transferred; and

  • NUMATA complies with reasonable instructions notified to it in advance by the CLIENT with respect to the processing of the Personal Data;

• Notify the CLIENT without undue delay on becoming aware of a Personal Data breach;

  • At the written direction of the CLIENT, delete or return Personal Data and copies thereof to the CLIENT on termination of all agreement unless required by Applicable Law to store the Personal Data; and

  • Maintain complete and accurate records and information to demonstrate compliance with legislation.