Privacy Policy
Effective Date: January 1, 2024
Heinemann Medical (Pty) Ltd (“we,” “our,” or “us”), operating as the Responsible Party, is committed to protecting the privacy of our users (“Data Subjects”). This Privacy Policy outlines how we collect, process, store, and protect your Personal Information in accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA).
1. Information We Collect
We only collect Personal Information that is adequate, relevant, and strictly necessary for our business operations. This may include:
-
Contact Information: Name, email address, physical address, and telephone numbers.
- Financial Information: Bank details or billing information required to process payments.
- Technical Information: IP addresses, cookies, browser types, and usage data when you visit our website.
2. Purpose and Lawful Basis for Processing
We process your Personal Information under the following lawful grounds specified by POPIA:
- Consent: You have given clear consent for us to process your data for a specific purpose.
- Contractual Obligation: Processing is necessary to carry out actions for the conclusion or performance of a contract with you.
- Legal Obligation: Processing is required to comply with an obligation imposed on us by South African law.
- Legitimate Interests: Processing is necessary for pursuing our legitimate business interests or those of a third party.
3. Sharing with Operators (Third Parties)
We do not sell or trade your Personal Information. We may share your data with Operators (third-party service providers) who process data on our behalf (e.g., payment gateways, hosting providers). We ensure these operators maintain strict security measures and comply with POPIA standards.
4. Cross-Border Data Transfers
If we transfer your Personal Information outside the Republic of South Africa (e.g., cloud storage servers located overseas), we will ensure that the recipient country provides an adequate level of data protection that matches or exceeds POPIA standards.
5. Security Safeguards
In terms of Condition 7 of POPIA, we secure the integrity and confidentiality of your Personal Information by taking appropriate, reasonable technical and organizational measures to prevent loss, damage, or unauthorized destruction.
6. Your Rights as a Data Subject
Under POPIA, you have the right to:
- Access: Request confirmation of whether we hold your Personal Information and get a copy of it.
- Correction: Request that we correct or delete inaccurate, irrelevant, excessive, or outdated information.
- Objection: Object to the processing of your Personal Information at any time for direct marketing purposes.
- Complaint: Lodge a complaint with the Information Regulator.
7. Information Officer and Contact Details
For any questions regarding this policy, or to exercise your rights, please contact our designated Information Officer:
- Responsible Party: Heinemann Medical (Pty) Ltd
- Email Address: info(at)heinemann-ent.co.za
- Physical Address: 4th Floor, Earlgo House, Gardens, Cape Town, 8001