- General
1.1. In accordance with the Protection of Personal Information Act (November 2013),
we define personal data as information relating to an identifiable natural or
juristic person.
1.2. Data subjects refer to persons whose personal information is processed. - Audience
2.1. This policy is intended for the following:
2.1.1. Parents/guardians whose personal information and whose children’s personal information we process.
- How is your data collected?
3.1. Your data is collected in the following ways:
3.1.1. Via application forms
3.1.2. Via supplementary documents used to support a family’s application for
scholarship. These documents are varying and submitted willingly by families - What personal information do we process?
4.1. We retain and process the following information of students:
4.1.1. Name and surname
4.1.2. Birthdate
4.1.3. Identification number
4.1.4. Nationality
4.1.5. Passport and permit information for non-South African students
4.1.6. Gender
4.2. We retain and process the following information of parents/guardians:
4.2.1. Name and surname
4.2.2. Relationship to student
4.2.3. Identification number
4.2.4. Nationality
4.2.5. Passport and permit information for non-South African parents/guardians
4.2.6. Title
4.2.7. Employer
4.2.8. Contact numbers (work, home, and personal)
4.2.9. Email address(es)
4.2.10. Home address
- Why do we process this personal information?
5.1. We process this personal information of students and parents/guardians to:
5.1.1. Determine whether families are deserving of financial aid
5.1.2. Report information to the Receiver of Revenue
5.1.3. Share information pertaining to the foundation with parents/guardians - Where is your data processed?
6.1. Your data is processed by the following means:
6.1.1. The Emmy Foundation’s administration accounts (via Google) that are password
protected.
- What happens in the event of a data breach?
7.1. A data breach is defined as any unauthorized access, use, misuse, disclosure, destruction, modification, or disruption of personal information.
7.2. In the event of a suspected data breach, the following will occur:
7.2.1. The Information Officer will follow the data management procedure to determine
whether there has been a breach and the nature of the breach.
7.3. In the event that a breach has been identified, the following will occur, as required by our Data Management Policy:
7.3.1. The Information Officer will inform the Information Regulator as soon as a breach
has been identified and internal processes have been followed.
7.3.2. A director of the foundation will then inform all stakeholders that a data breach has occurred.
7.3.3. The board of directors will launch a formal internal investigation into the data
breach and inform Data Subjects of the result after the investigation is concluded.
- Your rights
8.1. As a data subject whose personal information we process, you have the right to:
8.1.1. Be informed of how your personal information is processed (Section 2 of our
Privacy Policy).
8.1.2. Be informed of what personal information of yours is processed (Section 3 of our Privacy Policy).
8.1.3. Be informed of where your personal information is processed (Section 4 of our Privacy Policy).
8.1.4. Request a copy of your data.
8.1.5. Request that your data be deleted (subject to approval).
8.1.6. Request that we restrict processing your data (subject to approval).
8.1.7. Object to what personal information we process.
8.1.8. Request that we rectify errors or outdated personal information.
8.1.9. Report any malfeasance on our part to the Information Regulator.
- Your responsibilities
9.1. As a data subject whose personal information we process, you have the responsibility to:
9.1.1. Ensure that your personal information is accurate and recent and to inform the
foundation of any changes to your personal information.
- Cookies and tracking notice
10.1. Our website does not utilize cookies.