Privacy Policy

1. The preamble of Protection of Personal Information Act (POPI Act) stipulates the minimum conditions for the processing of personal information by public and private bodies, which promotes and gives effect to right of privacy (Section 14 of the Constitution of Republic of South Africa, 1996), which includes protection for the privacy of one’s communication.
2. The POPI Act applies to the processing of personal information of all data subjects entered into a record by a responsible party of the organisation, either by automated or non-automated means (Section 3(1)(a) & (b)). According to Section 1(a-c), “processing” refers to any activity in terms of obtaining, dissemination and destruction of personal information.
3. South African Strings Foundation (SASF) as registered Non-Profit Organisation (NPO) is POPI Act compliant, as it is deemed to be an organisation that engages in a variety of educational and business aspects to allow for day-to-day running of the organisation’s vision, mission, projects and goals. Therefore, it follows that personal information could be processed in some of the following categories: Governing bodies (directors), donors/sponsors, employees, vendors, applicants, registrants, statutory bodies (SARS) and websites.
4.  The SASF’s chairperson, secretary and legal counsel are the persons privy to the processing of personal information. The following general information is collected from the parties above: Names; surnames; addresses; contact details; choice of string instrument; all client and vendor information relating to accounting; products and services; information that governing bodies and stakeholders could be interested in; conference videos and recordings; all statutory information on which SASF is to report/act upon; information destined for marketing and sales in future, and; information relating to the educational background of a person. Unauthorised
   persons have no access to personal information.
5. The SASF vows to protect the personal information as prescribed by the POPI Act, and all personal information is private and attended to according to the POPI Act. Furthermore, the SASF will at all times measure and actively manage the risk of breach of data.
6. As data subject, you are entitled to amend or eliminate personal information from SASF database or records at any given point in time, to which your request will be responded to as soon as possible. Contact secretary@sastrings.co.za to institute such changes.

Data Protection Policy

1. South African Strings Foundation (SASF) commits to continually uphold that the appointed Information Officer is the main person responsible for the processing of the information.
2. SASF has addressed the security on personal information, in the following areas:
   
   • On end-points;
   • Non-electronic files;
   • Data being transferred;
   • Data stored in Google Drive;
   • Antivirus software.
   
   
3. All SASF stakeholders are appropriately informed of measures taken to protect personal information and the processing of personal information. And as stated in the privacy policy above, unauthorised persons have no access to personal information.
4. Those who hold or process information consent to full surveillance of processing of personal information and consented to personal accountability for such processing, and commit to employ maximum security and secrecy on all personal information,
5. All non-electronic personal information is kept safe, and the SASF is satisfied that its cloud computing adheres to the requirements of the POPI Act.
6. All handlers of physical security acknowledged that they are responsible for compliance and undertake to ensure full compliance to the POPI Act. All personal information will always be kept and attended to in a secure manner.
7. Personal information is only used for the purpose obtained as instructed by the data subject.