Privacy Policy

1. Responsible Party

Information Officer (if appointed): Name and contact details

2. Types of Data Processed, Purposes and Legal Bases

Depending on your use of our services, we process in particular the following categories of data:

• Basic data (e.g. name and surname, address), contact data (e.g. email, phone), content data (e.g. messages in contact form).
• Usage data/metadata (e.g. visited pages, access times, IP address).

Processing purposes and corresponding legal bases in accordance with POPIA:

• Provision of the website and IT security (Legitimate interests).
• Establishment and performance of contract, e.g. handling inquiries (Contractual necessity).
• Consent for optional functions (e.g. newsletter, analytical cookies) (Consent).
• Compliance with legal obligations (Legal obligation).

3. Access Data/Server Logs

The hosting provider collects server logs (accessed URL, date/time, amount of data transferred, referrer, User-Agent, IP address) to ensure operation and IT security. Storage takes place for a maximum of 30 days, after which the data is deleted or anonymized, unless further storage is required for evidentiary purposes (Legitimate interests).

4. Cookies and Similar Technologies

We use only technically necessary cookies, unless otherwise indicated. In the case of optional cookies/tools requiring consent (e.g. analytical), we obtain your consent via a consent banner (Consent). Details can be found in the consent banner or below in the Third Parties section.

5. Contact and Forms

When contacting us via form or email, we process the data you provide to handle your inquiry (Contractual necessity). Required fields are appropriately marked. Data will be deleted after complete processing of your inquiry, unless legal retention requirements prevent this.

6. Processors and Third Parties

To provide our services, we use carefully selected service providers who process personal data on our behalf (processing under operator agreement). Appropriate agreements have been concluded with these entities. Overview of main service providers:

• Hosting/Server: Provider, country of residence – processing of server logs, infrastructure.
• Email/Communication: Provider, country of residence.
• Optional – Web Analytics/Marketing (only with consent): Tool name – IP anonymization activated, storage for X months.

In case of data transfer to third countries (outside South Africa), we ensure appropriate safeguards (e.g. standard contractual clauses) – see International Data Transfers section.

7. Retention Period

We process personal data only as long as necessary to achieve the respective purposes. Legal retention requirements (e.g. commercial/tax law), contractual requirements, and your consents are decisive. After the purpose ceases or deadlines expire, we delete or anonymize the data.

8. Your Rights

• Right of access to data (POPIA Section 23)
• Right to rectification (POPIA Section 24)
• Right to erasure of data (POPIA Section 11(3))
• Right to restriction of processing (POPIA Section 11)
• Right to data portability (where applicable)
• Right to object to processing based on legitimate interests.

If processing is based on your consent, you may withdraw it at any time with future effect.

You also have the right to lodge a complaint with the supervisory authority, such as the Information Regulator of South Africa.

9. International Data Transfers

If data is transferred to countries outside South Africa, this only takes place when the conditions required by POPIA are met (e.g. adequacy determination or conclusion of standard contractual clauses and possibly additional measures).

10. Data Security

We take technical and organizational measures to protect personal data from loss, destruction, unauthorized access or other improper processing. This includes access restrictions, encryption, and regular reviews of our security measures.

11. Changes to this Privacy Policy

We adjust this privacy policy when necessary due to changes in legislation, our data processing, or technological developments. The current version can be found on this page. The date of the last update is indicated at the top.