Processing

CropLife South Africa

Privacy Policy

Last updated: September 06, 2021

PRIVACY POLICY - CROPLIFE SOUTH AFRICA

This Privacy Policy describes CropLife South Africa’s policies and procedures on the collection, use and disclosure of personal information throughout the various services and platforms used and maintained by CropLife South Africa.

Interpretation and Definitions

The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for the user to access any CropLife SA service/system or parts of a service/system.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Policy) refers to CropLife South Africa.
  • Cookies are small files that are placed on the User’s computer, mobile device or any other device by a website, containing the details of the User’s browsing history on that website among its many uses.
  • Country refers to: South Africa
  • Device means any device that can access the Service such as a computer, a mobile phone, digital tablet or any other smart device.
  • Operator (also referred to Service Provider) means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used.
  • Personal Data is any information that relates to an identified or identifiable individual. This data is submitted voluntarily by the User (for example signing up to the newsletter) or by a representative of the User’s organisation (for example the skills development facilitator submitting information on behalf of the User on the Continuous Development Programme system).
  • Service refers to the systems and platforms that CropLife South Africa uses to provide a service to its users. This includes the Continuous Development Programme system, website, bulk mailing system, Agri-Intel, amongst others. The service providers of these services are referred to as Operators and are listed in the Annexures of this Policy along with a description and explanation of the data collected and systems in place to ensure that Users’ data are protected.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • User means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Types of Data Collected
Personal Data

While using any of our Services, Users are required to provide certain personally identifiable information that can be used to contact or identify the User. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Company/Organisation
  • ID number

Usage Data

Usage Data is collected automatically when using any of the Services. Usage Data may include information such as the User’s Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that the User visits, the time and date of the User’s visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When the User accesses the Service by or through a mobile device, the Company or Service may collect certain information automatically, including, but not limited to, the type of mobile device used, mobile device unique ID, the IP address of the User’s mobile device, the User’s mobile operating system, the type of mobile Internet browser used, unique device identifiers and other diagnostic data.

Information that the User’s browser sends whenever the User visits the Service or accesses the Service by or through a mobile device can also be collected.

Tracking Technologies and Cookies

The majority of the Services offered uses Cookies and similar tracking technologies to track the activity on the Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse the Service. The technologies used may include:

  • Cookies or Browser Cookies. A Cookie is a small file placed on the User’s Device. The User can instruct their browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if the User does not accept Cookies, they may not be able to use some parts of our Service. Unless the User has adjusted their browser setting so that it will refuse Cookies, our Service may use Cookies.
  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Use of Personal and Usage Data

The Company may use Personal and Usage Data for the following purposes:

  • To provide and maintain its Service, including to monitor the usage of the Service.
  • To manage the User’s Account: to manage User registration as a User of the Service. The Personal Data provided can give the User access to different functionalities of the Service that are available only to the registered User.
  • To contact the User: To contact Users by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
  • To provide the User with news, updates and general information about services, industry information or events which the Company offers unless the User has unsubscribed from receiving such information.
  • To manage User requests: To attend and manage User requests to the Company.
  • For other purposes: We may use the information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of campaigns and to evaluate and improve our Service, products, and the User’s experience.

We may share the User’s personal or Usage Data in the following situations:

  • With Service Providers: To monitor, maintain or analyse the use of our Service.
  • With other Users: when a User shares personal information or otherwise interact in the public areas with other Users, such information may be viewed by all Users and may be publicly distributed if it was done on a public platform.
  • With the User’s consent: We may disclose the User’s personal information for any other purpose only with the User’s consent.

Retention of Users’ Data

The Company will retain Users’ Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. The Company will retain and use Users’ Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or the Company is legally obligated to retain this data for longer time periods.

Disclosure of Users’ Data
Business Transactions

If the Company is involved in a merger, acquisition or asset sale, a User’s Personal Data may be transferred. The Company will provide notice before the User’s Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose the User’s Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose the User’s Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Users’ Personal Data

The security of Users’ Personal Data is important to the Company and all reasonable steps are taken to ensure the User’s data is protected. However, no method of transmission over the Internet, or method of electronic storage is 100% secure. While the Company strives to use all commercially reasonable means to protect the User’s Personal Data, it cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If the Company becomes aware that it has collected Personal Data from anyone under the age of 13 without verification of parental consent, the Company will take steps to remove that information from its servers.

Links to Other Websites

The Services may contain links to other websites that are not operated by the Company. If a User clicks on a third-party link, the User will be directed to that third party's site and the User will need to review the Privacy Policy of those sites separately.

The Company has no control over and assumes no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to this Privacy Policy

The Company may update its Privacy Policy from time to time. User’s will be notified of any changes by posting the new Privacy Policy on this page.

The Company will let the Users know via email and/or a prominent notice on the Service page, prior to the change becoming effective.

Users are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact

If Users have any questions about this Privacy Policy, they can contact the Company:

  • By email: info@croplife.co.za
Last updated: September 06, 2021

ANNEXURE A: USER PRIVACY NOTICE ON ALL SYSTEMS

This notice explains how we obtain, use and disclose your personal information, in accordance with the requirements of the Protection of Personal Information Act (“POPIA”). At CropLife South Africa we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.

The information we collect
Personal Data

While using some of our services, you may be required to provide certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Company/Organisation
  • ID number

Usage Data

Usage data is collected automatically when using some of our services. Usage data may include information such as your device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the service by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device used, mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser used, unique device identifiers and other diagnostic data.

Tracking Technologies and Cookies

The majority of the services offered by us uses cookies and similar tracking technologies to track the activity on the service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyse our service. The technologies used may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our service. Unless you have adjusted your browser setting so that it will refuse cookies, our service may use cookies.
  • Web Beacons. Certain sections of our service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us to, for example, count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

How we use your information

We will use your personal information only for the purposes that it was collected. For example:

  • To gather contact information;
  • To confirm and verify your identity or to verify that you are an authorised user for security purposes;

Other instances may include, only if necessary and legally required:

  • For the detection and prevention of fraud, crime or other malpractice;
  • For audit and record keeping purposes;
  • In connection with legal proceedings.

Disclosure of information

We may disclose your personal information to our service providers (System Operators) who are involved in the delivery of our services to you. These Operators have their own privacy policies and system security in place to ensure that they comply with the requirements of the Protection of Personal Information Act.
We may also disclose your information:

  • Where we have a duty or a right to disclose in terms of law or industry codes;
  • Where we believe it is necessary to protect our rights.

Information security

We are legally obliged to provide adequate protection for the personal information we hold and to stop unauthorised access and use of personal information. We will continue to review our security controls and related processes to ensure that your personal information remains secure.

When we contract with Operators, we insist on appropriate security, privacy and confidentiality to ensure that personal information that we remain responsible for, is kept secure.

Your rights: Access to information

You have the right to request a copy of the personal information we hold about you. To do this, simply contact us via the contact details provided on our website and specify which information you require. We will need to verify your identity before supplying this information, which could require a copy of your ID document, email address and/or full names before we can provide details of your personal information.

Correction of your information

You have the right to ask us to update, correct or delete your personal information. This can be done either through the unsubscribe or account deletion options provided in the various systems, or by requesting this via the contact details provided on our website. Please note that a representative of your organisation may also request the removal of your information if you are no longer with the organisation in question.

How to contact us

If you have any queries about this notice; you need further information about our privacy practices; wish to withdraw consent; exercise preferences or access or correct your personal information, please contact us at the numbers/addresses listed on our website.

Last updated: September 06, 2021

ANNEXURE B – BLAZON BULK MAILING SYSTEM

Operator
Blazon Digital Marketing

Data Collected
CropLife South Africa collects the following User information, which is voluntarily either submitted via email or through an online form, and stores it on the Blazon System:

  • Name
  • Surname
  • Company
  • Email address
  • Mobile number

Users have an option to “Unsubscribe” should they no longer wish to receive information from this Service. All Users on the Blazon system were reminded that they are subscribed to receive notifications from CropLife South Africa via email on 14 July 2021. A copy of the notification can be viewed here.

Purpose
The data is collected in order to communicate relevant news to subscribers. Additional data, such as company or working groups is allocated for identification purposes. Usage Data is collected through the System to see User engagement history, emails opened, links click and so forth. This is to ensure the improvement of the Service and identify possible errors. Only the Company and the Operator have access to the data and it is not shared with third parties.

Security
The following documents provide a detailed explanation of the security measures in place by the Operator to ensure User information remains secure. These documents can be obtained from CropLife South Africa upon request:

  • Blazon PAIA & POPIA Compliance
  • Blazon.co Certificate 20210411.1

Operator Contact Details
Name of body: Du Toit & Kruger Solutions (Pty) Ltd t/a Blazon
Head of body: Johan du Toit (MD)
Information Officer: Johan du Toit

Physical Address:
12 Cannes Street
Durbanville
Western Cape
7550

Telephone Number: +27 (0)21 975 8542
Email address: compliance@blazon.co.za

ANNEXURE C: AGRI-INTEL

Operator
Ripple Digital

Data Collected
CropLife South Africa collects and stores the following Personal Data, which is voluntarily submitted upon registration on the Agri-Intel platform:

  • Name
  • Surname
  • Company
  • Company type
  • Email address
  • Mobile number
  • City
  • Country
  • VAT numbers and invoice information (if required)

The following Usage Data is also collected:

  • Non-personal browsing and click-through patterns
  • User IP address

Purpose
The data is collected for the following purposes:

  • Communication
  • Authentication
  • User access to restricted pages
  • Analyse Usage Data to improve the system and or non-personal statistical information about browsing habits, click patterns, and access to the System. Information detailed above is collected either electronically by using cookies or is provided voluntarily by the User. Users may determine cookie use independently through their browser settings.
Only the Company and the Operator have access to the data and it is not shared with third parties.

Security
The following document provides an overview of the security measures in place by the Operator to ensure User information remains secure. The document can be obtained from CropLife South Africa upon request:

  • Agri-Intel - Website Security - 2021-06-30

Operator Contact Details
Primary contact: Andre de Villiers
Physical Address: Van Reenen Street
Newlands
Cape Town
7700

Telephone Number: + 27 (0)21 422 0669
Email address: info@ripple-digital.com

ANNEXURE D: CONTINUOUS PROFRESSIONAL DEVELOPMENT (CPD) SYSTEM

Operator
Custom Apps SA (Pty) Ltd

Data Collected
CropLife South Africa collects the following User information, which is submitted by the nominated Skills Development Facilitator of the User’s company by means of an online form:

  • Name
  • Surname
  • Company
  • Email address
  • Mobile number
  • Province
  • ID Number
  • Basic Crop Protection certificate number

Purpose
Users of the service voluntarily participate in the CPD programme. The data is collected for identification purposes in order to assign the correct points to the User that is needed for compliance. ID numbers are collected as a unique User identification to avoid duplicate entries or erroneous point allocation. Only the Company, the Operator and the assigned Skills Development Facilitator of each User have access to the data and it is not shared with third parties for commercial purposes.

Security
The following document provides an overview of the security measures in place by the Operator to ensure User information remain secure. The document can be obtained from CropLife South Africa upon request:

  • TBC

Operator Contact Details
Primary contact: Douglas Bothma
Physical Address: 6 Dawood Close 4
The Crest
Ballito
4339

Telephone Number: +27 (0)76 331 7339
Email address: douglas@customappssa.co.za

ANNEXURE E: STUDENT CERTIFICATE VERIFICATION SYSTEM

Operator
Bradley van Niekerk

Data Collected
The following personal information of students who have completed the CropLife SA Basic Crop Protection course is captured and stored on the system:

  • Name
  • Surname
  • Email address
  • Mobile number
  • Certificate Number
  • ID Number
  • CropLife SA agent number
  • Copy of the Basic Crop Protection course certificate

Purpose
The data is captured for identification purposes within the system. Some of the data is also available on the certificate, such as name, ID number and certificate number. Only the Company and the Operator have access to the data and it is not shared with third parties for commercial purposes.

Security
The System is hosted by Afrihost. The website is secured using Hypertext Transfer Protocol Secure (HTTPS). Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It is used for secure communication over a computer network and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). The protocol is therefore also referred to as HTTP over TLS, or HTTP over SSL. Therefore, all traffic to and from the website is encrypted. Furthermore, access to the website is granted by providing a username and password which is encrypted using Advanced Encryption Standards (AES). AES has been adopted by the U.S. government. It supersedes the Data Encryption Standard (DES), which was published in 1977. The algorithm described by AES is a symmetric-key algorithm, meaning the same key is used for both encrypting and decrypting the data.

Operator Contact Details
Primary contact: Bradley van Niekerk

Telephone Number: +27(0)66 225 2325
Email address: fistfullofdoom@gmail.com

ANNEXURE F: CROPLIFE SA COMPANY WEBSITE

Operator
Bradley van Niekerk

Data Collected
The Company stores the following information for Users who are permitted to have access to the member portal:

  • Name
  • Surname
  • Email address
  • Password

Purpose
The reason for collecting member portal data is for identification purposes. The reason for collecting Usage Data is for analytical purposes to identify the amount of time that Users spend on the various pages to improve upon the User experience. Only the Company and the Operator have access to the data and it is not shared with third parties for commercial purposes.

Security
The System is hosted by Afrihost. The website is secured using Hypertext Transfer Protocol Secure (HTTPS). Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It is used for secure communication over a computer network and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). The protocol is therefore also referred to as HTTP over TLS, or HTTP over SSL. Therefore, all traffic to and from the website is encrypted. Furthermore, access to the website is granted by providing a username and password which is encrypted using Advanced Encryption Standards (AES). AES has been adopted by the U.S. government. It supersedes the Data Encryption Standard (DES), which was published in 1977. The algorithm described by AES is a symmetric-key algorithm, meaning the same key is used for both encrypting and decrypting the data.

Operator Contact Details
Primary contact: Bradley van Niekerk

Telephone Number: +27(0)66 225 2325
Email address: fistfullofdoom@gmail.com

ANNEXURE G: SAGE ACCOUNTING SYSTEM

Operator
Sage

Data Collected
CropLife South Africa collects the following User information, which is voluntarily submitted by the User:

For invoicing:
  • Person or Company Name
  • Physical Address
  • Postal Address
  • VAT number (if applicable)
  • Company registration number (if applicable)
  • Email address
For payroll
  • Banking details
  • ID number
  • Tax number
  • Address
  • Contact number

Purpose
CropLife South Africa collects and stores the User information that have been submitted voluntarily on the Sage system in order to execute necessary payments (such as salaries, invoices etc.) as well as generate invoices for payments due to the Company. The information stored is required in order to conduct business effectively.

Security
The following document provides an overview of the security measures in place by the Operator to ensure User information remain secure. The document can be obtained from CropLife South Africa upon request:

  • SBCP - Protection of Personal Information V1.0

Operator Contact Details
Primary contact:

Physical Address: 6th Floor, Gateway West
22 Magwa Crescent
Waterfall 5-lr
Midrand
2066

Telephone Number:
Email address: