Mahindra Auto Zimbabwe (“we”, “us”, or “our”) is committed to protecting your Personal Information which you provide to us.
This Privacy Policy sets out what Personal Information we collect and how we use it. It has been compiled in compliance with Protection of Personal Information Act No 4 of 2013 (“POPI Act”) and it sets out what we process, the purpose it is processed for, our security measures, and your rights in respect of your Personal Information.
- Who is a Data Subject
1.1. In terms of the Act, Data Subjects are natural and juristic persons.
- Personal Information
2.1.1. information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, wellbeing, disability, religion, conscience, belief, culture, language and birth of the person;
2.1.2. any identifying number, symbol, email address, physical address, telephone number, location information, online identifier or other particular assignment to the person;
2.1.3. correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence.
2.1.4. the name of the person if it appears with other Personal Information relating to the person or if the disclosure of the name itself would reveal information about the person.
2.2. We do not collect all categories of Personal Information. We only collect the Personal Information we need for our specific business purposes.
- How we collect your Personal Information
We collect Personal Information directly from you and via our Website/s.
3.1. Suppliers: The Personal Information collected includes your bank account details, address, points of shipment, telephone number, email addresses and details of contact persons within your business.
3.2. Website users: We collect Personal Information when you visit our Website/s. Please refer to our cookies policy described below.
3.2.1 Please note that failing to provide certain Personal Information may impact our ability to, amongst other things:
3.2.2 provide you with our products or services.
3.2.3. extend credit to you;
3.2.4 assist you with an insurance policy or an insurance claim.
3.2.5 provide you access to all webpages and Website/s;
3.2.6. on-board you as supplier.
3.2.7 assess you in respect of a job opportunity.
3.2.8 perform in terms of a contract (such as an employment contract) with you; or
3.2.9. allow access to our premises.
- Our purposes for processing your Personal Information Security
4.1 We process Personal Information to secure our premises, our assets, and our employees.
- Transferring Personal Information
5.1. Related companies: We may share to your Personal Information with our Group.
5.2. Business Partners: We may also share or provide access your Personal Information with our or the Group’s business partners, suppliers, or agents who are tasked with delivering our products and services to you, but only to the extent strictly necessary.
5.3. Mergers and acquisitions: Should Mahindra Auto Zimbabwe be reorganised or sold to another company or entity, your Personal Information may be provided to such company or entity.
5.4. Cross boarder transfer: We are a multinational organisation based in Zimbabwe with group entities located outside of Zimbabwe including, South Africa. Your Personal Information will only be transferred to recipients in another jurisdiction with data privacy laws that are no less stringent than those in Zimbabwe.
- Our cookie policy
6.1. Each time you interact with our websites; we may automatically collect the following Personal Information:
6.1.1. Technical information including, but not limited to, browser type, operating system, device information, IP address, domain name, referral URL.
6.1.2. Usage information including, but not limited to, geographic location information (such as your country or province), the numbers and frequency of visitors to our site, page views, unique page views, video views, form conversions, and your clickstream behaviour (e.g. clicking links to, through and from our website).
6.2. We may use various technologies such as cookies, web beacons (also referred to as clear gifs), and e-tags to collect Personal Information, to analyse trends, and to provide you with a more personalized customer experience.
6.3. In addition, we and our third-party partners and suppliers may use cookies and other similar technologies to enhance the quality of your interactions with our Website, provide you with targeted advertising, and to analyse the effectiveness of any such advertising (such as user engagement and interaction). We may also receive reports based on the use of certain technologies by these companies on an individual and anonymized basis.
- Security
7.1. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the Personal Information we collect.
7.2. These include but are not limited to:
7.2.1. Hosting of our systems in secure data centre locations.
7.2.2. Limiting of access to information and personal information via clear segregation of roles in our systems.
7.2.3. Ongoing education of our staff on the secure handling of personal information in our operations.
7.2.4. Encryption of data where applicable.
7.2.5. Securely storing of physical records in controlled filing locations where appropriate.
7.2.6. Securely destroying operational records and data when they are no longer required in terms of relevant operational or legislative retention requirements.
- Retention periods
8.1. We will retain your Personal Information only for legal basis and in terms of our group policy and schedule and as required by law. We will take all reasonable steps to destroy, delete, or de-identify Personal Information records as soon as reasonably possible after the retention period has been In determining the retention periods we have had regard to:
8.1.1. the purpose for which the Personal Information was collected or subsequently processed;
8.1.2. whether the retention of the Personal Information record is required or authorised by law;
8.1.3. whether we reasonably require the Personal Information record for lawful purposes related to our functions or activities;
8.1.4. whether the Personal Information record is required by a contract between us and you;
8.1.5. whether you have consented to the retention of the Personal Information record for a longer period than would ordinarily apply.
8.1.6. whether Personal Information records are required for historical, statistical, or research purposes.
- Your rights
9.1. Your rights regarding your Personal Information are set out below. Should you wish to exercise any of these rights please contact Mahindra Auto Zimbabwe’s Information Officer using the details provided below:
- Right to access Personal Information
10.1. You have the right to inquire as to whether or not we hold any of your Personal Information without incurring any fees or You may also request us to provide a description of the Personal Information we hold about you and/or to request access to such Personal Information records.
- Right to correct or delete Personal Information
11.1. You have the right to request the correction or deletion of your Personal Information if it is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, obtained unlawfully; or if we or any company in the Group is no longer authorised to retain such Personal Information having regard to the requirements of the Cyber and Data Protection Act.
- Right to object to the use of Personal Information
12.1. You have the right to object to direct marketing at any time.
- Right to withdraw consent
13.1. You have the right to withdraw your consent in instances where Mahindra Auto Zimbabwe relies on consent as a justification to process your Personal Information and you have previously given such consent.
- Right to lodge a complaint
14.1. You have the right to lodge a complaint with Mahindra Auto Zimbabwe’s the data protection authority in your country.
- How to contact us and our Information Officer
15.1. Should you require any further information regarding the Personal Information processed by us or the Group, wish to exercise any or your rights in respect of your Personal Information, or to lodge a complaint regarding the manner in which your Personal Information is being processed by us you may contact the Information Officer via courier or email per the details below.
|
Mahindra Auto Zimbabwe Information Officer |
|
Information Officer: Tafadzwa Kuseri Croco Holdings (Pty) Ltd BB House, 125 Leopold Takawira Avenue, Harare, Zimbabwe Email address: dpo@crocoholdings.co.zw Cell: 0772315194 |
