Website Privacy Notice
(ISC)² Gauteng Chapter services, including (without limitation) the website https://isc2chapter-gauteng.co.za (hereinafter: “the website”) and other interactive properties through which the services are delivered (collectively, the “Service”) are owned, operated and distributed by (ISC)² Gauteng Chapter (referred to in this Privacy Notice as “ (ISC)² Gauteng Chapter” or “we” and through similar words such as “us,” “our,” etc.). This Privacy Notice outlines the personal information that (ISC)² Gauteng Chapter may collect, how (ISC)² Gauteng Chapter uses and safeguards that information, and with whom we may share it.
(ISC)² Gauteng Chapter encourages our members, visitors, business associates, and other interested parties to read this Privacy Notice, which applies to all users. By using our Service or submitting personal information to (ISC)² Gauteng Chapter by any other means, you acknowledge that you understand and agree to be bound by this Privacy Notice, and agree that (ISC)² Gauteng Chapter may collect, process, transfer, use, and disclose your personal information as described in this Notice. Further, by accessing any part of the Service, you are agreeing to THE TERMS AND CONDITIONS OF OUR TERMS OF SERVICE (the “Terms of Service”). IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY NOTICE OR OUR TERMS OF SERVICE, PLEASE DO NOT USE ANY OF THE SERVICES.
What personal information do we collect about you?
Personal information (also commonly known as personally identifiable information (PII) or personal data) is information that can be used to identify you, or any other individual to whom the information may relate.
The personal information that we collect directly from those registering for the Service includes the following categories:
- Name and contact information (e.g. address; phone number; email, fax);
- Billing Information (e.g. credit card, bank account, billing contact information)
- Geographic or location information
- Information contained in posts you may on the public forums and interactive features of the Service.
- Other information that may be exchanged in the course of engaging with the Service. You will be aware of any subsequently collected information because it will come directly from you.
Collection of User Generated Content
We may invite you to post content, including your comments and any other information that you would like to be available, which may become public (“User Generated Content”). If you post User Generated Content, all of the information that you post will be available to authorized personnel of (ISC)² Gauteng Chapter. You expressly acknowledge and agree that we may access in real-time, record and store archives of any User Generated Content on our servers to make use of them in connection with the Service. If you submit a review, recommendation, endorsement, or other User Generated Content through the Service, or through other websites including Facebook, Instagram, Google, Yelp, and other similar channels, we may share that review, recommendation, endorsement or content publicly on the Service.
What are the sources of personal information collected by (ISC)² Gauteng Chapter?
When providing personal information to ISC2 Gauteng Chapter as described in this Notice, that personal information is collected directly from you, and you will know the precise personal information being collected by us. (ISC)² Gauteng Chapter does not collect personal information from any other sources, except where it may automatically be collected as described in the section titled “Cookies, Device Data, and How it is Used, if the information in that section is considered personal information.
Why does ISC2 Gauteng Chapter collect your personal information?
Subject to the terms of this Privacy Notice, (ISC)² Gauteng Chapter uses the above-described categories of personal information in several ways. Unless otherwise stated specifically, the above information may be used for any of the following purposes:
- to administer the Service to you;
- to respond to your requests;
- to distribute communications relevant to your use of the Service, such as system updates or information about your use of the Service;
- as may be necessary to support the operation of the Service, such as for billing, account maintenance, and record-keeping purposes;
- to send to you (ISC)² Gauteng Chapter solicitations, product announcements, and the like that we feel may be of interest to you. Please note that you may “opt out” of receiving these marketing materials
- in other manners after subsequent notice is provided to you and/or your consent is obtained, if necessary.
How do we share your Personal Information with third parties?
If you agree to this in writing, we may provide any of the described categories of personal information to (ISC)² Gauteng Chapter employees, consultants, affiliates or other businesses or persons for the purpose of processing such information on our behalf in order to provide the Service to you. In such circumstances, we require that these parties agree to protect the confidentiality of such information consistent with the terms of this Privacy Notice. (ISC)² Gauteng Chapter does not sell, resell, or distribute for re-sale your personal information.
We will not share your personal information with other, third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature which you will specifically be able to opt-out of.
In addition, we may release personal information: (i) to the extent we have a good-faith belief that such action is necessary to comply with any applicable law; (ii) to enforce any provision of the Terms of Service, protect ourselves against any liability, defend ourselves against any claims, protect the rights, property and personal safety of any user, or protect the public welfare; (iii) when disclosure is required to maintain the security and integrity of the Service, or to protect any user’s security or the security of other persons, consistent with applicable laws (iv) to respond to a court order, subpoena, search warrant, or another legal process, to the extent permitted and as restricted by law; or (v) in the event that we go through a business transition, such as a merger, divestiture, acquisition, liquidation or sale of all or a portion of our assets.
Direct Marketing Communications
We may communicate with you using email, SMS, and other channels (sometimes through automated means) as part of our effort to market our products or services, administer or improve our products or services, or for other reasons stated in this Privacy Notice. You have an opportunity to withdraw consent to receive such direct marketing communications, as permitted by law.
If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by submitting a request through the following form: UNSUBSCRIBE HERE, or by using the UNSUBSCRIBE link in any email communication you may have received. Further, you may update your preferences by clicking on “Update your preferences” at the footer of all emails sent to you.
- Noting your preferences at the time you register your account with the Site
- Logging into your account settings and updating your preferences; Contacting us using the contact information provided below
Please note that you may continue to receive non-marketing communications as may be required to maintain your relationship with (ISC)² Gauteng Chapter.
In addition to the communication described here, you may receive third-party marketing communications from providers we have engaged to market or promote our products and services. These third-party providers may be using communications lists they have acquired on their own, and you may have opted-in to those lists through other channels. If you no longer wish to receive emails, SMSs, or other communications from such third parties, you may need to contact that third party directly.
Retention of Data
(ISC)² Gauteng Chapter will retain your personal information only for as long as is necessary for the purposes set out in this Notice. We will retain and use personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
(ISC)² Gauteng Chapter will also retain usage data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Sites and/or Portals, or we are legally obligated to retain this data for longer periods.
Cookies, Device Data, and How it is Used
International Data Transfer
For individuals located outside the Republic Of South Africa, in particular in Switzerland, the United Kingdom and the European Economic Area (EEA), please note that (ISC)² Gauteng Chapter is a South African based company. (ISC)² Gauteng Chapter does not market to or solicit customers from outside the Republic Of South Africa, therefore, users of the Service should not expect to avail themselves of the rights provided under the EU’s General Data Protection Regulation (“GDPR”). If you use the Service, all information, including personal information, will be transferred to (ISC)² Gauteng Chapter in the Republic Of South Africa. By using the Service, you unambiguously consent to the transfer of your personal information and other information to the Republic Of South Africa and elsewhere for the purposes and uses described in this Notice. Further, you acknowledge that (ISC)² Gauteng Chapter is not subject to the GDPR or similar international privacy laws, and, therefore, you will be unable to claim the privacy rights provided in those laws.
We may use third-party service providers to help us deliver certain services, and it may result in the processing of personal information in data centres and locations outside of the Republic Of South Africa. For example, these service providers may provide us with essential information technology or tools we use to run our business. We may permit these service providers to process our business information and/or your personal information. We do not permit these service providers to process any personal information outside of a contract, and these service providers may collect personal information on our behalf. Our third-party service providers are required to comply fully with this Privacy Notice.
South African Privacy Rights
If you are a South African resident, South Africa law may provide you with certain rights with regard to your personal information under the Protection of Personal Information Act (“POPIA”) and Promotion of Access to Information Act (“PAIA”).as well as the Consumer Protection Act Throughout this Privacy Notice you will find the information required by POPIA regarding the categories of personal information collected from you; the purposes for which we use personal information, and the categories of third parties your data may be shared with. This information is current as of the date of the Notice and is applicable in the 12 months preceding the effective date of the Notice.
As a South African resident, the POPIA and PAIA provide you with the ability to make inquiries regarding your personal information. Specifically, the degree to which the information is not already provided in this Privacy Notice, you have the right to request disclosure or action your personal information, including:
- If your personal information is collected by us.
- The specific pieces of personal information collected about you.
- The ability to correct or delete certain personal information collected about you.
- The ability to delete all the personal information collected about you, subject to certain exceptions.
- To opt-in or opt-out of direct marketing to you.
- To object to processing of your personal information, or
- Appeal any rejection of access to your personal information
You may submit a request regarding your rights under POPIA or PAIA by submitting a request through the following form: CLICK HERE.
If you have a general query regarding privacy: CLICK HERE.
If we receive a POPIA request from you, we will first make a determination regarding the applicability of the law, and we will then take steps to verify your identity prior to responding. The steps to verify your identity may vary based on our relationship with you, but, at a minimum, it will take the form of confirming and matching the information submitted in the request with information already held by (ISC)² Gauteng Chapter and/or contacting you through previously used channels to confirm that you submitted the request (i.e. confirming identity through the contact information that we have on file, and/or the contact information submitted to make the request).
The (ISC)² Gauteng Chapter does not knowingly collect or process special personal information such as your religious or philosophical beliefs, race or ethnic origins, trade union memberships, political persuasion, health or sex life, or your criminal behaviour or biometric information.
If you have a comment, question, or complaint about how we are processing your personal information, we hope that you contact us at [INSERT FORM] in order to allow us to resolve the matter. In addition, if you are located in the Republic of South Africa, you may submit a complaint regarding the processing of your personal information to the Information Regulator at the following link: https://www.justice.gov.za/inforeg/contact.html.
Information Storage and Security
We employ industry-standard and/or generally accepted security measures designed to secure the integrity and confidentiality of all information submitted through the Service. However, the security of information transmitted through the internet or via a mobile device can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data.
Users of the Service are responsible for maintaining the security of any password, user ID or other forms of authentication involved in obtaining access to password protected or secure areas of the Service. In order to protect you and your information, we may suspend your use of any of the Services, without notice, pending an investigation, if any breach of security is suspected.
The Service may contain links to other websites maintained by third parties. Please be aware that we exercise no control over linked sites and (ISC)² Gauteng Chapter is not responsible for the privacy practices or the content of such sites. Each linked site maintains its own independent privacy and data collection policies and procedures, and you are encouraged to view the privacy policies of these other sites before providing any personal information.
You hereby acknowledge and agree that (ISC)² Gauteng Chapter is not responsible for the privacy practices, data collection policies and procedures, or the content of such third-party sites, and you hereby release (ISC)² Gauteng Chapter from any and all claims arising out of or related to the privacy practices, data collection policies and procedures, and/or the content of such third-party sites.
The Service is not intended for children under the age of 18, and (ISC)² Gauteng Chapter does not knowingly collect the personal information of children under the age of 18.
Changes to this Privacy Notice
(ISC)² Gauteng Chapter reserves the right to modify this Privacy Notice from time to time in order that it accurately reflects the regulatory environment and our data collection principles. When material changes are made to this Privacy Notice, ISC2 Gauteng Chapter will post the revised Notice on the website. This Privacy Notice was last modified as of 28/08/2021.
If you have any questions or comments about this Privacy Notice or the Service provided by (ISC)² Gauteng Chapter, please contact us at:
(ISC)² Gauteng Chapter
Postnet Suite 579
Private Bag X26
Tel: +27 87 0949 379