Protection of Personal Information Act (POPI)

In terms of Section 18 of the POPI Act:

CONSENT TO PROCESS INFORMATION: STUDENTS FOR TRAINING PURPOSES

Collection, Storage, Retention and Destruction of Information:
Personal details are used to comply with legislation as well as ensure that, in terms of the operational needs of the company, we have the information required to function both as a Training Provider and as a Business. Information given will only be used for the purposes for which it is collected, will be stored securely and, in accordance with the Section 24.1.b. of the Companies Act, will be retained for a period of seven years after last entry unless a longer period of retention is required by other public regulation. In this case, information relating to student results must be retained for perpetuity. Information will be destroyed after expiry of the legally required retention period.

Reason why the Information is required:

Voluntary – requested for academic purposes of the company:
•    Alignment with our quality management system, a requirement for all training providers
•    Ensure a timeous and accurate learner certification and exiting function

Mandatory – required by legislation:
•    Keep records for NLRD registration of learners
•    Verification of qualifications as requested by verification agencies from time to time

Right to object:

In terms of S11(3) of the POPI Act, every data subject has the right to object to the processing of his or her personal information. In the event of such an objection a hold will be put on all such processing for that data subject and the proper process will take place to resolve the cause of the objection.

Accuracy of information and onus:
The Protection of Personal Information Act requires that all personal details supplied must be complete, not misleading, accurate and up to date. It must be properly maintained as well as protected. Whilst we, as a company, take responsibility for processing and protection of the information it is your responsibility as a data subject to ensure that the information is complete and accurate and that you advise us of any change of personal details so that it can be accurately maintained.

Storage of information:
Information will be stored electronically in a centralised learner management system, which could be accessible by the SETA and relevant Drake Employees. Where appropriate, some information may be retained in hard copy. In either event, storage will be secure or audited regularly regarding the safety of the information. Where data is stored electronically out of the borders of South Africa, such is done only in countries which have similar privacy laws to our own or where such facilities are bound contractually to no lesser regulations that those imposed by POPI.

Access to the information by the Data Subject:
The subject of the personal information may request access to the information stored in order that they can assure themselves that the data is accurate.