Processing Limitation. Lesaka will ensure that personal information under its control is processed: ▪ in a fair, lawful, and non-excessive manner, and ▪ only with the informed consent of the data subject, and ▪ only for a specifically defined purpose. ▇▇▇▇▇▇ will inform the data subject of the reasons for collecting his, her or its personal information and obtain written consent prior to processing personal information. Where applicable, the data subject must be informed of the possibility that their personal information will be shared with other aspects of ▇▇▇▇▇▇’s business and be provided with the reasons for doing so. Where ▇▇▇▇▇▇ is the responsible party, it will only process a data subject's personal information (other than for special personal information) where: ▪ consent of the data subject (or a competent person, where the data subject is a child) is obtained; ▪ processing is necessary to carry out the actions for conclusion of a contract to which a data subject is party; ▪ processing complies with an obligation imposed by law on ▇▇▇▇▇▇; ▪ processing protects a legitimate interest of the data subject; and/or ▪ processing is necessary for pursuing the legitimate interests of ▇▇▇▇▇▇ or of a third party to whom the information is supplied. Lesaka will only process personal information where one of the legal bases referred to above are present. Where required (i.e., where we are not relying on a legal ground listed above), ▇▇▇▇▇▇ will obtain the data subject's consent prior to collecting, and in any case prior to using or disclosing, the personal information for any purpose. ▇▇▇▇▇▇ will make the manner and reason for which the personal information will be processed clear to the data subject. Where ▇▇▇▇▇▇ is relying on a data subject's consent as the legal basis for processing personal information, the data subject may withdraw his/her/its consent or may object to ▇▇▇▇▇▇ 's processing of the personal information at any time. However, this will not affect the lawfulness of any processing carried out prior to the withdrawal of consent or any processing justified by any other legal ground provided under POPIA. Approved by: Lesaka Board Last revision date: March 2023 Version: 4 Date of next review: July 2023 Page 9 of 22 If the consent is withdrawn or if there is otherwise a justified objection against the use or the processing of such personal information, ▇▇▇▇▇▇ will ensure that the personal information is no longer processed. Special personal information is sensitive personal information of a data subject and Lesaka acknowledges that it will generally not process special personal information unless: ▪ processing is carried out in accordance with the data subject's consent; ▪ processing is necessary for the establishment, exercise or defence of a right or obligation in law; ▪ processing is for historical, statistical or research purposes, subject to stipulated safeguards; ▪ information has deliberately been made public by the data subject; or ▪ specific authorisation applies in terms of POPIA. ▇▇▇▇▇▇ acknowledges that it may not process any personal information concerning a child and will only do so where it has obtained the consent of the parent or guardian of that child or where it is permitted to do so in accordance with applicable laws.
Appears in 1 contract
Processing Limitation. Lesaka will ensure that personal information under its control is processed: ▪ in a fair, lawful, and non-excessive manner, and ▪ only with the informed consent of the data subject, and ▪ only for a specifically defined purpose. ▇▇▇▇▇▇ will inform the data subject of the reasons for collecting his, her or its personal information and obtain written consent prior to processing personal information. Where applicable, the data subject must be informed of the possibility that their personal information will be shared with other aspects of ▇▇▇▇▇▇’s business and be provided with the reasons for doing so. Where ▇▇▇▇▇▇ is the responsible party, it will only process a data subject's personal information (other than for special personal information) where: ▪ consent of the data subject (or a competent person, where the data subject is a child) is obtained; ▪ processing is necessary to carry out the actions for conclusion of a contract to which a data subject is party; ▪ processing complies with an obligation imposed by law on ▇▇▇▇▇▇Lesaka; ▪ processing protects a legitimate interest of the data subject; and/or and/ or ▪ processing is necessary for pursuing the legitimate interests of ▇▇▇▇▇▇ or of a third party to whom the information is supplied. Lesaka will only process personal information where one of the legal bases referred to above are present. Where required (i.e., where we are not relying on a legal ground listed above), ▇▇▇▇▇▇ will obtain the data subject's consent prior to collecting, and in any case prior to using or disclosing, the personal information for any purpose. ▇▇▇▇▇▇ will make the manner and reason for which the personal information will be processed clear to the data subject. Where ▇▇▇▇▇▇ is relying on a data subject's consent as the legal basis for processing personal information, the data subject may withdraw his/her/its consent or may object to ▇▇▇▇▇▇ 's processing of the personal information at any time. However, this will not affect the lawfulness of any processing carried out prior to the withdrawal of consent or any processing justified by any other legal ground provided under POPIA. Approved by: Lesaka Board Last revision date: March 2023 Version: 4 Date of next review: July 2023 Page 9 of 22 If the consent is withdrawn or if there is otherwise a justified objection against the use or the processing of such personal information, ▇▇▇▇▇▇ will ensure that the personal information is no longer processed. Special personal information is sensitive personal information of a data subject and Lesaka acknowledges that it will generally not process special personal information unless: ▪ processing is carried out in accordance with the data subject's consent; ▪ processing is necessary for the establishment, exercise or defence of a right or obligation in law; ▪ processing is for historical, statistical or research purposes, subject to stipulated safeguards; ▪ information has deliberately been made public by the data subject; or ▪ specific authorisation applies in terms of POPIA. ▇▇▇▇▇▇ acknowledges that it may not process any personal information concerning a child and will only do so where it has obtained the consent of the parent or guardian of that child or where it is permitted to do so in accordance with applicable laws.
Appears in 1 contract