EXTERNAL PRIVACY NOTICE

Prista Electronics CC t/a Advanced Electronics Consulting

Guide to contents

Introduction 1
What is personal information 2
Where and when do we collect personal information 2
When will we process your personal information 3
When will we process your special personal information 3
What information do we collect, and how do we use your information 3
How we share your information 5
Your rights and obligations 6
Changes to our privacy notice 6
Other important information 7
Contact Information 7
Document control 8
Change History 8

1. Introduction

In this Privacy Notice, any reference to, “Advanced Electronics Consulting", "we" or "us” are to Prista Electronics CC, a close corporation that trading under the name and style of Advanced Electronics Consulting.

Advanced Electronic Consulting conducts business as an authorized Samsung Service Centre. We offer mobile device, TV and audio repair services in the Sandton area, the greater Gauteng area and South Africa.

Advanced Electronics Consulting recognises its accountability in terms of the Protection of Personal Information Act, 4 of 2013 (hereinafter referred to as POPIA), other privacy protection legislation, together with its regulations to all its clients, suppliers, service providers and other third parties. Advanced Electronics Consulting needs to collect personal information from its clients, suppliers, service providers and other third parties to carry out its business.

To maintain a trust relationship with our Stakeholders, we are committed to complying with both the spirit and the letter of POPIA, other privacy protection legislation, and to always act with due skill, care, and diligence when dealing with personal information.

2. What is personal information

Personal Information according to POPIA, means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to –

Information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth of the person;
Information relating to the education or the medical, financial, criminal, or employment history of the person;
Any identifying number, symbol, e-mail address, telephone number, location information, online identifier, or other particular assignment to the person;
The biometric information of the person;
The personal opinions, views, or preferences of the person;
Correspondence sent by the person that would reveal the contents of the original correspondence;
The views or opinions of another individual about the person; and
The name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.

3. Where and when do we collect personal information

Information you provide to us:

Clients
- Directly from you;
- Quote requests;

Suppliers
- Quotes;
- Invoices;
- Contacts;
- Purchase orders;

4. When will we process your personal information

We will only process your personal information for lawful purposes relating to our business if the following circumstances apply:

You have consented thereto;
a person legally authorised by you, or a court, has consented thereto;
It is necessary to conclude or perform under a contract we have with you;
The law requires or permits it;
It is required to protect or pursue your, our, or a third party’s legitimate interest; and/or
You are a child, and a competent person (such as a parent or guardian) has consented thereto on your behalf.

5. When will we process your special personal information

Special personal information refers to the following categories of information:

Religious and philosophical beliefs;
Race;
Ethnic origin;
Trade union membership;
Political beliefs;
Health including physical or mental health, disability, and medical history;
Biometric information;
Criminal behaviour where it relates to the alleged commission of any offence or the proceedings relating to that offence.

We will process special personal information in the following instances:

You have consented to the processing (in circumstances where we are legally obliged to obtain your consent); or
It is necessary to exercise or defend a right or obligation in law; or
It is necessary to comply with an international legal obligation of public interest; or
It is for certain historical, research, or statistical purposes that would not adversely affect your privacy; or
You have deliberately made your personal information public.

6. What information do we collect, and how do we use your information

Kindly note that the following list is not comprehensive. It sets out the main purposes and data elements collected by Advanced Electronics Consulting.

Clients

Purpose:

Data elements:

· Quoting;

· Invoicing;

· To Repair and/or service your product and/or device;

· To contact you;

· Audit & Record keeping;

· Personal identifiers:

- Title;

- Name and Surname;

- Identity numbers;

- Address (physical and/or postal);

- Contact numbers (landline and/or mobile);

- E-mail addresses;

- Business Name and Trading as name

- Business Registration Numbers;

- VAT numbers;

- Business Name and trading as name;

- Banking details;

· Information about devices and products brought in for repairs or servicing

- Hardware model;

- Device hardware information;

- IMEI number;

- Phone number;

- Serial number;

- Sales code;

- Access recording;

- Current software version;

- MCC (mobile country code);

- MNC (mobile network code;

- MAC address;

- IP address;

- Cookies;

- Beacons;

- Pixels;

- Subscription information;

- Operating systems versions

- Settings of the device used to access services

Service Providers / Suppliers

Purpose:

Data elements:

· Purchase Orders;

· To contact you;

· Audit & Record keeping;

· Business Name and trading as name;

· Business VAT number;

· Business registration number;

· Contact person name and surname and contact details;

· Banking Details;

· Contact numbers (landline and/or mobile);

· Address (physical and/or postal);

· E-mail addresses;

Where possible, we will inform you what information you are required to provide to us (mandatory information) and what information is optional (voluntary information).

7. How we share your information

We may employ third party companies and individuals to facilitate our service to provide the service on our behalf, to perform service-related services, provide security or to assist us in analysing how our service is used.

These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We value your personal information and our service providers are closely selected to ensure that they comply with the relevant safeguards and technical measures in relation to your personal information.

We may also use third-party service providers to monitor and analyse the use of our service.

We may also disclose your information:

Where we have a duty or a right to disclose in terms of law or industry codes;
Where we believe it is necessary to protect our rights.

Legal Disclosures:

We may need to share your information when we believe it is required by law, legal process or to help protect the rights and safety of you, us, or others. We attempt to notify members about legal demands for their data when appropriate in our judgment unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, at our discretion, that the requests are overbroad, vague, or lack proper authority, but we do not promise to challenge every demand.

8. Your rights and obligations

Data Retention:

We keep most of your personal information while we still have a purpose, we need to provide you with services or where we are legally obligated to do so.

We will also keep your information where you have agreed for us to do so, or have given your consent that we are allowed to do so.

We keep some of your information even after our business relationship has terminated, if it is reasonably necessary to comply with our legal obligations, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our other user agreements, or fulfil your request to object to our processing of your information.

You have rights in connection with your personal information. You have many choices about how your information is collected, used, and shared.

In certain circumstances, by law, you have the right to:

Request access to your information:You will be able to ask us what information we have about you as well as ask for a copy of this information. This should be done on request to info@prista.co.za. There are some exemptions, which means you may not always receive all the information we process. When we can give you a copy it might be done at a certain fee, which will also be communicated to you at the time of your query.
Change or correct information:You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Delete information: You can ask us to delete or remove personal information under certain circumstances.
Object to processing: You can do this where we are relying on your legitimate interest, public interest, or our legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your data for direct marketing purposes or where you have given your consent for the specific processing and you want to retract your consent. Retracting your consent does not invalidate the information we lawfully processed while we had your consent to do so.
Request the restriction of processing: You can ask us to suspend the processing of personal data about you, for example, if you want us to establish its accuracy or the reason for processing it.

9. Changes to our privacy notice

Changes to the privacy notice apply to your use of our services. We may modify this privacy notice from time to time, as required by changes in legislation. When material changes are made, we will provide notice through our services, or by other means, to provide you the opportunity to review the changes before they become effective.

You acknowledge that your continued use of our services after we publish our changes to this privacy notice means that the collection, use, and sharing of your personal information is subject to the updated privacy notice.

10. Other important information

Security:

We have put in place appropriate security measures to prevent your data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal information on a business need-to-know basis, and subject to a duty of confidentiality.

Transborder information transfers:

We do not transfer information to any country outside of the Republic of South Africa. However, should it become necessary to transfer personal information to another country for any lawful purposes, we will ensure that anyone to whom it pass personal information is subject to a law, binding corporate rules or binding agreement which provides an adequate level of protection and the third party agrees to treat that personal information with the same level of protection as we are obliged under POPIA.

11. Contact Information

Our Information Officer: Pavel Nikolov

Our Deputy Information Officer: Aleksandar Ninov

Address: 200 Dartfield Road, Kramerville, Sandton, Jhb

Phone Number: 011 444 6608

e-mail address: info@prista.co.za

The Information Regulator:

You have the right to lodge a complaint with the South African Information Regulator. See the Information Regulator contact details below.

Physical Address: JD House, 27 Stiemens Street,

Braamfontein, Johannesburg, 2001

Postal Address: P.O Box 31533, Braamfontein, Johannesburg, 2017

Complaints email: PAIAcomplaints@inforegulator.org.za

General inquiries email: enquiries@inforegulator.org.za

12. Document control

Creation Date
Division Name
Author Name
Author Position
Last Updated
This Version
Latest version approved by the members of Advanced Electronics Consulting

13. Change History

Date	Author	Version	Change Reference

011 444 6608

200 Dartfield Rd, Kramerville,