Skip to main content

Indaba Travel

010 141 0783

PRIVACY POLICY

Policy Purpose

This Privacy Policy signifies the organisation’s intent to fair processing of information, to data privacy and describes our approach to data processing. Our organisation processes data required by statutory bodies, and this policy states our commitment to protecting all the information we process, and our adherence to current legislation.

The team at DABA DABA GLOBAL TRAVEL (Pty) Ltd. / trading as INDABA GLOBAL TRAVEL is committed to using information only when permission has been provided to do so, and for a stated purpose.

The Purpose of Data Collection

We collect data from data subjects in accordance with the nature of our business, travel management services in the Tourism Industry and within the scope of our accreditation with various bodies called IATA and ASATA and while operating our business.

Our organisation acts under the auspices of national and sectoral regulations and policies, and we are beholden to a number of statutory bodies that monitor our quality input and output in relation to the core purpose of our business, with monitoring processes that include our compliance with laws that govern us as a company of travel management.

Definitions

For clarity when reading this policy, the following terms are used throughout this policy, and in accordance with privacy laws.

Data subject            Natural person or organisation.

Processing              Collection, receipt, recording, organisation, collation, storage, updating, modification, retrieval, alteration, consultation, dissemination, distribution, merging, linking, restriction, erasure, degradation, destruction of information.

Responsible Party A public or private body or any other person who determines the purpose of and means for processing data

Laws Related to this Policy

Protection of Personal Information Act 4 of 2013 (POPIA). Regulations relating to the protection of personal information. Promotion of Access to Information Act 2 of 2000 (PAIA).

Regulations regarding the promotion of access to information

Oversight

We recognise the powers of the Information Regulator that has oversight in terms of compliance with the Act, and we will adhere to any guidelines and directives issued by the Regulator.

Information Officer

In accordance with the law, our organisation has appointed an Information Officer and/ or a Deputy Information Officer.

The Officers will take responsibility and accountability for gathering data and processing information, for the secure storage of information, and for responding to requests for information from data subjects.

TouchPoints In Our Business

A “TouchPoint” is considered to be a point where data is or can be gathered and / or exchanged.

TouchPoint                 Why data is gathered

Travel Bodies              ·    We gather data from travellers that is stored with identifiers;

  • The Travel Bodies stores data related to our company that can be identified as relevant to our organisation in order to monitor levels of quality;
  • The Travel Bodies, use the information to deliver a service for the client and third

Website                        ·    Our website uses Cookies (small packets of information) in order to ensure optimal functionality and to provide information about website users.

  • We have a “contact us” form on our website that can be used to reach out to

Suppliers and vendors

  • We communicate with and do business with a variety of companies that supply us with goods and services to ensure the smooth running of our business
  • These companies store information that we give them, with such information necessary to transact business, with a common purpose in mind which is travel

Staff                              ·    Our staff signs a non-disclosure agreement with the company

  • Our staff uses information in a sensitive manner
  • Working with the government projects, our staff takes responsibility to not mis-use data and information with contacted travellers to their benefit
  • There will be no bribery accepted or presented by both the client and company and the third

Obtaining Permission to Use Data

We will always ask permission to before we gather data and before we process information.

Permission may be gathered via a “consent form”, or a similar notice on the website, or a usage notice in a virtual environment if a training session is being recorded.

The purpose for which we gather the data will always be made known to Data Subjects at the time of obtaining consent.

Data Subject Rights

We recognise the rights afforded to data subjects under the Act, and will ensure that our processes support these rights.

The right to:

1

Be notified that information is being collected AND

Be notified if information has been accessed by an unauthorised person.

2

Establish whether a responsible party holds personal information and request access to the information that is held.

3

Request the destruction, correction of deletion of information about a data subject’s own information.

4

Object on reasonable grounds to the processing of a data subject’s own information.

5

Object to the processing of a data subject’s own information for the purpose of direct marketing.

6

Not have personal information processed for the purpose of direct and / or unsolicited marketing without a means to stop the marketing.

7

Not to be subject under certain circumstances to decisions based solely on the basis of automated processing of personal information.

8

Submit a complaint to the Information Regulator regarding alleged interference with the protection of personal information.

9

To institute civil proceedings regarding the alleged interference with the protection of personal information.

Information Security

All information collected by us will be stored safely and securely according to strict information security principles. These principles include: confidentiality, access control, privacy, quality, availability, trustworthiness and integrity.

Data and information storage will be in accordance with our Records Management Policy.

Changes to this Policy

We may update this policy from time to time to reflect changes to business practices or for other operational, legal, or regulatory reasons. The updated privacy policy will be published on the website and is always available at our registered address.