Author
Reisiger
Mar 1, 2024
Reisiger Privacy Policy
Version: 2
Date of 1st version: 2023-08-01 Data
of Current version: 2024-03-01
Classification: Public
1. Purpose
In the digital age, privacy and data security are paramount, especially for businesses engaged in consultancy and due diligence services. Reisiger (Pty) Ltd recognizes the critical importance of these aspects in its operations. This privacy policy outlines our commitment to safeguarding the personal and corporate information entrusted to us by our clients during the due diligence process.
2. Who We Are
Reisiger (Pty) Ltd is a specialist venture building firm, specializing in due diligence services for a diverse clientele. Our expertise lies in meticulously analyzing, validating, and providing insights into the data provided by clients to assist in their decision-making processes. Reisiger has built a portfolio of successful businesses and with years of experience, Reisiger (Pty) Ltd has established itself as a trusted partner for businesses seeking comprehensive due diligence services.
Our Office:
We are a fully remote-working company with registered offices at: 56 Stockenstroom Street Bodorp, George, 2529
Registration Number: 2021/808155/07
In this privacy policy, the terms "We/Us" refer to Reisiger (Pty) Ltd, while "Client" denotes any entity that provides data for due diligence purposes. "Personal information" encompasses all data provided by clients, which may include corporate records, financial data, and any other material required for conducting due diligence.
Contacting Us:
For inquiries or further information about our privacy practices, clients and stakeholders are encouraged to reach out via:
Email: legal@reisiger.org
Postal Address: 56 Stockenstroom Street. Bodorp, George, 6539
3. Our Commitment to Privacy
At Reisiger Pty Ltd, we are deeply committed to the principle of respecting and protecting the privacy of the data we handle. Our approach to data privacy is built on the following core commitments:
Transparency: We believe in being open and clear about how we collect, use, and safeguard the information provided to us. This privacy policy serves as a testament to our dedication to transparency, ensuring that our clients are fully informed about our data handling practices.
Security: Recognizing the sensitive nature of the information involved in due diligence processes, we implement state-of-the-art security measures to prevent unauthorized access, disclosure, alteration, or destruction of data. Our security protocols are regularly reviewed and updated to address emerging threats and ensure the highest level of protection.
Compliance: Reisiger (Pty) Ltd aims to adhere to the legal and regulatory frameworks governing data protection and privacy. We are committed to complying with applicable privacy laws, including but not limited to the General Data Protection Regulation (GDPR), Protection of Personal Information Act (POPI Act), ensuring that our practices meet or exceed the legal requirements.
Client Control and Consent: We respect our clients' rights to control their personal information. Our policy and practices are designed to provide clients with clear choices regarding the use of their data. We obtain explicit consent for any use of data beyond the primary purpose of due diligence, ensuring clients have the power to decide how their information is used.
Continuous Improvement: In a rapidly evolving digital landscape, we recognize the importance of continuously improving our privacy and data protection practices. Reisiger (Pty) Ltd is committed to regular reviews and updates of our policies and procedures to adapt to new challenges and ensure the highest standard of privacy protection.
4. Information We Process
In the course of providing due diligence services, Reisiger (Pty) Ltd processes a wide range of information. This includes, but is not limited to:
Corporate financial records
Operational data
Legal documents and compliance records
Market and competitive analysis data
Any other information provided by clients for the purpose of due diligence.
5. Collection Methods
The information processed by Reisiger (Pty) Ltd is exclusively provided by our clients or obtained with their explicit consent. We ensure that the collection of data is lawful, fair, and transparent, respecting the privacy rights of all parties involved. Our collection methods are designed to ensure that only the necessary information for the due diligence process is obtained, adhering to the principle of data minimization.
6. Purpose of Processing
The primary purpose of processing information is to provide comprehensive due diligence services. This includes:
Assessing the financial health and viability of businesses
Identifying potential legal and compliance risks
Evaluating market positions and competitive landscapes
Supporting clients in making informed business decisions
Every effort is made to ensure that the processing of information is aligned with the specified purpose, and data is not used in a manner that is incompatible with the original intent.
7. Data Security Measures
Reisiger (Pty) Ltd takes the security of client data seriously. We employ a comprehensive suite of security measures designed to protect information from unauthorized access, use, alteration, and destruction. These measures include:
Encryption: Data in transit and at rest is encrypted using industry-standard encryption technologies. This ensures that information is unreadable to unauthorized parties.
Access Control: Access to sensitive data is strictly controlled and limited to authorized personnel only. We employ a need-to-know policy to minimize the risk of data exposure.
Security Training: Our staff receives regular training on data protection and security best practices. This includes understanding the importance of confidentiality and maintaining the integrity and availability of the information.
Incident Response: We have a robust incident response plan in place to quickly address any security breaches. This includes procedures for notification, mitigation, and post-incident analysis to prevent future occurrences.
8. Data Sharing and Disclosure
Reisiger (Pty) Ltd is committed to maintaining the confidentiality of the information entrusted to us. We do not sell, lease, or otherwise disclose personal information to third parties, except in the following circumstances:
With Client Consent: Information may be shared with third parties when we have the client's explicit consent to do so for purposes related to the due diligence process.
Legal Obligations: We may disclose information if required by law, such as in response to a court order, subpoena, or other legal processes.
Service Providers: In some cases, we may share information with service providers who perform functions on our behalf, such as data analysis or legal services. These providers are bound by confidentiality agreements and are prohibited from using the information for any other purpose.
International Data Transfers
Given the global nature of our operations, Reisiger (Pty) Ltd may need to transfer information across international borders. When transferring data internationally, we ensure that:
The receiving country has adequate data protection laws in place, comparable to those of the country where the data was collected.
Appropriate safeguards are implemented, such as standard contractual clauses approved by relevant regulatory authorities, to protect the information during its transfer and in its destination.
Clients are informed about the international transfer of their data and provided with details about the safeguards in place.
9. Data Retention Policies
Reisiger (Pty) Ltd adopts a principled approach to data retention, ensuring that personal information is not kept longer than necessary for the completion of the due diligence process or as required by law. Our retention policy reflects our commitment to data minimization, privacy, and security. The specifics of our data retention policies include:
Retention Period: Data is retained only for the duration necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Secure Deletion: Upon expiration of the retention period, data is securely deleted or anonymized, so it can no longer be associated with an individual.
10. Clients' Rights
Reisiger (Pty) Ltd acknowledges and supports the rights of clients in relation to their personal information, including:
Right to Access: Clients have the right to access the personal information we hold about them and to receive details about how we process it.
Right to Correction: Clients have the right to request the correction of inaccurate or incomplete information.
Right to Erasure: Under certain conditions, clients can request the deletion or removal of personal information where there is no compelling reason for its continued processing.
Right to Restrict Processing: Clients have the right to 'block' or suppress further use of their information in certain circumstances.
Right to Data Portability: Clients have the right to obtain and reuse their personal data for their own purposes across different services.
Right to Object: Clients have the right to object to the processing of their personal data in certain circumstances, including for marketing purposes.
11. Exercising Your Rights
Reisiger (Pty) Ltd is committed to facilitating the exercise of these rights in a straightforward and efficient manner. Clients wishing to exercise any of their rights can contact us through the provided contact details. Our dedicated privacy team will process requests in accordance with applicable laws and within the time frames specified by law.
We may require specific information from the client to help confirm their identity and ensure their right to access the information (or to exercise any of their other rights).
12. Client Consent Management
Consent is a cornerstone of Reisiger Pty Ltd's data handling practices. We ensure that consent is freely given, specific, informed, and unambiguous. Here's how we manage client consent:
Obtaining Consent: Consent is obtained through clear, understandable forms and agreements that specify the use of the data provided. We ensure clients are aware of the purpose of data collection and processing.
Revoking Consent: Clients have the right to withdraw their consent at any time.
Reisiger (Pty) Ltd has established straightforward mechanisms for clients to revoke consent, ensuring their autonomy over their personal information.
Consent Records: We maintain records of consent as proof of our compliance and to safeguard the rights of our clients. These records detail when and how consent was given.
13. Continuous Improvement in Privacy Practices
Recognizing the evolving landscape of data privacy and cybersecurity, Reisiger (Pty) Ltd is committed to continuous improvement of our privacy practices. This commitment involves:
Regular Policy Reviews: Our privacy policies and practices are regularly reviewed and updated to reflect changes in laws, regulations, and industry standards. This ensures our practices remain compliant and effective.
Technology Updates: We continuously evaluate and update our security technologies and measures in response to emerging threats and advancements in data protection technologies.
Training and Awareness: Ongoing training programs for our employees ensure they remain knowledgeable about privacy laws and best practices. This includes regular updates on new privacy regulations and data protection trends.
Stakeholder Engagement: We engage with clients, regulators, and privacy experts to gain insights and feedback on our privacy practices. This collaborative approach helps us to refine our policies and procedures.
Impact Assessments: Reisiger (Pty) Ltd conducts privacy impact assessments for new projects or when changes to processing activities are planned. These assessments help identify potential privacy issues and mitigate risks before they arise.
14. Adapting to New Challenges
The field of data protection is continuously changing, with new challenges emerging as technology advances. Reisiger (Pty) Ltd is dedicated to staying ahead of these challenges, adapting our policies and practices to ensure the highest level of privacy and security for our clients' information.
15. Client Communication and Engagement
Reisiger (Pty) Ltd prioritizes clear and open communication with our clients regarding privacy and data protection matters. Our approach includes:
Regular Updates: We keep our clients informed about any changes to our privacy practices or policies through direct communications and updates on our website.
Accessibility: Our privacy policy and related documents are designed to be easily accessible and understandable to all our clients, ensuring they are fully informed about how their data is handled.
Feedback Mechanism: We encourage and value feedback from our clients regarding our privacy practices. A dedicated channel for privacy inquiries and feedback is maintained to facilitate this communication.
16. Handling Privacy Concerns and Complaints
We are committed to resolving any concerns or complaints about privacy and data protection:
Responsive System: A responsive system is in place for addressing privacy concerns or complaints from clients. This ensures that all issues are acknowledged and addressed promptly.
Internal Review: Privacy concerns and complaints are subject to an internal review process, ensuring a thorough examination of the issue and the identification of appropriate solutions.
Regulatory Compliance: In cases where privacy concerns cannot be resolved internally, clients have the right to lodge a complaint with the relevant data protection authorities. Reisiger (Pty) Ltd commits to cooperating fully with regulatory bodies in the resolution of such complaints.
17. Privacy by Design and Default
At Reisiger Pty Ltd, we incorporate privacy by design and default principles into our operations, ensuring that privacy and data protection are integrated into all our business processes and systems from the outset:
Proactive Measures: We take proactive measures to anticipate and prevent privacy issues before they occur, rather than reacting to them after the fact.
Minimum Data Processing: Only the minimum necessary data is processed to achieve the intended purpose, limiting the scope of data collection and retention.
Secure Development Practices: Our systems and products are developed with robust security features to protect personal information from unauthorized access or disclosure.
Regular Assessments: We conduct regular assessments of our projects and processes to ensure compliance with privacy by design principles, adjusting our practices as necessary to maintain the highest standards of privacy protection.
18. Staff Training and Awareness Programs
Understanding that the human element is crucial in ensuring data privacy and security, Reisiger (Pty) Ltd invests significantly in staff training and awareness programs:
Comprehensive Training: All employees undergo comprehensive training on data protection laws, company privacy policies, and secure data handling practices, with mandatory refresher courses annually or following significant policy changes.
Role-specific Training: Employees handling sensitive data receive additional, role-specific training focused on the unique privacy challenges and responsibilities of their positions.
Awareness Campaigns: Regular awareness campaigns keep privacy and data protection front of mind for all staff, emphasizing the importance of vigilance and adherence to company policies.
19. Proactive Measures for Privacy Breach Detection and Response
Reisiger (Pty) Ltd has implemented robust systems and processes to detect and respond swiftly to any privacy breaches:
Breach Response Plan: A well-defined breach response plan outlines the steps to be taken in the event of a data breach, including containment measures, assessment of the impact, notification of affected parties, and regulatory bodies, where applicable.
Post-Incident Analysis: Following any breach, a thorough post-incident analysis is conducted to identify the root cause and implement measures to prevent future occurrences.
20. Future Outlook on Privacy and Data Protection
As we look to the future, Reisiger (Pty) Ltd is committed to remaining at the forefront of privacy and data protection through:
Adaptation to Emerging Technologies: We continuously assess emerging technologies for their potential impact on privacy and data protection, ensuring that our policies and practices evolve accordingly.
Stakeholder Engagement: Ongoing dialogue with clients, regulators, and privacy advocates helps us anticipate and address new privacy challenges, ensuring that our practices align with evolving expectations and legal requirements.
Investment in Privacy Innovation: We are committed to investing in innovative privacy technologies and methodologies that promise to enhance data protection for our clients, staying ahead of the curve in privacy protection.
21. Compliance with Evolving Privacy Laws
Reisiger (Pty) Ltd recognizes the dynamic nature of privacy legislation globally and adopts a proactive stance towards compliance:
Legal Team Engagement: Our dedicated legal team keeps abreast of developments in privacy laws worldwide, ensuring that our policies and practices are always in alignment with the latest legal requirements.
Privacy Impact Assessments: For new projects or changes to existing processes, privacy impact assessments are conducted to evaluate and mitigate any potential privacy risks, ensuring compliance from the outset.
22. Enhancing Client Relationships through Privacy
We believe that robust privacy practices are foundational to building and maintaining trust with our clients:
Transparency: By being transparent about our data handling practices, we foster trust and confidence among our clients.
Client Empowerment: Providing clients with control over their data and respecting their privacy preferences plays a crucial role in strengthening client relationships.
Privacy as a Value Proposition: We view our commitment to privacy not just as a legal obligation but as a key differentiator that adds value to our services.
23. Ethical Data Practices and Privacy Advocacy
Ethics guide our approach to data privacy, extending beyond compliance to embody a commitment to responsible and respectful data handling:
Ethical Guidelines: Our data handling practices are governed by ethical guidelines that ensure fairness, respect for privacy, and integrity in our operations.
Privacy Advocacy: Reisiger (Pty) Ltd actively participates in privacy advocacy, supporting initiatives that promote stronger privacy protections for individuals and businesses alike.
Community Engagement: We engage with the broader community through educational programs, workshops, and public discussions on the importance of data privacy, contributing to a more informed and privacy-conscious society.
24. Our Pledge to Clients and the Community
We pledge to maintain the highest standards of privacy and data protection, ensuring that our clients' data is handled with the utmost care and respect. This commitment extends beyond mere compliance with laws and regulations to embody a deep-seated respect for privacy as a fundamental human right.
Transparency and Accountability: We commit to being transparent in our data practices and accountable for our actions, fostering a culture of trust and integrity.
Continuous Improvement: Our journey towards privacy excellence is ongoing. We commit to continuously improving our practices, staying abreast of new challenges and opportunities in data protection.
Community and Stakeholder Engagement: We recognize the importance of collaboration in advancing privacy protections. We commit to engaging with our clients, industry peers, regulators, and the privacy community to share knowledge, challenge assumptions, and push the boundaries of what is possible in data privacy.
