We at Macmillan South Africa (Pty) Ltd. (“Macmillan Education”) respect your concerns about privacy and value the relationship we have with you. This Online Privacy Notice applies to personal information we collect on this website (the “Site”).
We will only use the personal information gathered over this website as set out in this policy. Below you will find information on how we use your personal information, for which purposes your personal information is used, with whom it is shared and what control and information rights you may have.
I. Summary of our processing activities
The following summary provides you with a quick overview of the processing activities that are undertaken on our website. You will find more detailed information under the indicated sections below.
When you visit our website for informational reasons only limited personal information will be processed to provide you with the website itself (see III).
In case you register for one of our services (e.g. workshop enquiry, contact request, or webshop) or subscribe to our newsletter, further personal information will be processed in the scope of such services (see IV, V and VI).
Furthermore, your personal information will be used to provide you with interesting advertising for our services and products (see IV) and for statistical analysis that helps us to improve our website (see VI). Additionally, we improve your website experience with third party content (see VII).
Your personal information may be disclosed to third parties (see VII and VIII) that might be located outside your country of residence; potentially, different data protection standards may apply (see VIII).
We have implemented appropriate safeguards to secure your personal information (see IX) and retain your personal information only as long as necessary (see X).
Under the legislation applicable to you, you may be entitled to exercise certain rights with regard to the processing of your personal information (see XI).
Personal information: means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to— (a) information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person; (b) information relating to the education or the medical, financial, criminal or employment history of the person; (c) any identifying number, symbol, email address, physical address, telephone number, location information, online identifier or other particular assignment to the person; (d) the biometric information of the person; (e) the personal opinions, views or preferences of the person; (f) correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; (g) the views or opinions of another individual about the person; and (h) the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.
Processing: means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including— (a) the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use; (b) dissemination by means of transmission, distribution or making available in any other form; or (c) merging, linking, as well as restriction, degradation, erasure or destruction of information.
III. Informational use of the website
When you visit our website for informational reasons, i.e. without making a purchase or registering for any of our provided services listed under IV and without providing us with personal information in any other form, we may automatically collect additional information about you which will contain personal information only in limited cases and which is automatically recognised by our server, such as:
device type, name and IDs;
the date and time of your requests;
the content of your requests;
information on your browser version;
your screen resolution;
information on your operating system, including language settings.
We use such information only to assist us in providing an effective service (e.g. to adapt our website to the needs of your device or to allow you to log in to our website), and to collect broad demographic information for anonymised, aggregated use.
Information automatically collected is necessary for us to provide the website, and for our legitimate interest to guarantee the website’s stability and security.
IV. Obtaining services from our website
Our website offers a webshop as well as a portal for free resources. You can also provide us with your contact details so that we can contact you or register you to receive updates and information about services and products that may be of interest to you. We will collect personal information from you when you use our website in any of the ways we have mentioned. The personal information that we process in this regard is as follows:
Name, email address, physical address, contact number.
We will process the personal information you provide and the information that we gather through your use of the website to:
Identify you when you visit the website;
Provide you with the services and information offered through the website or which you request;
Communicate with you;
Send you marketing about additional products and services;
Conduct market research to improve the products and services that we provide.
We use the personal information and contact data you provide to inform you directly about our additional products and services. The use of your personal information for directly advertising related products and services is a legitimate interest for us as a provider of this website.
You can object to the use of your personal information for direct marketing at any time. We will then refrain from any processing to the extent it is related to such purposes. You can inform us about your objection by contacting us at email@example.com. You can also opt to unsubscribe when you receive marketing information.
Your personal information is, in the absence of exceptions within the specific services mentioned below, retained for one year. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services or payment problems can lead to a longer retention of your personal information.
By statutory law we are required to retain financial data in relation to transactions (including address, payment and order information) for 5 years.
V. Automated decision making
We do not use your personal information for automated decision making which produces legal effects concerning you or similarly significantly affects you.
For statistical analyses we use a tool called Google Analytics, which is a web analytics service provided by Google LLC, Googleplex, Mountain View, California, U.S, to collect information about the use of this site.
The tool collects information such as users visiting the website, what content pages are accessed, IP addresses (geographic location), type of device you are accessing the website on, language of device you are accessing the website on, etc. We use the information we get from Google Analytics only to determine the most useful information you are looking for, and to improve and optimise this website. We do not combine the information collected through the use of Google Analytics with personal information.
The information generated about your use of the website will be transmitted to and stored by Google Analytics on servers in the United States. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.
The legal basis for this processing represents our legitimate interest to analyse our website’s traffic to improve the users’ experience and to optimise the website in general.
VII. Third party content
We use YouTube’s service in order to host videos on our website. This processing represents our legitimate interest to improve your website experience and to optimise our services.
We use Snapplify (Pty) Ltd to host and provide access to our ebooks. If you purchase an ebook from our website you will have to create an account with Snapplify via its website in order to access your ebook.
VIII. Cross border data transfers
Within the scope of our information sharing activities set out above, your personal information may be transferred to other countries (including countries outside South Africa) which may have different data protection standards from your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal information with such countries.
In the case of a transfer to a country outside of South Africa, this transfer is safeguarded by EU Standard Contractual Clauses. You can find further information about the aforementioned safeguards at https://ec.europa.eu/info/law/law-topic/data-protection_en
or by contacting the Data Protection Team at firstname.lastname@example.org
We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal information under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal information. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.
You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.
X. Data retention
We strive to keep our processing activities with respect to your personal information as limited as possible. In the absence of specific retention periods set out in this policy, your personal information will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.
XI. Your rights
Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:
1. require (i) information as to whether your personal information is retained and (ii) access to and/or duplicates of your personal information retained, including the purposes of the processing, the categories of personal information concerned, and the data recipients as well as potential retention periods;
2. request rectification, removal or restriction of your personal information, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
3. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal information at any time;
4. object, on grounds relating to your particular situation, that your personal information shall be subject to processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal information or present you our compelling legitimate grounds for an ongoing processing;
5. take legal actions in relation to any potential breach of your rights regarding the processing of your personal information, as well as to lodge complaints before the competent data protection regulators;
6. require (i) to receive the personal information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal information transmitted directly from us to another controller; and/or
7. not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affect you with similar significance.
You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us using the contact details set out below.
XII. Contacting us
The information you provide when contacting us at email@example.com will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.
XIII. Amendments to this policy
XIV. Complaints to the Regulator
If you are dissatisfied with how we have processed your personal information, you have a right to lodge a complaint with the Information Regulator. You can contact them on firstname.lastname@example.org .