Definitions

Bank means The Standard Bank of South Africa Limited, its successors and assigns.

Data shall have the same meaning given to it in ECTA of which means electronic representations of information in any form, and for purposes of this terms and conditions shall be inclusive of Personal Information.

DealersOnline means Crownmill Trading (Pty) Ltd trading as DealersOnline, and for purposes of this terms and conditions the duly appointed third-party service provider; and we, us and our shall also refer to the same.

ECTA means the Electronic Communications and Transactions Act, No. 25 of 2002 as amended.

Group means Standard Bank Group Limited and all of its subsidiaries.

Person means a natural person or a juristic person.

Personal Information shall have the same meaning given to it in POPIA of which means information relating to an identifiable, living, natural person and where applicable, an identifiable, existing juristic person, including, but not limited to: 

1. information relating to race, gender, sex, pregnancy, marital status, nationality, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of a person; 
2. information relating to education, medical, financial, criminal or employment history; 
3. any identifying number, symbol, e-mail address, physical address, telephone number, location information;, online identifier or any other particular assignment of the person; biometric information; personal opinions, views or preferences to the person;
4. biometric information of the person;
5. personal opinions, views or preferences of the person;
6. correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; 
7. the views and opinions of another individual about the person;
8. the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person.

Process means any operation or activity or any set of operations, whether automated or not, concerning Personal Information, including:

1. the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
2. dissemination by means of transmission, distribution or making available in any other form; or
3. merging, linking, as well as restriction, degradation, erasure or destruction of information. 

Processing and Processed shall have a similar meaning. 

POPI means the Protection of Personal Information Act, No. 4 of 2013.

Introduction

DealersOnline is duly appointed by the Bank to render fleet disposal services on behalf of the Bank as required and agreed upon. In order to ensure performance and conclusion of these services DealersOnline shall be required to process Personal Information when rendering respective services.

Any and all Personal Information we Process shall be treated as private and confidential at all times. We are committed in the protection of your Personal Information and the responsibilities assigned in the processing thereof and shall comply with applicable privacy protection laws as well as the respective Privacy Protection Policies of the Bank.

Processing of Personal Information

3.1 By providing us with consent to Process your Personal Information, you agree that we may collect Personal Information from you directly as necessary and where required from other third parties or public sources for credit, fraud and compliance purposes on a lawful and reasonable basis, as well as for the purposes as set out in this Privacy Consent Terms and Conditions.

3.2 Where Personal Information is provided to us on behalf of another Person (including, but not limited to: account signatories, shareholders, principal executive officers, trustees and beneficiaries), you confirm that you are authorised to: 

• provide us with the respective Personal Information; 
• provide consent on their behalf to the Processing of their Personal Information, and where applicable any cross-border transfer of Personal Information outside South Africa where the products or services are provided; and 
• receive any privacy notices on their behalf.
  

Purpose for Processing of Personal Information

The purpose for the Processing of the Personal Information shall be for the following:

• to ensure performance or conclusion of the agreed services to be rendered;
• to enable us to provide respective products and services and any other products and services for which you may apply;
• to carry out statistical and other analyses to identify potential markets and trends, to evaluate and improve our business (this includes improving existing and developing new products and services);
• to comply with any obligation imposed by law;
• for any other legitimate or legal interest we or the Bank may have;
  

Sharing and Transfer of Data

5.1 Personal Information shall not be shared or transferred to other third parties, unless such sharing or transfer is required for ordinary business purposes or in terms of the Purpose as provided for at clause 4 above.

5.2 Where Personal Information is shared with other third-parties within South Africa, said third-party shall be required to comply with applicable law, binding rules or agreement which shall provide similar protection as contained within the Bank’s Privacy Protection Policies. 

5.3 Where Personal Information are required to be transferred to a third-party outside of South Africa, said third-party shall comply to either a law, binding corporate rules or binding agreement which provides an adequate or similar level of protection to Personal Information, as contained within the applicable laws of South Africa and the Bank’s Privacy Protection Policies. 

5.4 Further, by providing consent you agree that your Personal Information may be shared with the Bank and within the Group.

Storing of Personal Information

6.1 All Personal Information stored by us shall be retained in accordance with the required retention periods as defined by applicable law for legitimate business purposes.

6.2 Any data no longer required to be stored subject to clause 6.1 above shall be deleted and archived according to our defined retention schedules.