Purpose
The purpose of this policy is to outline the privacy provisions for safeguarding/protecting the privacy of
any personal information and information system within the ECDHS
The objectives of this policy are to:
(a) mitigate against legal liability by setting boundaries for appropriate employee conduct when
using electronic communications facilities;
(c) ensure that internal/external stakeholders/individuals understand how their personal information
provided to ECDHS would be used
(d) comply with all relevant regulatory and legislative requirements such as the Protection of
Personal Information Act (POPI Act), EU’s General Data Protection Regulation (GDPR) and other
relevant legislations both in South African and International on data privacy law.
Cookies
Departmental Website uses “Cookies” to identify the areas of our website that you have visited. A Cookie is a
small piece of data stored on your computer or mobile device by your web browser. We use Cookies to
enhance the performance and functionality of our website but are non-essential to their use. However, without
these cookies, certain functionality like videos may become unavailable or you would be required to enter
your login details every time you visit the website as we would not be able to remember that you had logged
in previously. Most web browsers can be set to disable the use of Cookies. However, if you disable Cookies,
you may not be able to access functionality on our website correctly or at all. We never place Personally
Identifiable Information in Cookies.
How long do we keep end-users/customers personal information?
How long do we keep end-users/customers personal information?
We keep end-users/customers personal information only so long as we need it to provide Departmental
service offerings/programmes to end-users/customers and fulfil the purposes described in this policy. This is also
the case for anyone (both in the public and private sectors) that we share end-users/customers information
with and who carries out services on our behalf.
Do we share the information we collect with third parties?
We may share the information that we collect, both personal and non-personal, with third parties such as
advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or
whose products or services we think may interest our end-users should that be part/complementing our service
offerings or programmes. We may also share it with our current and future affiliated companies, business
partners, and other Public Sector entities and if we are involved in a merger, asset sale or other Government
Department reorganization, we may also share or transfer end-user’s personal and non-personal information
to our successors-in-interest.
We may engage trusted third-party service providers (in both public and private sector) to perform functions
and provide services to us, such as hosting and maintaining our servers and the website, database storage
and management, e-mail management, storage marketing, credit card processing, customer service and
fulfilling orders for products and services end-users/customers may purchase through the digital platforms. We
will likely share end-users/customers personal information, and possibly some non-personal information, with
these third parties to enable them to perform these services on half of ECDHS.
We may share portions of our log file data, including IP addresses, for analytics purposes with third parties such
as web analytics partners, application developers, and ad networks. If end-users/customers IP address is
shared, it may be used to estimate general location and other technographics such as connection speed,
whether end-users/customers have visited the ECDHS digital channels/platforms in a shared location, and type
of the device used to visit the digital channel/platform. They may aggregate information about our advertising
and what end-users/customers see on the digital channels/platforms and then provide auditing, research and reporting for us and our advertisers/stakeholders.