Privacy Statement

NEOSS is an initiative of the Department of Science and innovation that is managed and hosted by the CSIR

Introduction:

  • This privacy statement will inform you what the CSIR will do with the Personal Information it collects from you and which you voluntarily provide to the CSIR, it also indicates your rights as a data subject.

Application of this Privacy Statement:

  • This privacy statement will apply to the CSIR and the Personal Information supplied by you. It includes any processing or further processing of the Personal Information by any Operators duly appointed by the CSIR;
  • The CSIR will require explicit consent from data subjects to participate in your research project, until such consent is provided, you will not have access to the Personal Information of the data subject.

Purpose for the collection:

  • To make contact with you and attending to your or the CSIR’s enquiries and requests;
  • For research and statistical analysis purposes, including data analysis;
  • For pursuing and protecting your and/or the CSIR’s legitimate interest, or that of a third party to whom the Personal Information is supplied;
  • To perform internal operations, including administrative duties like maintaining, storing and reporting on the requests received to any regulatory bodies and internally to management;

Implications of withholding consent or Personal Information

  • The CSIR requires your Personal Information for the purposes indicated above, and your explicit consent is mandatory to process the aforementioned Personal Information;
  • Should you elect to withhold consent for the CSIR to process your Personal Information, then the CSIR will be unable to engage with you and/or enter into any subsequent working relationship with you.

Storage, retention and destruction of information

  • Your Personal Information will be stored either physically in the record storerooms or electronically in a centralised database, which, for operational reasons, will be accessible on a need to know and business basis;
  • The CSIR undertakes to conduct regular audits regarding the safety and security of your Personal Information;
  • Once the Personal Information is no longer required because the purpose for which it was held has expired, your Personal Information will be safely and securely archived for the requisite and prescribed retention periods as required by the law. On expiration of this retention period, the CSIR will permanently destroy your Personal Information or send it to approved external storage facilities that are PoPIA compliant, as the case may be.

Access by others and cross border transfers

  • The CSIR may have to disclose your Personal Information to other parties, including potential staff members that will participate in your research project, auditors, regulatory bodies, and/or government officials. The CSIR will always ensure that there is a legitimate reason for such disclosure and that your Personal Information is handled with strict confidentiality and data security conditions;
  • Your Personal will not be transferred across the borders of South Africa.

Right to object and complaints

  • You are encouraged to make immediate contact with the CSIR’s Privacy Office at any time if you are not comfortable or satisfied with the manner in which the CSIR is processing your Personal Information. On receipt of your objection, the CSIR will place a hold on any further processing until the cause of the objection has been resolved. If you are still not satisfied with such process, you have the right to lodge a complaint with the Information Regulator at inforeg@justice.gov.za.

Accuracy of information and responsibility

  • PoPIA requires that all your Personal Information and related details, as supplied are complete, accurate and up-to-date. It will be your responsibility to advise the CSIR of any changes to the Personal Information, as and when these may occur.

Access to the information by the Data Subject

  • You have the right at any time to ask the CSIR to provide you with the details of the Personal Information which the CSIR holds on your behalf; and/or the purpose for which it has been used, provided that such request is made using the standard Section 14 CSIR PAIA process, which can be accessed by downloading and completing the standard request for information form, housed under the CSIR’s Section 14 PAIA Manual which can be found on the CSIR’s website at www.csir.co.za.

Declaration and informed consent

  • You confirm that the Personal Information, provided to the CSIR is accurate, up-to-date, not misleading and is complete in all respects, save where same may change and then in such event, you undertake to advise the CSIR of these changes.
  • In providing the required Personal Information to the CSIR, you consent and give the CSIR permission to process and further process your Personal Information as and where required and acknowledge that you understand the purposes for which the Personal Information is required and for which it will be used.

For further information, contact:
CSIR Privacy Office
privacy@csir.co.za

Physical Address: Privacy Office, Building 23
Meiring Naudé Road
Brummeria
Pretoria, South Africa

Postal Address: Privacy Office, Building 23
PO Box 395
Pretoria 0001, South Africa, Tel: 012 842 7235