Besides cookies, some of our web pages and HTML messages integrate “pixel tags” that allow us to track users’ actions on our sites and recipients of our communications. These tags are used to collect non-personally identifiable data and other information that can be used to improve the services we offer to those who visit us.

Information We Collect When You Apply for a Job

We process the information provided in your resume, our application form, and supporting documentation during the recruitment process solely to assess your suitability for the role, contact you to advance your application, and take up any references you have provided. The basis for processing this information is a potential employment contract, which may be entered into depending on the outcome of our assessment. We also have a legitimate interest in finding suitable candidates for the roles we have. If successful, this data will become part of your employee file.

Processing, Protecting, and Transferring Personal Information

Personal information held by us is processed by appropriate team members for the purposes for which it was provided. We may share your personal information within our organization and outside your country of residence, including:

1. Other group companies belonging to the same building; and/or
2. Storage/logistics/transport companies and distributors of the products you require.

We may share your information with third parties, such as professional advisors, storage/logistics/transport companies, distributors of required products/customers, accountants/auditors and lawyers, IT providers, and government bodies/regulators.

We share your information for the purpose of:

• Fulfilling the contract we have with you;
• Complying with a legal obligation; or
• Our legitimate interest in the effective operation of our organization.

All our third-party service providers and other entities within the organization are required to take appropriate security measures to protect your personal information in accordance with our policies. We do not permit our third-party service providers to use your personal information for their own purposes. We only allow them to process your personal information for specified purposes and in accordance with our instructions.

We may disclose your personal information to a potential buyer or seller if we intend to sell or buy any business or asset.

We take appropriate technical and organizational measures to ensure the security of your personal information, including policies and procedures around information security and document retention and destruction. Only those within our organization who require your personal information for their job performance have access to it, and we do not transfer your information outside of the organization or your country of residence unless we are assured that personal information will be given an equivalent level of protection.

Retention of Your Data

We will not retain your personal information for longer than the necessary period and in compliance with applicable legislation. We determine retention periods for the information we hold based on:

1. Legal obligations related to minimum data retention periods;
2. The purposes for which we process the personal information and whether we can achieve those purposes through other means;
3. Whether the information is required for reporting and analysis related to our operations;
4. The amount, nature, and confidentiality of the personal information;
5. The potential risk of harm from unauthorized use or disclosure of personal information.

Your Rights Regarding Your Information

Subject to certain limitations of certain rights, you have the following rights regarding your information:

• Request access to your personal information (commonly known as a “data subject access request”). This allows you to receive a copy of the personal information we hold about you and check that we are processing it lawfully.
• Request the correction of the personal information that we hold about you. This allows you to correct any incomplete or inaccurate information we hold about you.
• Request the erasure of your personal information. This allows you to ask us to delete or remove personal information where there is no good reason for us to continue processing it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to the processing of your personal information where we rely on a legitimate interest (or that of a third party) and there is something about your particular situation that makes you want to object to processing on this basis. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This allows you to ask us to suspend the processing of your personal information, for example, if you want us to establish its accuracy or the reason for processing.
• Withdraw consent at any time when we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information based on your consent before the point at which you withdraw your consent.

If you have any questions regarding this privacy notice or wish to exercise any rights you may have under applicable data protection laws, please contact us at:

Information Officer: RUI MSGC BAIÃO
Address: 10^th Floor, 80 Strand Street, CBD, Cape Town 8001, Republic of South Africa
Phone Number: (+27) 21 421 71 60/1/2
E-mail: rb@oni.co.za

We will use our best efforts to respond to any requests as soon as reasonably practicable and, in any case, within the legal timeframes in the applicable country. In some cases, we may be able to charge a fee to respond to your request and will inform you of this and any applicable amount before responding.

You should be aware that certain information is exempt from the right of access. This may include information that identifies other individuals or information subject to legal privilege.

You should also be aware that, in some cases, if you do not provide information or exercise any rights regarding deletion or restriction of your information or object to the processing of your information or withdraw consent, we may not be able to fulfill the contracts we have with you.

When you request access to your information, we are required by law to use all reasonable measures to verify your identity before doing so. These measures are designed to protect your information and reduce the risk of identity fraud, identity theft, or unauthorized access to your information.

You also have the right to file a complaint with the relevant supervisory authority, whose details are below: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017
Complaints Email: IR@justice.gov.za
General inquiries Email: inforeg@justice.gov.za.

Changes to Our Privacy Notice
Any changes made to this privacy notice in the future will be posted on the website and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to this notice.
June 20, 2021, version 1