Privacy Policy

MARSH FIDELITY (PTY) LTD

Registration Number: 2020/204203/07
(Hereinafter Marsh Fidelity)

The Promotion of Access to Information Act, No. 2of 2000 (the “Act) was enacted on 3 February 2000, giving effect to the constitutional right in terms of section 32 of the Bill of Rights contained in the Constitution of the Republic of South Africa 108 of 1996 (the “Constitution”) of access to any

Information held by the state and any information that is held by another person and that is required for the exercise or protection of any rights.
In terms of section 51 of the Act, all Private Bodies are required to compile an Information Manual (“PAIA Manual”).
Where a request is made in terms of the Act, the body to whom the request is made is obliged to release the information, subject to applicable legislative and / or regulatory requirements, except where the Act expressly provides that the information may be adopted when requesting information from a public or private body.
This PAIA Manual of Marsh Fidelity is available at its premises: 9 Church Place, Westville, KZN, 3629
The purpose of PAIA is to promote the right of access to information, to foster a culture of transparency and accountability within Marsh Fidelity by giving the right to information that is required for the exercise or protection of any right and to actively promote a society in which the people of South Africa have effective access to information to enable them to exercise and protect their rights.

Marsh Fidelity offers Deceased Estate and Fiduciary Services to clients in the KZN region.

Purpose of the PAIA Manual

In order to promote effective governance of private bodies, it is necessary to ensure that everyone is empowered and educated to understand their rights in relation to public and private bodies.
Section 9 of the Act recognises that the right to access information cannot be unlimited and should be subject to justifiable limitations, including, but not limited to:
Limitations aimed at the reasonable protection of privacy;
Commercial confidentiality; and
Effective, efficient and good governance;

And in a manner which balances that right with any other rights, including such rights contained in the Bill of Rights in the Constitution.
This PAIA Manual complies with the requirements of guide mentioned in section 10 of the Act and recognises that upon commencement of the Protection of Personal Information Act 4 of 2013, that the appointed Information Regulator will be responsible to regulate compliance with the Act and its regulations by private and public bodies.

Contact Details of the Managing Director [Section 51(1)(a)]

Managing Director:
Daniel Marsh
Registered Address:
9 Church Place
Westville, KZN, 3629
Postal Address:
P O Box 2381, Westville, 3630
Telephone Number:
+27 82 839 6160
Website: www.marshfidelity.co.za

The Act prescribes the appointment of an Information Officer for public bodies where such Information Officer is responsible to, inter alia, assess request for access to information. The head of a private body fulfils such a function in terms of section 51. Marsh Fidelity has opted to appoint an Information Officer to assess such a request for access to information as well as to oversee its required functions in terms of the Act.
The Information Officer appointed in terms of the Act also refers to the Information Officer as referred to in the Protection of Personal Information Act 4 of 2013. The Information Officer oversees the functions and responsibilities as required for in terms of both this Act as well as the duties and responsibilities in terms of section 55 of the Protection of Personal Information Act 4 of 2013 after registering with the Information Regulator.
The Information Officer may appoint, where it is deemed necessary, Deputy Information Officers, as allowed in terms of section 17 of the Act as well as section 56 of the Protection of Personal Information Act 4 of 2013. This is in order to render Marsh Fidelity as accessible as reasonable possible for requesters of its records and to ensure fulfilment of its obligations and responsibilities as prescribed in terms of section 55 of the Protection of Personal Information Act 4 of 2013. All request for information in terms of this Act must be addressed to the Information Officer.

Contact Details of the Information Officer

Information Officer:
Daniel Marsh
Physical Address:
9 Church Place,
Westville, KZN, 3629
Telephone Number:
+27 82 839 6160
Email:
[email protected]

The ACT grants a requester access to records of a private body, if the record is required for the exercise or protection of any rights. If a public body lodges a request, the public body must be acting in the public interest.
Requests in terms of the ACT shall be made in accordance with the prescribed procedures, at the rates provided. The forms and tariff are dealt with in paragraphs 6 and 7 of the Act.
Requesters are referred to the Guide in terms of Section 10 which has been compiled by the South African Human Rights Commission, which will contain information for the purposes of exercising Constitutional Rights. The Guide is available from the SAHRC.
The contact details of the Commission are:

Contact body:

The South African Human Rights Commission
Physical Address:
PAIA Unit
29 Princess of Wales Terrace Cnr York and Andrew Streets Parktown
Postal Address:
Private Bag 2700, Houghton 2041
Telephone Number:
+27 11 877 3600
E-Mail:
[email protected]
Web Site:
www.sahrc.org.za

The Latest Notice in Terms of Section 52(2) (if any)[Section 51(1)(c)]

No notice has been published on the categories of records that are automatically available without a person having to request access in terms of Section 52(2) of PAIA.

Subjects and Categories of Records Available only on Request to Access in Terms of the Act (Section 51(1) (e))

Records held by Marsh Fidelity
For the purposes of this clause 8.1, “Personnel” refers to any person who works for, or provides services to, or on behalf of Marsh Fidelity and receives or is entitled to receive remuneration and any other person who assist in carrying out or conducting the business of Marsh Fidelity. This includes, without limitation, directors (executive and non-executive), all permanent, temporary and part-time staff, as well as contract workers.
This clause serves as a reference to the categories of information that Marsh Fidelity holds. The information is classified and grouped according to records relating to the following subjects and categories:

Subject
Category
Companies Act Records
Documents of Incorporation Cor14.3

Financial Records
Accounting Records;
Annual Financial Statements Asset Registers;
Bank Statements;
Banking details and bank accounts;
General ledgers and subsidiary ledgers; General reconciliation;
Invoices;
Paid Cheques;
Rental Agreements; and
Tax Returns

Records of payments made to SARS

Personnel Documents And Records

We do not employ any staff at this stage

Procurement Department
Standard Terms and conditions for supply of services and products are adhered to.
Sales Department/Customers
We hold financial information for clients, along with their personal names, company information, addresses and email addresses
Marketing Department
Social Media Advertising
Risk Management and Audit
n/a

Safety, Health and Environment
Basic Health & Safety procedures are followed in the office

IT Department
Computer / mobile device usage policy documentation; Disaster recovery plans;
Hardware asset registers;
Information security policies/standards/procedures;
Software licensing; and
System documentation.
Corporate Social Responsibility (CSR)
n/a

Note that the accessibility of the records may be subject to the grounds of refusal set out in this PAIA manual. Amongst other, records deemed confidential on the part of a third party, will necessitate permission from the third party concerned, in addition to normal requirements, before Marsh Fidelity will consider access.

Records Available without a Request to Access in terms of the Act

Records of a public nature, typically those disclosed on the Marsh Fidelity website and in its various annual reports, may be accessed without the need to submit a formal application.
Other non-confidential records, such as statutory records maintained at CIPC, may also be accessed without the need to submit a formal application, however, please note that an appointment to view such records will still have to be made with the Information Officer.

Description of the Records of the Body which are Available in Accordance with any other Legislation (Section 51(1) (d))

Where applicable to its operations, Marsh Fidelity also retains records and documents in terms of the legislation below. Unless disclosure is prohibited in terms of legislation, regulations, contractual agreement or otherwise, records that are required to be made available in terms of these acts shall be made available for inspection by interested parties in terms of the requirements and conditions of the Act; the below mentioned legislation and applicable internal policies and procedures, should such interested parties be entitled to such information. A request to access must be done in accordance with the prescriptions of the Act.
Auditing Professions Act, No 26 of 2005;
Basic Conditions of Employment Act, No 75 of 1997;
Broad- Based Black Economic Empowerment Act, No 75 of 1997;
Business Act, No 71 of 1991;
Companies Act, No 71 of 2008;
Compensation for Occupational Injuries & Diseases Act, 130 of 1993;
Competition Act, No.71 of 2008;
Constitution of the Republic of South Africa 2008;
Copyright Act, No 98 of 1978;
Customs & Excise Act, 91 of 1964;
Electronic Communications Act, No 36 of 2005;
Electronic Communications and Transactions Act, No 25 of 2002;
Employment Equity Act, No 55 of 1998;
Financial Intelligence Centre Act, No 38 of 2001;
Identification Act, No. 68 of 1997;
Income Tax Act, No 58 of 1962;
Intellectual Property Laws Amendment Act, No 38 of 1997;
Labour Relations Act, No 66 of 1995;
Long Term Insurance Act, No 52 of 1998;
Occupational Health & Safety Act, No 85 of 1993;
Pension Funds Act, No 24 of 1956;
Prescription Act, No 68 of 1969;
Prevention of Organised Crime Act, No 121 of 1998;
Promotion of Access to Information Act, No 2 of 2000;
Protection of Personal Information Act, No. 4 of 2013;

Regulation of Interception of Communications and Provision of Communication-Related Information Act 70 of 2002

aa. Revenue laws Second Amendment Act. No 61 of 2008; bb. Skills Development Levies Act No. 9 of 1999;
cc. Short-term Insurance Act No. 53 of 1998; dd. Trust Property Control Act 57 of 1988
ee. Unemployment Insurance Contributions Act 4 of 2002; ff. Unemployment Insurance Act No. 30 of 1966;
gg. Value Added Tax Act 89 of 1991.
* Although we have used our best endeavours to supply a list of applicable legislation, it is possible that this list may be incomplete. Whenever it comes to our attention that existing or new legislation allows a Requester access on a basis other than as set out in PAIA, we shall update the list accordingly. If a Requester believes that a right of access to a record exists in terms of other legislation listed above or any other legislation, the Requester is required to indicate what legislative right the request is based on, to allow the Information Officer the opportunity of considering the request in light thereof.
It is further recorded that the accessibility of documents and records may be subject to the grounds of refusal set out in this PAIA Manual.

Detail to Facilitate a Request for Access to a Record of Marsh Fidelity (Section 51(1) (e))

The requester must comply with all the procedural requirements contained in the Act relating to the request for access to a record.
The requester must complete the prescribed form enclosed herewith, and submit same as well as payment of a request fee and a deposit (if applicable) to the Information Officer or the Deputy Information Officer at the postal or physical address, fax number or electronic mail address as noted in clause 5 above.
The prescribed from must be filled in with sufficient information to enable the Information Officer to identify:
the record or records requested; and
The identity of the requester.
The requester should indicate which form of access is required and specify a postal address of fax number of the requester in the Republic;
The requester must state that he/she requires the information in order to exercise or protect a right, and clearly state what the nature of the right is so to be exercised or protected. The requester must clearly specify why the record is necessary to exercise or protect such a right (section 53(2)(d)).

Marsh Fidelity will process the request within 30 (thirty) days, unless the requester has stated special reasons to the satisfaction of the Information Officer that circumstances dictate that the above time periods not be complied with.
The requester shall be advised whether access is granted or denied in writing. If, in addition, the requester requires the reasons for the decision in any other manner, the requester will be obliged to state which manner and the particulars required.
If a request is made on behalf of another person, then the requester must submit proof of the capacity in which the requester is making the request to the reasonable satisfaction of the Information Officer (section 53(2)(f)).
If an individual is unable to complete the prescribed form because of illiteracy or disability, such a person may make the request orally.
The requester must pay the prescribed fee, before any further processing can take place.
All information as listed in clause 11 herein should be provided and failing which the process will be delayed until the required information is provided. The prescribed time periods will not commence until the requester has furnished all the necessary and required information. The Information Officer shall sever a record, if possible, and grant only access to that portion requested and which is not prohibited from being disclosed.

Refusal of Access to Records

Grounds to Refuse Access
A private body such as Marsh Fidelity is entitled to refuse a request for information.
The main grounds for Marsh Fidelity to refuse a request for information relates to the:
mandatory protection of the privacy of a third party who is a natural person or a deceased person (section 63) or a juristic person, as included in the Protection of Personal Information Act 4 of 2013, which would involve the unreasonable disclosure of personal information of that natural or juristic person;
mandatory protection of personal information and for disclosure of any personal information to, in addition to any other legislative, regulatory or contractual agreements, comply with the provisions of the Protection of Personal Information Act 4 of 2013;
mandatory protection of the commercial information of a third party (section 64) if the record contains:
trade secrets of the third party;
financial, commercial, scientific or technical information which disclosure could likely cause harm to the financial or commercial interests of that third party;
information disclosed in confidence by a third party to Marsh Fidelity, if the disclosure could put that third party at a disadvantage in negotiations or commercial competition;

mandatory protection of confidential information of third parties (section 65) if it is protected in terms of any agreement;
mandatory protection of the safety of individuals and the protection of property (section 66);
mandatory protection of records which would be regarded as privileged in legal proceedings (section 67).

The commercial activities (section 68) of a private body, such as Marsh Fidelity, which may include:
trade secrets of Marsh Fidelity;
financial, commercial, scientific or technical information which disclosure could likely cause harm to the financial or commercial interests of Marsh Fidelity;
information which, if disclosed could put Marsh Fidelity at a
disadvantage in negotiations or commercial competition;
a computer program which is owned by Marsh Fidelity, and which is protected by copyright;
the research information (section 69) of Marsh Fidelity or a third party, if its disclosure would disclose the identity of Marsh Fidelity, the researcher or the subject matter of the research and would place the research at a serious disadvantage.
Requests for information that are clearly frivolous or vexatious, or which involve an unreasonable diversion of resources shall be refused.
All requests for information will be assessed on their own merits and in accordance with the applicable legal principles and legislation.
If a requested record cannot be found or if the record does not exist, the Information Officer shall, by way of an affidavit or affirmation, notify the requester that it is not possible to give access to the requested record. Such a notice will be regarded as a decision to refuse a request for access to the record concerned for the purpose of the Act. If the record should later be found, the requester shall be given access to the record in the manner stipulated by the requester in the prescribed form, unless the Information Officer refuses access to such record.

Remedies Available When Marsh Fidelity Refuses a Request

Internal Remedies
Marsh Fidelity does not have internal appeal procedures. The decision made by the Information Officer is final. Requesters will have to exercise such external remedies at their disposal if the request for information is refused, and the requestor is not satisfied with the answer supplied by the Information Officer.

External Remedies
A requestor that is dissatisfied with the Information Officer’s refusal to disclose information, may within 30 (thirty) days of notification of the decision, may apply to a Court for relief.
A third party dissatisfied with the Information Officer’s decision to grant a request for information, may within 30 (thirty) days of notification of the decision, apply to a Court for relief.
For purposes of the Act, the Courts that have jurisdiction over these applications are the Constitutional Court, the High Court or another court of similar status and a Magistrate’s Court designated by the Minister of Justice and Constitutional Development and which is presided over by a designated Magistrate.

Access to Records Held by Marsh Fidelity

Prerequisites for Access by Personal/Other Requester
Records held by Marsh Fidelity may be accessed by requests only once the prerequisite requirements for access have been met.
A requester is any person making a request for access to a record of Marsh Fidelity. There are two types of requesters:
Personal Requester
A personal requester is a requester who is seeking access to a record containing personal information about the requester.
Marsh Fidelity will voluntarily provide the requested information, or give access to any record with regard to the requester’s personal information. The prescribed fee for reproduction of the information requested will be charged.
Other Requester
This requester (other than a personal requester) is entitled to request access to information on third parties.
In considering such a request, Marsh Fidelity will adhere to the provisions of the Act. Section 71 requires that the Information Officer take all reasonable steps to inform a third party to whom the requested record relates of the request, informing him/her that he/she may make a written or oral representation to the Information Officer why the request should be refused or, where required, give written consent for the disclosure of the Information.

Marsh Fidelity is not obliged to voluntarily grant access to such records. The requester must fulfil the prerequisite requirements, in accordance with the requirements of the Act and as stipulated in Chapter 5; Part 3, including the payment of a request and access fee.

Prescribed Fees (Section 51 (1) (f))

Fees Provided by the Act
The Act provides for two types of fees, namely:
A request fee, which is a form of administration fee to be paid by al! requesters except personal requesters, before the request is considered and is not refundable; and
An access fee, which is paid by all requesters in the event that a request for access is granted. This fee is inclusive of costs involved by the private body in obtaining and preparing a record for delivery to the requester.
When the request is received by the Information Officer, such officer shall by notice require the requester, other than a personal requester, to pay the prescribed request fee, before further processing of the request (section 54(1)).
If the search for the record has been made and the preparation of the record for disclosure, including arrangement to make it available in the requested form, requires more than the hours prescribed in the regulations for this purpose, the Information Officer shall notify the requester to pay as a deposit the prescribed portion of the access fee which would be payable if the request is granted.
The Information Officer shall withhold a record until the requester has paid the fees as indicated below.
A requester whose request for access to a record has been granted, must pay an access fee that is calculated to include, where applicable, the request fee, the process fee for reproduction and for search and preparation, and for any time reasonably required in excess of the prescribed hours to search for and prepare the record for disclosure including making arrangements to make it available in the request form.
If a deposit has been paid in respect of a request for access, which is refused, then the Information Officer concerned must repay the deposit to the requester.

Reproduction Fee

Where Marsh Fidelity has voluntarily provided the Minister with a list of categories of records that will automatically be made available to any person requesting access thereto, the only charge that may be levied for obtaining such records, will be a fee for reproduction of the record in question.

Reproduction of Information Fees
Fees to be Charged
Information in an A-4 size page photocopy or part thereof
R 1,10
A printed copy of an A4-size page or part thereof
R 0,75
A copy in computer-readable format, for example: Compact disc

R 70,00
A transcription of visual images, in an A4-size page or part thereof
R 40,00
A copy of visual images
R 60,00
A transcription of an audio record for an A4-size page or part thereof
R 20,00
A copy of an audio record
R 30,00

Request Fees

Where a requester submits a request for access to information held by an institution on a person other than the requester himself/herself, a request fee in the amount of R50,00 is payable up-front before the institution will further process the request received.

Access Fees

An access fee is payable in all instances where a request for access to information is granted, except in those instances where payment of an access fee is specially excluded in terms of the Act or an exclusion is determined by the Minister in terms of section 54(8).
The applicable access fees which will be payable are:

Access of Information Fees
Fees to be Charged
Information in an A-4 size page photocopy or part thereof
R 1,10
A printed copy of an A4-size page or part thereof
R 0,75
A copy in computer-readable format, for example: Stiffy disc
Compact disc

R 7,50
R 70,00
A transcription of visual images, in an A4-size page or part thereof
R 40,00
A copy of visual images
R 60,00
A transcription of an audio record for an A4-size page or part thereof
R 20,00
A copy of an audio record
*Per hour or part of an hour reasonably required for such search.
R 30,00*

Deposits

Where the institution receives a request for access to information held on a person other than the requester himself/herself and the Information Officer upon receipt of the request is of the opinion that the preparation of the required record of disclosure will take more than 6 (six) hours, a deposit is payable by the requester.
The amount of the deposit is equal to 1/3 (one third) of the amount of the applicable access fee.

Collection Fees

The initial “request fee” of R50,00 should be deposited into the bank account below and a copy of the deposit slip, application form and other correspondence / documents, forwarded to the Information Officer via fax.
The officer will collect the initial “request fee” of applications received directly by the Information Officer via email.
All fees are subject to change as allowed for in the Act and as a consequence such escalations may not always be immediately available at the time of the request being made. Requesters shall be informed of any changes in the fees prior to making a payment.

Decision

Time Allowed to Institution
Marsh Fidelity will, within 30 (thirty) days of receipt of the request, decide whether to grant or decline the request and give notice with reasons (if required) to that effect.
The 30 (thirty) day period within which Marsh Fidelity has to decide whether to grant or refuse the request, may be extended for a further period of not more than (30) thirty days if the request is for a large number of information, or the request requires a search for information held at another office of Marsh Fidelity and the information cannot reasonably be obtained within the original 30 (thirty) day period.
Marsh Fidelity will notify the requester in writing should an extension be sought.

Protection of Personal Information that is Processed by Marsh Fidelity

Chapter 3 of POPIA provides for the minimum Conditions for Lawful Processing of Personal Information by a Responsible Party. These conditions may not be derogated from unless specific exclusions apply as outlined in POPIA.

Marsh Fidelity needs Personal Information relating to both individual and juristic persons in order to carry out its business and organisational functions. The manner in which this information is Processed and the purpose for which it is processed is determined by Marsh Fidelity. Marsh Fidelity is accordingly a Responsible Party for the purposes of POPIA and will ensure that the Personal Information of a Data Subject:
is processed lawfully, fairly and transparently. This includes the provision of appropriate information to Data Subjects when their data is collected by Marsh Fidelity, in the form of privacy or data collection notices. Marsh Fidelity must also have a legal basis (for example, consent) to process Personal Information;
is processed only for the purposes for which it was collected;
will not be processed for a secondary purpose unless that processing is compatible with the original purpose.
is adequate, relevant and not excessive for the purposes for which it was collected;
is accurate and kept up to date;
will not be kept for longer than necessary;
is processed in accordance with integrity and confidentiality principles; this includes physical and organisational measures to ensure that Personal Information, in both physical and electronic form, are subject to an appropriate level of security when stored, used and communicated by Marsh Fidelity, in order to protect against access and acquisition by unauthorised persons and accidental loss, destruction or damage;
is processed in accordance with the rights of Data Subjects, where applicable. Data Subjects have the right to:
be notified that their Personal Information is being collected by Marsh Fidelity. The Data Subject also has the right to be notified in the event of a data breach;
know whether Marsh Fidelity holds Personal Information about them, and to access that information. Any request for information must be handled in accordance with the provisions of this Manual;
request the correction or deletion of inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained personal information;
object to Marsh Fidelity’s use of their Personal Information and request the deletion of such Personal Information (deletion would be subject to Marsh Fidelity’s record keeping requirements);
object to the processing of Personal Information for purposes of direct marketing by means of unsolicited electronic communications; and

complain to the Information Regulator regarding an alleged infringement of any of the rights protected under POPI and to institute civil proceedings regarding the alleged non- compliance with the protection of his, her or its personal information.

Purpose of the Processing of Personal Information by the Company
As outlined above, Personal Information may only be processed for a specific purpose. The purposes for which Marsh Fidelity processes or will process Personal Information is set out in Part 1 of Appendix 2.

Categories of Data Subjects and Personal Information/special Personal Information relating thereto
As per section 1 of POPI, a Data Subject may either be a natural or a juristic person. Part 2 of Appendix 2 sets out the various categories of Data Subjects that Marsh Fidelity Processes Personal Information on and the types of Personal Information relating thereto.

Recipients of Personal Information

Part 3 of Appendix 2 outlines the recipients to whom Marsh Fidelity may provide a Data Subjects Personal Information to.

Cross-border flows of Personal Information

Section 72 of POPIA provides that Personal Information may only be transferred out of the Republic of South Africa if the:
recipient country can offer such data an “adequate level” of protection. This means that its data privacy laws must be substantially similar to the Conditions for Lawful Processing as contained in POPI; or
Data Subject consents to the transfer of their Personal Information; or
transfer is necessary for the performance of a contractual obligation between the Data Subject and the Responsible Party; or
transfer is necessary for the performance of a contractual obligation between the Responsible Party and a third party, in the interests of the Data Subject; or
the transfer is for the benefit of the Data Subject, and it is not reasonably practicable to obtain the consent of the Data Subject, and if it were, the Data Subject, would in all likelihood provide such consent.

Part 4 of Appendix 2 sets out the planned cross-border transfers of Personal Information and the condition from above that applies thereto.

Description of information security measures to be implemented by Marsh Fidelity

Part 5 of Appendix 2 sets out the types of security measures to implemented by Marsh Fidelity in order to ensure that Personal Information is respected and protected. A preliminary assessment of the suitability of the information security measures implemented or to be implemented by Marsh Fidelity may be conducted in order to ensure that the Personal Information that is processed by Marsh Fidelity is safeguarded and Processed in accordance with the Conditions for Lawful Processing.

Objection to the Processing of Personal Information by a Data Subject
Section 11 (3) of POPI and regulation 2 of the POPIA Regulations provides that a Data Subject may, at any time object to the Processing of his/her/its Personal Information in the prescribed form attached to this manual as Appendix 3 subject to exceptions contained in POPIA.

Request for correction or deletion of Personal Information
Section 24 of POPI and regulation 3 of the POPI Regulations provides that a Data Subject may request for their Personal Information to be corrected/deleted in the prescribed form attached as Appendix 4 to this Manual

Availability and Updating of the PAIA Manual

Regulation Number R.187 of 15 February 2002
This PAIA Manual is made available in terms of Regulation Number R.187 of 15 February 2002. Marsh Fidelity will update this PAIA Manual at such intervals as may be deemed necessary.
This PAIA Manual of Marsh Fidelity is available to view at its premises and on its website.

J752

REPUBLIC OF SOUTH AFRICA FORM C
REQUEST FOR ACCESS TO RECORD OF PRIVATE BODY
(Section 53(1) of the Promotion of Access to Information Act, 2000 (Act No. 2 of 2000)) [Regulation 10]

Particulars of private body The Head:

Particulars of person requesting access to the record

Full names and surname:

Identity number:

Postal address:

Telephone number:
( )

Fax number:
( )

E-mail address:

Capacity in which request is made, when made on behalf of another person:

Particulars of person on whose behalf request is made

Full names and surname:

Identity number:

Particulars of record

Description of record or relevant part of the record:

Reference number, if available:

Any further particulars of record:

Fees

Reason for exemption from payment of fees:

Form of access to record

If you are prevented by a disability to read, view or listen to the record in the form of access provided for in 1 to 4 below, state your disability and indicate in which form the record is required.

Disability:

Mark the appropriate box with an X.

Form in which record is required:

NOTES:

Compliance with your request for access in the specified form may depend on the form in which the record is available.
Access in the form requested may be refused in certain circumstances. In such a case you will be informed if access will be granted in another form.
The fee payable for access to the record, if any, will be determined partly by the form in which access is requested.

1. If the record is in written or printed form:

copy of record*

inspection of record

2. If record consists of visual images – (this includes photographs, slides, video recordings, computer- generated images, sketches, etc.):

view the images

copy of the images*

transcription of the images*
3. If record consists of recorded words or information which can be reproduced in sound:

listen to the soundtrack (audio cassette)

transcription of soundtrack* (written or printed document)

4. If record is held on computer or in an electronic or machine-readable form:

printed copy of record*

printed copy of information derived from the record*

copy in computer readable form* (stiffy or compact disc)

*If you requested a copy or transcription of a record (above), do you wish the copy or transcription to be posted to you? Postage is payable.
Yes
No

Particulars of right to be exercised or protected

Indicate which right is to be exercised or protected:

Explain why the record requested is required for the exercise or protection of the aforementioned right:

Notice of decision regarding request for access

How would you prefer to be informed of the decision regarding your request for access to the record?

Signed at ………………………… this day ………..………… of …………………… year…………….

……………………………………………………………….. Signature of Requester /
Person on Whose Behalf Request is Made

Appendix 2: Part 1 – Processing of Personal Information in Accordance with POPI

For consumers:
Performing duties in terms of any agreement with consumers
Make, or assist in making, credit decisions about consumers
Operate and manage consumers’ accounts and manage any application, agreement or correspondence consumers may have with Marsh Fidelity
Communicating (including direct marketing) with consumers by email, SMS, letter, telephone or in any other way about Marsh Fidelity’s products and services, unless consumers indicate otherwise
To form a view of consumers as individuals and to identify, develop or improve products, that may be of interest to consumers
Carrying out market research, business and statistical analysis
Performing other administrative and operational purposes including the testing of systems
Recovering any debt consumers may owe the Marsh Fidelity
Complying with the Marsh Fidelity’s regulatory and other obligations
Any other reasonably required purpose relating to the Marsh Fidelity business

For prospective consumers:
Verifying and updating information
Pre-scoring
Direct marketing
Any other reasonably required purpose relating to the processing of a prospect’s personal information reasonably related to the Marsh Fidelity’s business.

For employees:
The same purposes as for consumers (above)
Verification of applicant employees’ information during recruitment process
General matters relating to employees:
Pension
Medical aid
Payroll
Disciplinary action
Training
Any other reasonably required purpose relating to the employment or possible employment relationship.

For vendors /suppliers /other businesses:
Verifying information and performing checks;
Purposes relating to the agreement or business relationship or possible agreement or business relationships between the parties;
Payment of invoices;
Complying with the Marsh Fidelity’s regulatory and other obligations; and
Any other reasonably required purpose relating to the Marsh Fidelity business.

Appendix 2: Part 2 – Categories of Data Subjects and Categories of Personal Information relating thereto

Employees
Name and contact details
Identity number and identity documents including passports
Employment history and references
Banking and financial details
Details of payments to third parties (deductions from salary)
Employment contracts
Employment equity plans
Medical aid records
Pension Fund records
Remuneration/salary records
Performance appraisals
Disciplinary records
Leave records
Training records

Consumers and prospective consumers (which may include employees)
Postal and/or street address
title and name
contact numbers and/or e-mail address
ethnic group
employment history
age
gender
marital status
nationality
language
financial information
identity or passport number
browsing habits and click patterns on Marsh Fidelity websites.

Vendors /suppliers /other businesses:
Name and contact details
Identity and/or company information and directors’ information
Banking and financial information
Information about products or services
Other information not specified, reasonably required to be processed for business operations

Appendix 2: Part 3 – Recipients of Personal Information

Any firm, organisation or person that the Marsh Fidelity uses to collect payments and recover debts or to provide a service on its behalf;
Any firm, organisation or person that/who provides the Marsh Fidelity with products or services;
Any payment system the Marsh Fidelity uses;
Regulatory and governmental authorities or ombudsmen, or other authorities, including tax authorities, where Marsh Fidelity has a duty to share information;
Third parties to whom payments are made on behalf of employees;
Financial institutions from whom payments are received on behalf of data subjects;
Any other operator not specified;
Employees, contractors and temporary staff; and
Agents.

Appendix 2: Part 4 – Cross border transfers of Personal Information
Personal Information may be transmitted transborder to Marsh Fidelity’s suppliers in other countries, and Personal Information may be stored in data servers hosted outside South Africa, which may not have adequate data protection laws. Marsh Fidelity will endeavour to ensure that its dealers and suppliers will make all reasonable efforts to secure said data and Personal Information.

Appendix 2: Part 5 – Description of information security measures
Marsh Fidelity undertakes to institute and maintain the data protection measures to accomplish the following objectives outlined below. The details given are to be interpreted as examples of how to achieve an adequate data protection level for each objective. Marsh Fidelity may use alternative measures and adapt to technological security development, as needed, provided that the objectives are achieved.
Access Control of Persons
Marsh Fidelity shall implement suitable measures in order to prevent unauthorized persons from gaining access to the data processing equipment where the data are processed.
Data Media Control
Marsh Fidelity undertakes to implement suitable measures to prevent the unauthorized manipulation of media, including reading, copying, alteration or removal of the data media used by Marsh Fidelity and containing personal data of Customers.
Data Memory Control
Marsh Fidelity undertakes to implement suitable measures to prevent unauthorized input into data memory and the unauthorised reading, alteration or deletion of stored data.
User Control
Marsh Fidelity shall implement suitable measures to prevent its data processing systems from being used by unauthorised persons by means of data transmission equipment.
Access Control to Data
Marsh Fidelity represents that the persons entitled to use Marsh Fidelity’s data processing system are only able to access the data within the scope and to the extent covered by their respective access permissions (authorisation).
Transmission Control
Marsh Fidelity shall be obliged to enable the verification and tracing of the locations / destinations to which the personal information is transferred by utilization of Marsh Fidelity’s data communication equipment / devices.
Transport Control
Marsh Fidelity shall implement suitable measures to prevent Personal Information from being read, copied, altered or deleted by unauthorized persons during the transmission thereof or during the transport of the data media.
Organisation Control
Marsh Fidelity shall maintain its internal organisation in a manner that meets the requirements of this Manual.

Appendix 3: Objection to the Processing of Personal Information in terms of Section 11(3) of the Protection of Personal Information Act, 2013

Note:
Regulations Relating to The Protection of Personal Information, 2018

Affidavits or other documentary evidence as applicable in support of the objection may be attached.
If the space provided for in this Form is inadequate, submit information as an Annexure to this Form and sign each page.
Complete as is applicable

A
DETAILS OF DATA SUBJECT
Name(s) and surname/ registered name of data subject:

Unique Identifier/ Identity Number

Residential, postal or business address:

Contact number(s):

Fax number / E-mail address:

B
DETAILS OF RESPONSIBLE PARTY
Name(s) and surname/ registered name of data subject:

Residential, postal or business address:

Contact number(s):

Fax number / E-mail address:

C
REASONS FOR OBJECTION IN TERMS OF SECTION
11(1)(d) to (f) (Please provide detailed reasons for the objection)

Signed at ……………………………….. this ……. day of 20…

……………………………………………………
Signature of data subject/designated person

Appendix 4: Request for Correction or Deletion of Personal Information or Destroying or Deletion of Record of Personal Information in terms of Section 24(1) of the Protection of Personal Information Act, 2013

Note:
Regulations Relating to the Protection of Personal Information, 2018
[Regulation 3]

Affidavits or other documentary evidence as applicable in support of the request may be attached.
If the space provided for in this Form is inadequate, submit information as an Annexure to this Form and sign each page.
Complete as is applicable.

Mark the appropriate box with an “x”. Request for:
Correction or deletion of the personal information about the data subject which is in possession or under the control of the responsible party.
Destroying or deletion of a record of personal information about the data subject which is in possession or under the control of the responsible party and who is no longer authorised to retain the record of information

A
Details of Data Subject
Name(s) and surname/ registered name of data subject:

Unique Identifier/ Identity Number

Residential, postal or business address:

Contact number(s):

Fax number / E-mail address:

B
DETAILS OF RESPONSIBLE PARTY
Name(s) and surname/ registered name of data subject:

Residential, postal or business address:

Contact number(s):

Fax number / E-mail address:

C
Reasons for Objection in Terms of Section 11(1)(D) to (F) (Please Provide Detailed Reasons for The Objection)

D
Reasons for *Correction or Deletion of the Personal Information about the Data Subject in Terms of Section 24(1)(a) which is in Possession or Under the Control of the Responsible Party; and or Reasons for
*Destruction or Deletion of a Record of Personal Information about the Data Subject in Terms of Section 24(1)(b) which the Responsible Party is no longer Authorised to Retain. (Please Provide Detailed Reasons for the Request)