1.1 We are committed to protecting your privacy and to ensuring that personal information provided to us is collected and used properly, lawfully and transparently in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").
1.2.1 how the Zimco Group Proprietary Limited ("Zimco Group", "we", "us") collects, protects, shares, uses and otherwise processes your personal information collected by us from you directly, through the use of our website, the use of our products and services and/or your electronic communications with us; and
1.2.2 the rights you have in relation to your personal information in terms of the Protection of Personal Information Act 4 of 2013 ("POPIA") and we will, to the extent possible, inform you what information is voluntary or mandatory for you to provide and the consequences for failing to provide the requested information.
1.3 By providing us with your personal information either directly, using our website, our products and services and/or communicating electronically to us, you –
1.3.1 agree to this policy and consent to the processing and transfer of your personal information as set out in this policy; and
1.3.2 authorise us, our affiliates and other third parties to process your personal information for the purposes stated in this policy.
1.4 This Policy must be read together with any other legal notices or terms and condition provided or made available to you on our website and/or when you complete or use any documents provided by us to you in respect of any of our products and/or services.
1.5 This Policy is not intended to reproduce laws or regulations, but rather set out guidelines for our conduct in any operations which involve the processing of personal information.
Zimco Group is a leading South African producer of lead (Pb) and lead products and industrial and base minerals and a major producer and supplier of zinc, aluminium metal and alloys, related chemicals and engineering plastics. Zimco Group is based in South Africa, but is also able to service customers in sub-Saharan Africa and select export markets.
3.1 The term "personal information" as used in this Policy is defined as "information which relates to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person. The person or juristic person i.e. entity to whom personal information relates is referred to as the "data subject" ("data subject", "you" and "your").
3.2 The Zimco Group collects and processes personal information to provide data subjects with access to our service and products, to help us improve our offerings and for other purposes explained below.
3.3 The Zimco Group collects the following types of personal information including, but not limited to –
3.3.1 full names;
3.3.2 identity numbers;
3.3.4 contact information such as telephone numbers and email addresses;
3.3.5 job title/description;
3.3.6 Banking details;
3.3.7 financial information (including VAT and tax information); and
3.3.8 CCTV footage/images.
3.4 When personal information is collected, the Zimco Group will indicate the purpose for the collection and whether the information required is compulsory or voluntary.
4.1 We collect your personal information mainly directly from you in order to render our products and services to you and to improve our service and product offerings to you.
4.2 The personal information we collect about you can vary depending on –
4.2.1 the products and services that you use;
4.2.2 when you visit our offices;
4.2.3 how you interact with us even if you are not a customer (including records of communications you have with us, your attendance at our events , interviews in the course of applying for a job with us, subscription to our mailing interaction and when you visit our website);
4.2.4 what we have obtained from a third party with permission to share your personal information with us (including law enforcement agencies); and
4.2.5 when you make your information public.
5.1 We will use and process your personal information in the ordinary course of the business of providing products and services to you.
5.2 We will primarily use your personal information only for the purpose for which it was originally collected. In circumstances where we have to use your personal information for a secondary purpose, we will only do so if such purpose constitutes a legitimate interest and is closely related to the original or primary purpose for which the personal information was collected.
5.3 We may use your personal information for the following purposes –
5.3.1 to provide products or services to you, to carry out the transaction you requested and maintain our relationship with you;
5.3.2 to provide you with the information about products and services that will support and enhance your business benefits that you qualify for;
5.3.3 to conduct credit checks;
5.3.4 to confirm and verify your identity or to verify that you are an authorised user for security purposes;
5.3.5 for the detection and prevention of fraud, crime, money laundering or any other malpractice;
5.3.6 to conduct customer satisfaction research, direct marketing and for statistical analysis;
5.3.7 process requests for the collection, updating, access or deletion of your personal information;
5.3.8 for audit and record keeping purposes;
5.3.9 in connection with legal proceedings; and
5.3.10 comply with applicable laws, regulatory requirements or industry codes to which we subscribe or which apply to use.
6.1 We may disclose personal information provided to us to third parties who are (i) involved in delivery of products and service that we deliver and (ii) who assist us in giving effect to the above purposes at paragraph 5.
6.2 These third parties include, amongst others, suppliers, service providers, consultants, subcontractors and other vendors who need access to such information to carry out work on our behalf. Any such parties only have access to such information as is necessary to perform their functions and may not use it for any purpose other than to provide services to us.
6.3 Where we disclose your personal information to the above parties, they will be bound to use that personal information for the reasons and purposes it was provided to them and not for any other purpose. To this end, we will enter into agreements with these third parties.
6.4 In addition to the above, we may be obliged to disclose your personal information where we have a duty to disclose in terms of law or where we believe it is necessary to protect our rights.
7.1 The Zimco Group will take reasonable and appropriate technical and organisational measures to ensure that your personal information is kept secure and is protected against unauthorised or unlawful processing, accidental loss, destruction or damage, alteration disclosure or access.
7.2 We will, on a regular basis, continue to review our security controls and related processes to ensure that your personal information is secure.
7.3 As stated above, when we contract with third parties, we conclude agreements with them in terms of which we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal information is kept secure.
7.4 Whilst we will do all things reasonably necessary to protect your rights of privacy, we cannot guarantee or accept any liability whatsoever for unauthorised or unlawful disclosures of your personal information, whilst in our possession, made by third parties who are not subject to our control, unless such disclosure is as a result of our gross negligence.
8.1 We undertake to provide you with access to your personal information and provide mechanisms that any personal information found to be inaccurate or incomplete could be corrected or amended as feasible subject to any requirement or rule for such personal information to be retained by law. For further information on how to exercise these rights, please refer to our procedure for data subject access to, objection to, correction or deletion of personal information processed by The Zimco Group as set out in the PAIA/POPIA Manual which is available at https://www.zimco.co.za/.
8.2 Prior to the amendment, correction or removal of your personal information, we will require you to identify yourself and to identify the portion information requested to be amended, correct or removed. A request for the amendment, correction or removal of personal information may be declined if the process of the request is unlawful, unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others or would be impractical.
8.3 Please note that any such access request and request to correct may be subject to a payment of a legally allowable fee and we will let you know what it is at the time of your request.
8.4 It is important that any information you provide directly to us is accurate and correct. Please let us know as soon as you can if any information we hold about you is no longer correct. Providing false or inaccurate information in order to obtain a product or service may also result in services being restricted or cancelled.
9.1 We will not retain your personal information longer than the period for which it was originally needed, unless we are required by law to do so, or you consent to us retaining such information for a longer period.
9.2 We may also retain your personal information to the extent and duration that we have a legitimate interest to process your personal information depending on, amongst others, the nature and lifespan our services or products provided to you.
9.3 We will upon your request, promptly return or destroy any and all of your personal information in our possession or control, save for what is set out above and for that which we are legally obliged to retain.
The Zimco Group complies with section 72 of POPIA regarding any cross border transfers of personal information.
12.1 As a data subject, you have a number of data privacy rights. These rights include the right to request from The Zimco Group access to, correction or deletion of your personal data or restriction of processing concerning your data or to object to the processing of your personal information. For further information on how to exercise these rights, please refer to our procedure for data subject access to, objection to, correction or deletion of personal information processed by The Zimco Group as set out in the PAIA/POPIA Manual which is available at https://www.zimco.co.za/.
12.2 All the rights of a data subject are contained in POPIA. The information on these rights can be found at the Information Regulator's website at https://www.justice.gov.za/inforeg/, to whom you have the right to make a complaint, if we do not resolve your concern.
If you have any questions about this Policy, our treatment of your personal information or wish to exercise any of your rights please contact our Information Officer whose details are as follows –
Name: Andrew Porter
Telephone number: 011) 617-5000
Last updated June 2021.