alert("JS Loaded");
Prepared in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 (as amended)
DATE OF COMPILATION: 01/10/2021
DATE OF REVISION: 01/03/2025
TABLE OF CONTENTS
1……… LIST OF ACRONYMS AND ABBREVIATIONS. 3
2……… PURPOSE OF PAIA MANUAL. 3
3……… KEY CONTACT DETAILS FOR ACCESS TO INFORMATION OF SOLUMED.. 4
4……… GUIDE ON HOW TO USE PAIA AND HOW TO OBTAIN ACCESS TO THE GUIDE. 4
8……… PROCESSING OF PERSONAL INFORMATION.. 9
9……… AVAILABILITY OF THE MANUAL. 12
10……. UPDATING OF THE MANUAL. 13
NB: please insert relevant applicable acronyms and abbreviations
This PAIA Manual is useful for the public to-
Name: NORMAN HILTON KRETZMER
Tel: +27117192000
Email: normank@avantedge.co.za
Fax number: N/A
Name: RAPHAEL SEGAL
Tel: +27117192000
Email: privacy@avantedge.co.za
Fax Number: N/A
Email: privacy@avantedge.co.za
Postal Address: Same as Physical Address
Physical Address: 70 Melville Road, Illovo Central Building, 6th Floor
Telephone: +27117192000
Email: privacy@avantedge.co.za
Website: www.Solumed.co.za
Category of records | Types of the Record | Available on Website | Available upon request |
PAIA | PAIA Manuel | Yes | |
Disclaimer | Terms & Conditions | Yes | |
Privacy Documents | Privacy Policy | Yes |
Category of Records | Applicable Legislation |
Memorandum of incorporation | Companies Act 71 of 2008 |
PAIA Manual | Promotion of Access to Information Act 2 of 2000 |
Subjects on which SOLUMED holds records | Categories of records |
Customers from a commercial perspective — such as through sales or customer servicing activities |
Name, surname, email address, cell phone number, ID number, employment history, education history, gender. social media account name, name, email address, phone number |
Customers from an administrative perspective — such as through customer administration or customer credit activities | |
Debtors or creditors — such as through managing creditors’ books | |
Prospective customers — such as through advertising or direct marketing activities | |
Employees — such as through monitoring, payroll or training activities | |
Directors or shareholders — such as through company administration activities involving directors or shareholders | |
Vendors, contractors or other suppliers — such as through supply chain management | |
IT users — such as through IT support, data processing or other IT-related activities; | |
Prospective customers — such as through advertising or direct marketing activities | |
Customers from a commercial perspective — such as through sales or customer servicing activities | |
Customers from a commercial perspective — such as through sales or customer servicing activities. Vendors, contractors or other suppliers — such as through supply chain management |
Categories of Data Subjects | Personal Information that may be processed |
Customers / Clients | name, address, registration numbers or identity numbers, employment status and bank details |
Service Providers | names, registration number, vat numbers, address, trade secrets and bank details |
Employees | address, qualifications, gender and race |
Category of personal information | Recipients or Categories of Recipients to whom the personal information may be supplied |
Identity number and names, for criminal checks |
South African Police Services |
Qualifications, for qualification verifications |
South African Qualifications Authority |
Credit and payment history, for credit information |
Credit Bureaus |
General description of Information Security Measures to be implemented by the responsible party to ensure the confidentiality, integrity and availability of the information
Access control lists (subcontractors and third-parties) |
Anti-virus protection, user access management, firewalls, data backup, internal awareness and training, internal policies and plans, user password management, need-to-know restrictions. |
On the data centre side: Breach detection tools, intrusion detection tools, secure premises. |
Email scanning, Mobile device management tools |
Vendor risk management |
Network authentication, Secure disposal, Regular software updates, Pseudonymization |
Multi-factor authentication, penetration tests, anonymization, segmented access control, encryption. |
Anti-virus protection, user access management, firewalls, data backup, internal awareness and training, internal policies and plans, user password management, need-to-know restrictions. |
On the data centre side: Breach detection tools, intrusion detection tools, secure premises, data backup. From the software side: Multi-factor authentication, penetration tests, anonymization, segmented access control, encryption. |
Anti-virus protection, user access management, firewalls, internal awareness and training, internal policies and plans, user password management, need-to-know restrictions. On the data centre side (the WebWindi data and product data are on our server on the cloud): Breach detection tools, intrusion detection tools, secure premises, data backup. From the software side (WebWindi): Segmented access control. From the software side (product): Multi-factor authentication, penetration tests, anonymization, segmented access control, encryption. |
The head of SOLUMED will on a regular basis update this manual.
Issued by
RAPHAEL SEGAL (DPO)
[1] Section 17(1) of PAIA- For the purposes of PAIA, each public body must, subject to legislation governing the employment of personnel of the public body concerned, designate such number of persons as deputy information officers as are necessary to render the public body as accessible as reasonably possible for requesters of its records
[2] Section 56(a) of POPIA- Each public and private body must make provision, in the manner prescribed in section 17 of the Promotion of Access to Information Act, with the necessary changes, for the designation of such a number of persons, if any, as deputy information officers as is necessary to perform the duties and responsibilities as set out in section 55(1) of POPIA.
[3] Section 11(1) of PAIA- A requester must be given access to a record of a public body if that requester complies with all the procedural requirements in PAIA relating to a request for access to that record; and access to that record is not refused in terms of any ground for refusal contemplated in Chapter 4 of this Part.
[4] Section 50(1) of PAIA- A requester must be given access to any record of a private body if-
[5] Section 14(1) of PAIA- The information officer of a public body must, in at least three official languages, make available a manual containing information listed in paragraph 4 above.
[6] Section 51(1) of PAIA- The head of a private body must make available a manual containing the description of the information listed in paragraph 4 above.
[7] Section 15(1) of PAIA- The information officer of a public body, must make available in the prescribed manner a description of the categories of records of the public body that are automatically available without a person having to request access
[8] Section 52(1) of PAIA- The head of a private body may, on a voluntary basis, make available in the prescribed manner a description of the categories of records of the private body that are automatically available without a person having to request access
[9] Section 22(1) of PAIA- The information officer of a public body to whom a request for access is made, must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.
[10] Section 54(1) of PAIA- The head of a private body to whom a request for access is made must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.
[11] Section 92(1) of PAIA provides that –“The Minister may, by notice in the Gazette, make regulations regarding-
Cookie | Duration | Description |
---|---|---|
cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |