RISA Privacy Policy

1. By submitting your Personal Information (“Personal Information”) on the RiSA electronic platform (portal, website, etc.), you agree to the terms and conditions of this Agreement and the RiSA Privacy Policy (collectively referred to as “Terms and Conditions”).
2. Personal Information has the meaning ascribed thereto in the Protection of Personal Information Act, Act 4 of 2013, (“POPI”) and any regulations passed thereunder, and may be processed by RiSA pursuant to this Agreement.
3. By submitting your Personal Information, you agree to be legally bound by these Terms and Conditions, which shall take effect immediately on your first use of this platform (“Site”).
4. f you do not agree to be legally bound by all the Terms and Conditions, you should not make use of the Site – i.e. do not access and/or submit any Personal Information.
5. RiSA has the right in its sole discretion to change the Terms and Conditions on this Site (unless prior notice is required by applicable law), at any time by posting the changes online.
6. It is your obligation to review the Terms and Conditions regularly to ensure you are aware of any changes made by RiSA on this Site.

1. RiSA shall only process Personal Information in accordance with applicable laws, in terms of this Agreement and in accordance with any instructions, requirements or specific directions of the Information Officer.
2. You agree that RiSA may collect and process – which shall have the meaning ascribed in the definition of “Processing” in POPI – use and store your Personal Information (including special Personal Information)  for purposes of (i) providing the services, (ii) maintaining its internal administrative or member relationship systems, including the use of third party outsourced providers, (iii) quality and risk management reviews and legal reporting obligations, (iv) providing information about upcoming events, (v) carrying out and managing its operations, and (vi) any legitimate purposes of or other activities conducted by RiSA from time to time. 
3. RiSA shall take appropriate, reasonable, technical and organisational measures to ensure the integrity of the Personal Information in its possession or under its control and that such Personal Information is secure and protected against unauthorised or unlawful Processing, accidental loss, destruction or damage, alteration, disclosure or access by having regard to:
   1. any applicable requirement in law, stipulated in appropriate industry rules or in codes of conduct or stipulated by a professional body governing RiSA;
   2. generally accepted information security practices and procedures which apply to RiSA’s services as may be appropriated to discharge its obligations in terms of this Agreement;
   3. ake appropriate, reasonable, technical and organisational measures to ensure that the Personal Information in its possession or under its control remains available to you and when it may be required; and
   4. identify all reasonable foreseeable internal and external risks on an on-going basis.
4. You undertake and agree to keep the Personal Information up to date by keeping RiSA informed of any changes that need to be made to the Personal Information.

1. Data Subjects means any natural or juristic person(s) or any other person(s) to whom Personal Information relates (“Data Subjects”).
2. You warrant that the consent of any other Data Subject(s) whose Personal Information shall be disclosed to RiSA by you in terms of this Agreement has been obtained or that you are otherwise justified in law to disclose such information to RiSA.
3. You further warrant and undertake to inform RiSA within a reasonable time (i) of any changes to the Personal Information provided by you in order to keep the data accurate, (ii) should any Data Subject withdraw any consent previously given and/or (iii) should RiSA for any other reason no longer be entitled to lawfully process the Data Subject’s Personal Information.
4. You further warrant that all Personal Information provided by you on the Site is accurate and does not breach any law or the rights of any Data Subject.

You agree to hold RiSA and/or any and all of its directors, officers or any other officials thereof respectively, harmless and indemnified against any and all loss, damage, costs (including legal costs on an attorney and client basis), charges, penalties, fines,  interest, expenses which may be incurred or sustained by RiSA and/or any one or more of the aforesaid persons as a result of you breaching the aforementioned warranties or failing to comply with any of your obligations in terms of POPI or any other applicable data protection law or regulation.

You understand and agree that the Personal Information may in appropriate circumstances reside and be processed outside South Africa and you agree that RiSA shall be entitled to transfer and process Personal Information across country borders to such locations outside South Africa and for the purposes set out above.

1. You agree that RiSA shall be entitled to retain the Personal Information for a minimum period of 5 years, after which, subject to what is set out below, the Personal Information shall be destroyed in accordance with the provisions of POPI. 
2. You agree that RiSA shall however be entitled to extend the period for which Personal Information is retained (i) if this is required or authorised by law, (ii) RiSA reasonably requires the Personal Information for a longer period for lawful purposes related to its activities or functions, (iii) this is required by any contract between the parties, or (iv) for statistical or research purposes (subject to appropriate safeguards).

1. RiSA is not liable for any damages (including direct, indirect, consequential, incidental and exemplary) in the event that this Site is unavailable to users (by virtue of interruption, suspension or termination) for any reason, including due to computer or communications link downtime attributable to malfunction, upgrades or preventative or remedial maintenance activities.
2. RiSA will not be liable to users in respect of any loss or damage (including direct, indirect, consequential, incidental and exemplary) which may be suffered or incurred or which may arise directly or indirectly because of services supplied by RiSA.

These Terms and Conditions are subject to warranties and liabilities that cannot by law be disclaimed and RiSA’s liability for any breach of a condition in relation to supply by it of services to users is limited to, at RiSA’s option, supply of the services again, or the payment of the cost of supplying the services again.

1. You agree not to sell or modify the material or reproduce, display, distribute, or otherwise use the material available on this Site in any way for any public or commercial purpose.
2. You further agree not copy or adapt the code or software that RiSA creates to generate its pages.
3. You further agree not ‘frame’, ‘mirror’, ‘scrape’ and/or ‘extract’ any materials or third-party content contained on or accessible from the RiSA Site on any other server or internet-based device without the express written authorisation of RiSA.

RiSA will not be liable for any damages (including direct, indirect, consequential, incidental and exemplary), if there is any deficiency or inaccuracy in the Site attributable to a lack of maintenance of the Site or in relation to the accuracy, sufficiency or otherwise of your application.

You warrant that you have not relied on any representation made by RiSA which has not been expressly stated in these Terms and Conditions for the provision of specified services by RiSA.

RiSA does not monitor your personal identifiable data or privacy sensitive transmissions, yet, it does actively monitor accounts for system utilisation. Upon any breach of this Agreement, or inappropriate use of RiSA services as determined by RiSA in its sole discretion, RiSA reserves the right to terminate your registration. RiSA’s preferred course of action is to advise you of your inappropriate use or breach of this Agreement and recommend any necessary corrective action.

This Privacy Policy is complementary to, and should be read and understood with, the above Terms and Conditions. RiSA values the privacy of its Site users. This Privacy Policy demonstrates our commitment to your privacy, and explains what information we collect from the Site and how we use that information. We may make changes to this Privacy Policy at any time.

RiSA uses mailing and email addresses, telephone and cellular numbers, and user access IDs to provide users with the information requested, to respond to user questions, to provide member support, to register users for subscriptions, or to conduct surveys. RiSA does not sell user Personal information to others. We may disclose information about users to others if required by law, if directed by the user, or to operate this Site properly.

This Site provides hyperlinks to websites owned and controlled by others. RiSA is not responsible for the privacy practices of any website not owned or controlled by RiSA.

This Site uses administrative, contractual, physical, and technical means to protect against the unauthorised access to information, such as confidentiality agreements with employees, firewalls, Secure Sockets Layer protocol, usernames and passwords.

A user may opt-out, review and update the information provided to RiSA through this Site by contacting us via the Contact Us page on this Site.

If you have any questions concerning this Privacy Policy, please contact us via the Contact Us page on this Site.

By accessing or using this Site you consent to the collection, use, and transfer of your Personal Information as described in this Privacy Policy, as amended from time to time.