Privacy Policy
(“Central Medical (Pty) Ltd” or “we” or “us”) takes data privacy seriously. This Privacy Policy describes how Central Medical (Pty) Ltd as controller within the meaning of the General Data Protection Regulation (“GDPR”) and the ePrivacy Regulation (“ePrivacy Regulation”) collects and processes the personal data and other information of the users.
1. Categories of personal data and processing purposes
Metadata
You may use our website or app without providing any personal data about you. In this case, Central Medical (Pty) Ltd will collect only the following metadata that result from your usage:
Referral page, data and time of access, data volume transmitted, status of transmission, type of web browser, IP-address, operating system and interface, language and version of browser software.
Your IP-address will be used to enable your access to our website or app. Once the IP-address is no longer necessary for this purpose, we will shorten your IP-address by removing the last octet of your IP-address. The metadata, including the shortened IP-address will be used to improve the quality and services of our website or app by analyzing the usage behavior of our users.
Product Orders
If you order a product via our website or app, Central Medical (Pty) Ltd collects and processes the following personal data about you: Your account data, type and amount of product, purchase price, order date, order status, product returns, customer care requests. Central Medical (Pty) Ltd processes such personal data for purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing and exercising legal claims, and tailored marketing.
Sweepstakes and Giveaways:
If you participate in a sweepstake and/or Giveaway, Central Medical (Pty) Ltd collects and processes the following personal data about you: Name, postal address, email address, date of entry, selection as winner, prize, answer to quiz. Central Medical (Pty) Ltd processes such personal data for purposes of carrying out the sweepstake and/or giveaway, informing the winner, delivering the price to the winner, carrying out the event, and marketing.
Health Data:
If you order some products, Central Medical (Pty) Ltd may collect and process also information about your health conditions as implied by product order. Health data are sensitive data within the meaning of the GDPR and Central Medical (Pty) Ltd is taking all necessary steps to protect such sensitive data as legally required. Subject to your consent, Central Medical (Pty) Ltd collects and processes your health data solely for the purposes of carrying out the contractual relationship and the product order, providing customer care services, compliance with legal obligations, defending, establishing and exercising legal claims, and tailored marketing.
2. Third Parties
Transfer to service providers
Central Medical (Pty) Ltd may engage external service providers, who act as a data processor of Central Medical (Pty) Ltd, to provide certain services to Central Medical (Pty) Ltd, such as website service providers, marketing service providers or IT support service providers. When providing such services, the external service providers may have access to and/or may process your personal data.
We request those external service providers to implement and apply security safeguards to ensure the privacy and security of your personal data.
Other recipients
Central Medical (Pty) Ltd may transfer – in compliance with applicable data protection law – personal data to law enforcement agencies, governmental authorities, legal counsel, external consultants, or business partners. In case of a corporate merger or acquisition, personal data may be transferred to the third parties being involve in the merger or acquisition.
International transfers of Personal Data
The Personal Data that we collect or receive about you may be transferred to and processed by recipients which are located inside or outside the European Economic Area (“EEA”). The countries include those listed at ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html which provide an adequate level of data protection from a European data protection law perspective. The recipients in the US are partially certified under the EU-U.S. Privacy Shield and thereby recognized as providing an adequate level of data protection from a European data protection law perspective. Other recipients might be located in other countries which do not adduce an adequate level of protection from a European data protection law perspective. Central Medical (Pty) Ltd will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law. With respect to transfers to countries not providing an adequate level of data protection, we base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or by a supervisory authority, approved code of conducts together with binding and enforceable commitments of the recipient, or approved certification mechanisms together with binding and enforceable commitments of the recipient. You can ask for a copy of the such appropriate safeguards by contacting us as set out in Sec. 7 (Contact us) below.
3. Legal basis for the processing
We may carry out the processing of your personal data on the following legal basis:
You have given your consent to the processing of your data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract;
- The processing is necessary for compliance with a legal obligation to which we are subject to;
- The processing is necessary to protect your vital interests of you or of another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- The processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data, in particular if you are a child;
- Other applicable legal basis for data processing, especially provisions set out by member state law;
We may carry out the processing of your sensitive personal data on the following legal basis:
- You have given your explicit consent to the processing of your sensitive personal data for one or more specific purposes;
- The processing is necessary for the purposes of carrying out the obligations and exercising specific rights of Central Medical (Pty) Ltd or of the data subject in the field of employment and social security and social protection law;
- The processing relates to personal data which are manifestly made public by the data subject;
- The processing is necessary for the establishment, exercise or defense of legal claims or whenever courts are acting in their judicial capacity;
The provision of your personal data is required by a statutory or contractual obligation, or necessary to enter into a contract with us or to receive our services/products as requested by you, or simply voluntary for you.
Not providing your personal data may result in disadvantages for you, e.g. you may not be able to receive certain products and services. However, unless otherwise specified, not providing your personal data will not result in legal consequences for you.
4. What rights do you have and how can you assert your rights?
If you have declared your consent regarding certain collecting, processing and use of your personal data, you can revoke this consent at any time with future effect. Further, you can object to the use of your personal data for the purposes of marketing without incurring any costs other than the transmission costs in accordance with the basic tariffs.
Pursuant to the applicable data protection law you have the right (i) to request access to your personal data, (ii) to request rectification of your personal data, (iii) to request erasure of your personal data, (iv) to request restriction of processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal Data (including objection to profiling), and (vii) to object to automated decision making (including profiling).
To exercise your rights please contact us as stated under Sec. 7 (Contact us) below.
In case of complaints you also have the right to lodge a complaint with the competent data protection supervisory authority.
5. Cookies and other tracking technologies
This Site uses cookies so this section gives you details of how cookies are used and how you can control whether to keep or delete cookies.
What is a cookie?
Pieces of information transferred to your computer’s hard disk from a website are known as “cookies”.
They are not computer programs, just small information files which allow websites to store and access information about a user’s browsing patterns.
Most websites use cookies, because they are part of the toolbox which makes the internet a great experience for users. Cookies allow websites to deliver personalized services (for example, remembering a login, keeping products in a shopping basket or showing content which is relevant).
There are different types of cookies: temporary cookies (or session cookies) are erased when the browser closes; persistent cookies are not erased but stay until they are actively erased or they expire (which is dependent on how long the website has programmed the cookie to last).
How to delete a cookie?
Most browsers are automatically set to accept cookies.
You may disable cookies on your browser, but remember that if you do, you may lose many features which are needed to enable the website to work properly.
If you’d like more detailed information about cookies, please visit www.aboutcookies.org which contains comprehensive and independent information about how to disable cookies using browser settings, and how to delete cookies already on your computer.
To delete cookies from your mobile phone you will need to consult your handset manual.
Accepting the Terms of Use
By accepting the Terms of Use as well as by accessing and using the Site, you consent to the use of the cookies. You may also consent to our use of cookies by the settings you have made in your web browser.
6. How long do we keep your Personal Data?
Your personal data will be retained as long as necessary to provide you with the services and products requested. Once our relationship has come to an end, we will either delete your personal data or anonymize your personal data, unless statutory retention requirements apply (such as for taxation purposes). We may retain your contact details and interests in our products or services for a long period of time if Central Medical (Pty) Ltd is allowed to send you marketing materials. Also, we may be required by applicable law to retain certain of your personal data for a period of 10 years after the relevant taxation year. We may also retain your personal data after the termination of the contractual relationship if your personal data are necessary to comply with other applicable laws or if we need your personal data to establish, exercise or defend a legal claim, on a need to know basis only. To the extent possible, we will restrict the processing of your personal data for such limited purposes after the termination of the contractual relationship.
7. Contact us
If you have concerns or questions regarding this Privacy Policy, please contact us:
Central Medical (Pty) Ltd
28 Duiker Road
Canelands, Verulam
Durban, KwaZulu-Natal, South Africa
3629
Tel: +27 32 533 9724