Our Commitment to Data Protection
moss-juniper is committed to ensuring that your personal data is protected in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection legislation. This page outlines how we comply with GDPR requirements and explains your rights as a data subject.
Data Controller
moss-juniper acts as the data controller for personal data collected through this website. This means we determine the purposes and means of processing your personal data. Our contact details are:
moss-juniper
42 Greenfield Office Park
Rosebank, Johannesburg
2196, South Africa
Email: [email protected]
Legal Basis for Processing
We process personal data on the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
- Contract: Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract.
- Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
- Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
Your Rights Under GDPR
Under the GDPR, you have the following rights in relation to your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing of it.
Right to Data Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to our processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also notify you directly.
International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. When your data is no longer needed, it will be securely deleted or anonymised.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.
Changes to This Notice
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.