COLLECTION OF PERSONAL DATA:

• Control data– when processing sales with STM Riduttori South Africa we may collect personal information, payment information, purchase details, consent, preferences, geological and regulatory information.
• Use of the website – using the contact function will collect your email address, contact number, and name/s.

DATA COLLECTION METHODOLOGY:

STM Riduttori South Africa will collect and process your personal data in the following circumstances:

• Managing the website’s operations to utilise its features;
• Reaching out to us for post-sales support, to obtain product information, or to access and download technical datasheets;
• Utilising the contact features on the Website; and
• Responding to our marketing campaigns.

DATA USE:

The processing of personal data must adhere to legal requirements as outlined in data protection laws currently in effect, as described below:

Operational Management Purposes: Accessing the website and all associated functions. The company collects your contact and website usage data to facilitate entry into your Personal Area, enabling document downloads regarding services purchased from your Personal Area, requesting after-sales assistance, and accessing technical data sheets about our products.

Note: “Personal Area” refers to a personalised section or account on the company’s website that is specifically designated for individual users.

Basis for Processing:

• Fulfilling contractual obligations.
• Providing data is mandatory to address your request; failure to do so would hinder our ability to respond.

Compliance with Legal Obligations: Meeting legal obligations, regulatory requirements, or legal authority measures, and defending rights in court. The company collects your contact data to fulfil legal obligations and/or defend its rights before the law.

Basis for Processing:

• Legal obligations that the company must adhere to.

Marketing and Promotional Offers: Tailoring marketing efforts to meet your preferences and providing promotional offers. The company may process your contact data for marketing and advertising communications to inform you about product sales information, newsletters, trade fairs, and events. This is done via email and telephonically provided specific consent is given.

Basis for Processing: Consent. Failure to provide consent will not affect contractual relations. Consent can be revoked at any time.

PERSONAL DATA SECURITY:

The company employs a comprehensive range of security measures to enhance protection and maintain the security, integrity, and accessibility of your personal data. All personal data is stored securely on our servers, adhering to our standards and security policies.

INFORMATION RETENTION:

We retain your information only for the duration necessary to fulfill the purpose for which it was intended or for any other legitimate associated reasons. Data is stored until the longest-term purpose ceases. Access to your personal data is restricted to those who require it for essential purposes. Data no longer needed or lacking legal requirements for retention is either irreversibly anonymized or securely destroyed.

Data storage durations:

• Compliance with contractual obligations: Data processed for contractual obligations can be retained for the contractual duration or up to 10 years to address any pending matters, including accounting documents.
• Operational management and associated purposes for website access: Data processed for these purposes can be retained for the contractual duration or up to 10 years.
• Complaints and disputes: Personal data necessary for defence, action, or claims may be retained for the duration in which the claim can be pursued.
• Marketing purposes: Personal data processed for marketing may be retained for up to 24 months from the date of last consent unless you oppose receiving further communications.

ACCESS:

Authorised employees may access your personal data, acting as processors if required to support service delivery.

DATA PROTECTION RIGHTS:

Under specific circumstances, you are entitled to request the following from us:

• Access to your personal data.
• A copy of the personal data you provided (commonly known as data portability).
• Rectification of any inaccuracies in the data we hold.
• Erasure of data for which we no longer have legal processing requirements.
• Objection to processing as permitted by relevant laws.
• Limitation of how we process your personal data, in accordance with applicable data protection laws.

It’s important to note that there are exceptions to exercising these rights, aimed at safeguarding public interest (such as crime prevention) and our interests (such as maintaining professional confidentiality). If you choose to exercise any of these rights, we will verify your eligibility to do so and typically respond within one month.

For any queries regarding the processing of personal information, please contact us in writing at info@stmafrica.co.za