GAPP Think Tank trading as New South Institute, an NPC having its address at the Gordon Institute of Business Science (GIBS), 26 Melville Road, Illovo, Johannesburg, 2196, South Africa (“NSI”, “we”, “our”).

We are committed to complying with applicable data protection laws and set out below details regarding our approach to data protection in all our operations.

This privacy notice applies to all third parties including, partners, donors, NGOs, suppliers, potential employees and other persons who engage with us. If you are an employee or consultant, please contact the Information Officer for the Privacy Notice that is applicable you.

Information we collect from third parties

We collect names, contact details of applicable staff for the purposes of communicating with you.

We collect names and contact details, relevant employee names, financial information of partners and donors in order to determine whether you are aligned to our values and to engage with you regarding the initiatives we may work on with you. We may run online background checks on you before engaging with you which in rare instances may pick up alleged criminal conduct on your part (e.g. media releases) or other special personal information such as religious affiliations or political affiliations – we will process this information in the course of our due diligence process on you.

We collect names, contact details, financial and tax information from suppliers and professional service providers so that we can place orders/instruct you and make payment in respect of any goods or services we receive. We do this on the basis of the intention of contracting with you or for the performance of a contract we have with you.

The provision of the above information is entirely voluntary. However, if we do not receive the information we may not be able to engage with you or perform our obligations in terms of any contract we may have with you.

Information we collect from you when you complete our contact form

If you have completed our contact form, we collect your name, surname, email and telephone number and any other information you provide in order that we can contact you or respond to your question. We will only use the information you provide for this purpose.

Information we collect from you when you apply for a job

We process the information you provide in your curriculum vitae, in our application form and supporting documentation/information during the recruitment process purely for the purposes of assessing your suitability for the role, for contacting you to progress your application and to take up any references you have provided. We may ask you to undergo psychometric testing and the results thereof will be shared with us. The basis for the processing of this information is that a potential employment contract may be concluded, depending on the outcome of our assessment and we have a legitimate interest in finding candidates for roles that we have. In the event that you are successful, this data will form part of your employee file. 

Information collected during research

The information collected during research interviews will be used for the purpose of reports, articles, or other academic publications. Responses will be kept confidential, and the identity of participants will be protected. Any data shared will be presented in an aggregated and anonymized format to ensure participant privacy.

Sharing your personal information

Personal information held by us is processed by appropriate members of staff for the purposes for which the information was provided. We may share your personal information within our organisation and outside the country of your residence with the donor, IT providers and with third parties, namely partners we work with, potential employers, trainers, mentors, volunteers, alumni, event providers, suppliers, travel agents, medical providers, professional advisors such as accountants and lawyers, HR providers and government bodies/regulators.

All our third parties are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow third parties to use your personal information for their own purposes. We only permit them to process your personal information for specified purposes and in accordance with our instructions.

We may disclose your personal information to a prospective buyer or seller in the event that we intend selling or buying any of our assets.

Your rights in relation to your information

Subject to certain limitations on certain rights, you have the following rights in relation to your information:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request deletion or destruction of your personal information. This enables you to ask us to delete or destroy your personal information. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object to where we are processing your personal information for direct marketing purposes.
• Withdraw consent to our use of your information at any time where we rely on your consent to use or process that information. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

Should you have any queries regarding this privacy notice or would like to enforce any rights you may have under applicable data protection laws, please contact us at:

Deputy Information Officer
Postal Address: 46 Hyde Close, Hyde Park, Johannesburg, 2195
Email: revatib@nsi.org.za

We will endeavour to respond to any such requests as soon as is reasonably practicable and in any event within statutory time-limits in the applicable country. In some instances, we may be able to charge a fee for responding to your request and will advise you of this and any applicable amount prior to responding.

You should be aware that certain information is exempt from the right of access. This may include information which identifies other individuals, or information which is subject to legal privilege.  

You should also be aware that in some instances, if you do not provide information or you exercise any rights regarding the deletion or destruction of your information or object to the processing of your information or withdraw consent, we may not be able to perform the contract we have with you or comply with our legal obligations.

Where you request access to your information, we are required by law to use all reasonable measures to verify your identity before doing so. These measures are designed to protect your information and to reduce the risk of identity fraud, identity theft or general unauthorised access to your information.

You also have the right to lodge a complaint with the relevant supervisory authority, details of which are set out below: 

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
P.O Box 31533, Braamfontein, Johannesburg, 2017
Complaints email: complaints.IR@justice.gov.za
General enquiries email: inforeg@justice.gov.za.

Changes to our Privacy Notice

Any changes made to this privacy notice in the future will be posted on the website and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to this notice.
May 2023, Version 1