POPIA Requests

How to exercise applicable rights concerning personal information processed by RSA Property.

1. Your rights under POPIA

POPIA gives data subjects rights in relation to personal information processed by a responsible party. Depending on the circumstances and any lawful limitations, you may ask RSA Property to confirm whether it holds personal information about you, request access to that information, request correction or deletion, or object to certain processing.

2. Requests you can make

• Access: ask whether RSA Property holds personal information about you and request access where permitted.
• Correction: ask RSA Property to correct information that is inaccurate, incomplete, misleading or outdated.
• Deletion: ask for deletion or destruction where POPIA permits and where RSA Property has no lawful basis or obligation to retain the information.
• Objection: object to processing in circumstances recognised by POPIA.
• Direct marketing: withdraw consent or opt out of electronic direct marketing where applicable.

3. How to submit a request

Email your request to info@rsaproperty.co.za with the subject line POPIA Request. Include your full name, preferred contact details, the nature of the request, enough information to identify the relevant account, enquiry, listing or record, and a clear description of the action you want RSA Property to take.

If you are acting for another person, include proof that you are authorised to do so.

4. Identity verification

Before providing access to personal information or making a material change, RSA Property may take reasonable steps to verify the identity of the requester and to protect the information of other people. Only information reasonably necessary for verification should be requested.

5. What happens after submission

RSA Property will assess the request, confirm whether further information is required, identify the relevant records and determine what action is required or permitted by law. Where a request falls under PAIA, the PAIA procedure, prescribed forms, statutory time periods and fees may apply.

If RSA Property cannot grant a request in full, the response should explain the lawful basis for the decision to the extent required by law.

6. Lawful limitations and retention

A request for deletion does not automatically require deletion of every record. RSA Property may retain information where retention is required or permitted by law, reasonably necessary for contractual or evidentiary purposes, needed to establish or defend legal rights, necessary for fraud or security controls, or otherwise lawfully justified.

7. Complaints

If you believe your personal information has been processed unlawfully, you may first contact RSA Property so the matter can be investigated. You may also have the right to lodge a complaint with the Information Regulator of South Africa in accordance with the applicable procedure.

8. Contact