PRIVACY POLICY

1. Introduction

CNBM South Africa (“CNBM”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, contact our team, enquire about our products and services, apply for a position, or engage with us in a business capacity.

We process personal information in accordance with applicable South African data protection legislation, including the Protection of Personal Information Act 4 of 2013 (“POPIA”), and other applicable laws.

By using our website, you acknowledge that you have read this Privacy Policy. Where the law requires your consent for a particular processing activity, we will request that consent separately.

2. Who We Are

This Privacy Policy applies to the website and relevant online services operated by CNBM International South Africa (Pty) Ltd (“CNBM South Africa”, “we”, “us” or “our”).

Company Details

  • Registered company name: CNBM International South Africa (Pty) Ltd

  • Company registration number: 2016/293988/07

  • VAT registration number: 4150278705

  • Physical address: Unit 11, No. 18 Tsessebe Crescent, Corporate Park South, Midrand, Gauteng, South Africa

  • Website: https://cnbmsa.co.za/

  • Contact person: Mr Zheng Wang

  • Privacy enquiries: wangzheng@cbmie.com

CNBM South Africa is committed to handling personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and other applicable South African laws.

For questions about this Privacy Policy, requests relating to personal information, or concerns about how we process personal information, please contact us at wangzheng@cbmie.com.

Information Officer

CNBM South Africa will identify and maintain the details of its duly designated Information Officer in accordance with applicable South African data protection requirements. The Information Officer is responsible for overseeing the organisation’s compliance with POPIA and handling relevant privacy matters.

 

 

3. Personal Information We Collect

The personal information we collect depends on how you interact with us.

3.1 Information You Provide to Us

We may collect the following information when you complete a contact form, request a quotation, enquire about our products or communicate with our team:

  • Name and surname.

  • Company name and job title.

  • Business email address.

  • Telephone or mobile number.

  • Country, city and business address.

  • Details about your company or business activities.

  • Products, services or solutions you are interested in.

  • Project requirements, quotation requests and order details.

  • Messages, enquiries, correspondence and supporting documents you submit.

Please do not submit unnecessary sensitive or confidential personal information through our general website forms.

3.2 Sales, Distributor and Procurement Enquiries

If you enquire about purchasing products, becoming a distributor, supplying products or services, or establishing a business relationship with CNBM, we may collect additional information relevant to that enquiry.

This may include company registration details, business credentials, product specifications, delivery requirements, supplier information and relevant business documentation.

3.3 After-Sales and Technical Support

If you contact us for after-sales or technical support, we may collect product model numbers, serial numbers, order references, warranty documentation, photographs, error messages and other information reasonably necessary to assess and respond to your request.

3.4 Careers and Recruitment

If you apply for a position or submit your CV, we may collect information such as your contact details, employment history, qualifications, skills, CV, supporting documents and information relevant to the recruitment process.

Recruitment information will be used to assess your application, communicate with you and administer the recruitment process. Any additional use of your application for future vacancies will be subject to applicable law and appropriate notice or consent where required.

3.5 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on the website configuration and technologies in use.

This may include:

  • IP address.

  • Browser type and version.

  • Device and operating system information.

  • Pages visited and links clicked.

  • Date, time and duration of visits.

  • Referring websites.

  • Website performance and diagnostic information.

We use this information where appropriate to operate, maintain, secure and improve our website.

3.6 Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, understand website usage and improve user experience.

Some cookies may be placed by third-party services integrated into our website, such as analytics, maps, video or other embedded content.

Where required by applicable law, we will obtain consent before placing non-essential cookies or using similar technologies. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

Please refer to our Cookie Policy, if published, for further information about the cookies used on this website.

4. Why We Use Your Personal Information

We process personal information for specific and legitimate business purposes, including:

  • Responding to enquiries and requests for information.

  • Preparing quotations and managing sales opportunities.

  • Processing and administering orders and business transactions.

  • Providing after-sales assistance and responding to technical issues.

  • Assessing distributor applications and business partnerships.

  • Evaluating supplier and procurement enquiries.

  • Managing recruitment applications and communicating with candidates.

  • Maintaining business records and fulfilling contractual obligations.

  • Meeting applicable legal, regulatory and accounting requirements.

  • Maintaining website security and preventing fraud, misuse or unauthorised access.

  • Analysing website performance and improving our services.

  • Sending relevant business communications or marketing where legally permitted.

We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless we have a lawful basis to do so.

5. The Legal Grounds for Processing

Under POPIA, personal information must be processed lawfully and reasonably, and only to the extent that it is adequate, relevant and not excessive for the intended purpose.

Depending on the circumstances, we may process personal information where:

  • You have provided consent.

  • Processing is necessary to take steps at your request or perform a contract.

  • Processing is necessary to comply with a legal obligation.

  • Processing protects a legitimate interest of yours.

  • Processing is necessary to pursue a legitimate interest of CNBM or another relevant party, where permitted by law.

Where we rely on consent, you may withdraw it, subject to applicable law. Withdrawal does not affect the lawfulness of processing that took place before withdrawal, or processing that has another lawful basis.

6. Direct Marketing and Communications

We may send you business-related communications concerning your enquiries, orders, products or services where permitted by law.

We will comply with applicable legal requirements for electronic direct marketing. Where consent is required, we will obtain it before sending marketing communications.

You can opt out of marketing communications by using the unsubscribe mechanism provided or contacting us directly.

Opting out of marketing will not prevent us from sending essential communications relating to an existing order, enquiry, contractual relationship or legal obligation.

7. When We Share Personal Information

We do not sell your personal information.

We may share personal information where reasonably necessary for the purposes described in this Privacy Policy, including with:

  • CNBM group companies and relevant regional offices, where necessary to manage enquiries, coordinate services or support business operations.

  • Authorised distributors, suppliers and business partners, where required to respond to your request or fulfil a relevant business arrangement.

  • Service providers and operators, such as website hosting providers, email providers, IT support providers, form-processing services and analytics providers.

  • Professional advisers, including legal, accounting and audit advisers, where necessary.

  • Regulatory authorities, law enforcement agencies or other parties, where disclosure is required or authorised by law.

Where third parties process personal information on our behalf, we will take appropriate steps to require suitable confidentiality and security safeguards in accordance with applicable law.

We will only share personal information to the extent reasonably necessary for the relevant purpose.

8. International Transfers of Personal Information

CNBM operates in an international business environment. Depending on your enquiry and the services involved, personal information may need to be accessed or processed by relevant CNBM group companies, service providers or business partners located outside South Africa.

Where personal information is transferred outside South Africa, we will take steps to ensure that the transfer complies with section 72 of POPIA and any other applicable legal requirements.

Depending on the circumstances, this may involve ensuring that the recipient is subject to an adequate level of protection, that appropriate agreements or safeguards are in place, or that another permitted legal basis applies.

Please contact us if you would like further information about international transfers relevant to your personal information.

9. How We Protect Your Personal Information

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, unlawful processing, disclosure, alteration or destruction.

Depending on the systems and information involved, these measures may include access controls, password protection, security monitoring, secure data transmission, backups, staff confidentiality obligations and agreements with service providers.

No method of electronic transmission or storage can be guaranteed to be completely secure. However, we take reasonable steps to maintain appropriate safeguards and respond to potential security incidents.

If a security compromise occurs that triggers a notification obligation under POPIA, we will notify the Information Regulator and affected data subjects as required by law.

10. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, subject to applicable legal, contractual, regulatory and operational requirements.

Retention periods may vary according to the type of information and the circumstances.

For example:

  • Enquiry information may be retained for as long as necessary to respond to the enquiry and manage the resulting business relationship.

  • Transaction and financial records may be retained for the periods required by applicable law.

  • Recruitment information may be retained for the period necessary to manage the recruitment process and any applicable legal obligations.

  • Website logs and analytics data may be retained according to our security, operational and analytics requirements.

When personal information is no longer required and there is no lawful reason to retain it, we will take reasonable steps to delete, destroy or de-identify it securely.

11. Your Rights Under POPIA

Subject to applicable law, you may have the right to:

  • Request confirmation of whether we hold your personal information.

  • Request access to personal information we hold about you.

  • Request the correction or deletion of inaccurate, irrelevant, excessive, outdated, incomplete or unlawfully obtained information.

  • Object to certain processing activities on reasonable grounds relating to your particular situation.

  • Object to the use of your personal information for direct marketing where applicable.

  • Withdraw consent where processing is based on consent.

  • Request the destruction or deletion of personal information where permitted by law.

  • Lodge a complaint with the Information Regulator of South Africa.

These rights are subject to applicable legal conditions and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights, please contact our Information Officer using the contact details in Section 2.

12. Information About Children

Our website and business services are primarily intended for business customers, professionals and other adults.

We do not knowingly collect personal information from children in circumstances where the collection would contravene POPIA. Where personal information relating to a child is processed, we will comply with the applicable legal requirements.

If you believe that a child has provided personal information to us unlawfully, please contact our Information Officer.

13. Third-Party Websites and Services

Our website may contain links to third-party websites or integrate third-party services, such as maps, social media platforms, video services or external product resources.

These third parties may process personal information in accordance with their own privacy policies and terms.

CNBM is not responsible for the privacy practices of third-party websites that we do not control. We encourage you to review their privacy policies before submitting personal information to them.

14. Automated Processing

We do not intend to make decisions that produce legal or similarly significant effects on individuals solely through automated processing using personal information collected through this website, unless appropriately disclosed and permitted by applicable law.

If automated decision-making is introduced in the future, we will assess the applicable legal requirements and provide relevant information and safeguards where required.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality, service providers or legal obligations.

The latest version will be published on this page, together with the date it was last updated.

We encourage you to review this page periodically.

16. Complaints and Contact Details

If you have a question, concern or complaint about how we process your personal information, please contact our Information Officer in the first instance.

CNBM South Africa — Information Officer

Email: [Insert privacy email address]
Postal address: [Insert postal address]
Physical address: [Insert physical address]

You may also lodge a complaint with the Information Regulator of South Africa using the contact details published on its official website:

Information Regulator of South Africa
Website: https://inforegulator.org.za/

17. Related Documents

This Privacy Policy should be read together with other relevant policies and notices published by CNBM South Africa, where applicable, including:

  • The Promotion of Access to Information Act (PAIA) Manual.

  • The Cookie Policy.

  • Website Terms and Conditions.

  • Recruitment Privacy Notice.

  • Any specific privacy notice presented when you submit personal information.

These documents may provide additional details about particular processing activities and your rights under applicable law.