Privacy

Online Card - Privacy Policy

We are very pleased you showed interest in our business. Data security is of particular high importance for Online Card management. The use of the Online Card web pages is possible without any indication of personal data; however, if a data subject wishes to use special enterprise services through our website, If personal data processing is necessary and there is no statutory basis for such processing, we generally get consent from the data subject.

The processing of personal data, such as a data subject's name , address, e-mail address or telephone number, shall always be consistent with the General Data Protection Regulation ( GDPR), And in line with the country-specific data protection regulations that apply to the Online Card. Through this declaration of data protection our company would like to inform The general public of the nature, extent and purpose of the personal data collected, used and processed by us; In addition , data subjects are informed of the rights to which they are entitled, by means of this data protection declaration.

As the controller, Online Card has put in place numerous technical and organizational measures to ensure the fullest protection of personal data processed through this website. However, internet-based data transmissions can have safety gaps in principle, so absolute protection can not be guaranteed. For this reason, it is free for each data subject to transfer personal data to us via alternative means , e.g. by phone.

1.                Specifications

 

Online Card's data protection declaration is based on the terms used by the European legislator when adopting the General Data Protection Regulation ( GDPR). Our data protection declaration should be legible to the general public, as well as our customers and business partners, and understandable. To ensure this, we wish to explain the terminology used first.

 

In this data protection declaration, we use, inter alia, the following terms:

 

A)   Personal Information

Personal data means any information concerning a natural person who has been identified or identified. An identifiable natural person is one who can be directly or indirectly identified, Particularly by reference to an identifier such as a name, identification number , location data, online identifier or to one or more physical , physiological , genetic, specific factors; mental, economic, cultural or social identity of that natural person.

 

B)    Subject Data

The data subject is any natural person identified or identifiable, whose personal data is processed by the controller responsible for the processing.

 

c) Processing

Processing shall be any operation or set of operations carried out on personal data or on personal data sets, whether or not by automated means; For example, collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, transmission disclosure, dissemination or otherwise making available, alignment or combination; Limitation, erasure or destruction.

D, Processing constraints

Processing restriction is the marking of stored personal data with a view to limiting their future processing.

 

E) Profiling

Profiling means any form of automated processing of personal data involving the use of personal data to assess certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of that natural person at work, economic circumstances, health , personal preferences , interests, reliability, behaviour, location or movements.

F) Pseudonymisierung

Pseudonymisation means the processing of personal data in such a way that personal data can no longer be attributed to a particular data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that personal data is not attributed to an identified data subject or  identifiable natural person.

G) Processing Controller or controller responsible

The controller or controller responsible for the processing is the natural or legal person, public authority , agency or other body which, alone or in conjunction with others, determines the purposes and means of the processing of personal data; the controller shall, where the purposes and means of such processing are determined by Union or Member State law,

I)     Receiver

The recipient is a natural or legal person, public authority , agency or other entity to whom the personal data, whether a third party or not, are disclosed. However, public authorities which may receive personal data in accordance with Union or Member State law in the course of a particular inquiry shall not be considered as recipients; the processing of such data by that public authority; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing

 

J)     Third party

Third party shall be a natural or legal person, public authority , agency or body other than the data subject, controller, processor, and persons authorized to process personal data under the direct authority of the controller or processor.

 

K)    Consensus

The consent of the data subject shall be any freely given, specific, informed and unambiguous indication of the wishes of the data subject by which he or she signifies consent to the processing of personal data relating to him or her by a statement or a clear affirmative action.

 

 

2.                Name and Address of the controller

 

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

 

Rinoko Group Pty Ltd

Fourways

Johannesburg

Gauteng, South Africa

Phone: +27640602628

Email: support@onlinecard.co.za

Website: https://www.onlinecard.co.za | http://www.rinokogroup.co.za

 

3.                Name and Address of the Data Protection Officer

 

The Data Protection Officer of the controller is:

Data Protection Officer Katekani Mahlaule

Rinoko Group Pty Ltd

Fourways

Johannesburg

Gauteng, South Africa

Phone: +27640602628

Email: support@onlinecard.co.za

https://www.rinokogroup.co.za

 

Any data subject may directly contact our Data Protection Officer at any time with all data protection questions and suggestions.

 

4.                Crockets

 

OnlineCard 's web-pages use cookies. Cookies are text files which are stored via an Internet browser on a computer system. Cookies are used on many Internet sites and servers. Many cookies have a so-called cookie identifier. A Cookie ID is a unique cookie identifier. It consists of a character string through which web pages and servers can be assigned to the particular internet browser in which the cookie was stored. This enables the websites and servers visited to differentiate the individual browser of the dates subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

 

By using cookies, Online Card can provide more user-friendly services to the users of this website which would not be possible without setting the cookie.

 

Using a cookie you can optimize the information and offers on our website with the user in mind. As mentioned previously, cookies allow us to recognize users of our website. The aim of this recognition is to make use of our website easier for users. The website user who uses cookies, for example, does not have to enter data about access each time the website is accessed, because this is taken over by the website, Therefore the cookie is stored on the user's computer system. Another example is a shopping cart cookie at an online store. The online store recalls the articles which a customer placed via a cookie in the virtual shopping cart.

 

The data subject may, by means of a corresponding setting of the Internet browser used, prevent the setting of cookies through our website at any time, and may thus permanently deny the setting of cookies. In addition, cookies that have already been set may be deleted at any time via an Internet browser or other software programmes. This is possible with all popular web browsers. If deactivated by the data subject the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

 

5.                Collection of general data and information

 

The website Online Card collects a series of general data and information when a data subject or automated system calls up the website.

This general data and information are stored in the server log files. Collected may be

1.       the browser types and versions used,

2.       the operating system used by the accessing system,

 

3.       the website from which an accessing system reaches our website (so-called referrers) the sub-websites

4.       the date and time of access to the Internet site

5.       an Internet protocol address (IP address),

6.       the Internet service provider of the accessing system.

7.       any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, Online Card does not draw any conclusions about the data subject. Rather, this information is needed to

1.       deliver the content of our website correctly,

2.       optimize the content of our website as well as its advertisement,

3.       ensure the long-term viability of our information technology systems and website technology,

4.        provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

 

Online Card therefore analyzes statistically anonymously collected data and information, with the aim of increasing our company's data protection and data security and ensuring an optimum level of protection of personal data that we process. Server log file anonymous data is stored separately from all personal data provided by a data subject.

6.      Registration on our website

 

The data subject has the option to register with the indication of personal data on the controller 's website. The respective input mask used to register determines which personal data are transmitted to the controller. The personal data entered by the data subject are collected and stored by the controller solely for internal use, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that use personal data for an internal purpose attributable to the controller, as well.

By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) and used by the data subject date, and time of the registration are also saved.

The storage of this data takes place against the background that this is the only way to prevent misuse of our services and to enable the investigation of committed offenses, if necessary. Insofar this data must be stored in order to secure the controller. This data will not be disclosed to third parties unless a statutory obligation exists to disclose the data or if the data is transferred serves the aim of criminal prosecution.

The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to offer the data subject contents or services that may only be offered to registered users due to the nature of the matter in question.

Registered persons are free to change the personal data specified during the registration at any time, or to have them completely deleted from the data stock of the controller.

The data controller shall, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. In addition, the data controller shall correct or erase personal data at the request or indication of the data subject, insofar as there are no statutory storage obligations.

The entirety of the controller’s employees are available to the data subject in this respect as contact persons.

7) Sign up for our newsletters

 

Users are given the opportunity to subscribe to our company's newsletter on the Online Card website. The input mask used for that purpose determines what personal data will be transmitted, as well as when the controller will order the newsletter.

Online Card informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if:

1.       the data subject has a valid e-mail address and

2.       the data subject registers for the newsletter shipping.

For the first time in the double opt-in procedure, a confirmation e-mail will be sent to the e-mail address registered by a data subject for newsletter shipment, for legal reasons. This confirmation e-mail is used to prove whether the owner of the e-mail address is authorized to receive the newsletter as the data subject

During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration.

The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter.

Furthermore, newsletter subscribers may be informed by e-mail as long as this is necessary for the operation of the newsletter service or registration in question, as may be the case in the case of changes to the newsletter offer or in the case of changes in technical circumstances. Personal data collected through the newsletter service will not be transferred to third parties.

The data subject may terminate his subscription to our newsletter at any time. The consent given by the data subject for the shipping of the newsletter to the storage of personal data may be revoked at any time. A corresponding link is found in each newsletter for the purpose of revoking the consent. It is also possible to unsubscribe from the newsletter at any time directly on the controller 's website, or to communicate this in a different way to the controller.

8) Newsletter-Tracking

The Online Card newsletter contains so-called pixels for tracking. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format for recording and analyzing log files. This allows for statistical analysis of the online marketing campaigns success or failure. Online Card can see if and when an e-mail was opened by a data subject, based on the embedded tracking pixel, and which links were called up by data subjects in the e-mail.

Such personal data collected in the tracking pixels contained in the newsletters are stored and analysed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. Online Card automatically regards a withdrawal from the receipt of the newsletter as a revocation.

9. Contact possibility via the website

 

The website of Online Card contains information that allows a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

10. Subscription to comments in the blog on the website

 

The comments made in the blog of Online Card may be subscribed to by third parties. There is the possibility that a commenter subscribes to the comments following his comments on a particular blog post.

If a data subject decides to subscribe to the option, an automatic confirmation e-mail will be sent by the controller to check the double opt-in procedure as to whether the owner of the specified e-mail address has decided in favour of this option. You may terminate the option to subscribe to comments at any time.

11. Routine erasure and blocking of personal data

 

The data controller shall only process and store the data subject 's personal data for the period necessary to attain the storage purpose, or to the extent granted by the European legislator or other legislators in the laws or regulations to which the controller is subject.

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

12. Rights of the data subject

 

a.        Right of confirmation

Each data subject shall have the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data relating to him or her is being processed. If a data subject wishes to exercise this right of confirmation, he or she may contact any of the controller 's employees at any time.

b.       Right of access

Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:

the purposes of the processing;

the categories of personal data concerned;

the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing;

the existence of the right to lodge a complaint with a supervisory authority;

where the personal data are not collected from the data subject, any available information as to their source;

the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

In addition, the data subject shall be entitled to obtain information as to whether personal data is transferred to a third country or to an international organisation. Where this is the case, the data subject is entitled to be informed of the appropriate safeguards concerning the transfer.

If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.

c.        Right to rectification

Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.

d) Right to erasure (Right to be forgotten)

Each data subject shall have the right granted by the European legislator to obtain from the controller, without undue delay, the erasure of personal data relating to him or her and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds is applicable, provided that the processing is not necessary:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.

The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.

The personal data have been unlawfully processed.

The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by Online Card, he or she may, at any time, contact any employee of the controller.

An employee of Online Card shall promptly ensure that the erasure request is complied with immediately.

 

Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of Online Card will arrange the necessary measures in individual cases.

 

e) Right of restriction of processing

Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:

 

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use instead.

The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.

The data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the above conditions is fulfilled, and a data subject wishes to request a restriction on the processing of personal data stored by Online Card, he or she may contact any controller employee at any time. Online Card employee will arrange processing restriction.

f) Right to data portability

Each data subject shall have the right granted by the European legislator to receive, in a structured, commonly used and machine-readable format, the personal data relating to him or her provided to a controller. He or she shall be entitled to transmit those data to another controller without prejudice to the controller to whom the data is transmitted to which the personal data have been provided, if the processing is based on consent

pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.

 

In order to assert the right to data portability, the data subject may at any time contact any employee of Online Card.

 

g) Right to object

Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions.

Online Card shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If Online Card processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Online Card to the processing for direct marketing purposes, Online Card will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Online Card for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

 

In order to exercise the right to object, the data subject may contact any employee of Online Card. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.

 

h) Automated individual decision-making, including profiling

Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision:

1.       is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or

2.        is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or

3.       is not based on the data subject's explicit consent.

If the decision:

1.       is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or

2.        it is based on the data subject's explicit consent, Online Card shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of Online Card.

 

I)             Right to withdraw data protection consent

Each data subject shall have the right to withdraw his or her consent to the processing of his or her personal data by the European legislator at any time. Where the data subject wishes to exercise the right to withdraw the consent, he or she may contact any Online Card employee at any time.

13. Data protection for applications and the application procedures

 

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

 

14. Data protection provisions about the application and use of Facebook

 

On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network.

A social network is a place for Internet social meetings, an online community that generally allows users to communicate and interact with each other in a virtual space. A social network can serve as a platform for the exchange of views and experiences or allow personal or business-related information to be provided by the Internet community. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests

 

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

 

With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.

 

If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the "Like" button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.

Through the Facebook component, Facebook always receives information about the data subject 's visit to our website whenever the data subject is simultaneously logged into Facebook during the time of the call-up to our website. This happens independently of whether100 the data subject clicks on the Facebook component. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.

 

The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.

15. Data protection provisions about the application and use of Instagram

 

The controller has integrated the components of the Instagram service into this website. Instagram is a service that can qualify as an audio-visual platform that allows users to share photos and videos, as well as to disseminate such data to other social networks.

The operating company of the services offered by Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, UNITED STATES.

 

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which an Instagram component (Insta button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding Instagram component of Instagram. During the course of this technical procedure, Instagram becomes aware of what specific sub-page of our website was visited by the data subject.

 

If the data subject is logged in at the same time on Instagram, Instagram detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-page of our Internet page was visited by the data subject. This information is collected through the Instagram component and is associated with the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, then Instagram matches this information with the personal Instagram user account of the data subject and stores the personal data.

Instagram receives information that the data subject has visited our website via the Instagram component provided that the data subject is logged in at Instagram at the time of the call to our website. That happens irrespective of whether the person clicks on the Instagram button. If such a transmission of information to Instagram is not desirable for the data subject, then he or she can prevent this by logging off from their Instagram account before a call-up to our website is made.

 

 

Further information and the applicable data protection provisions of Instagram may be retrieved under https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

 

16. Data protection provisions about the application and use of LinkedIn

 

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.

 

The operating company of LinkedIn is LinkedIn Corporation, 2029 Sterling Court Mountain View, CA 94043, UNITED STATES. For privacy matters outside of the UNITED STATES LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

 

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.

 

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

 

LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.

 

LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, ComScore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy.

 

17. Data protection provisions about the application and use of Twitter

On this website, the controller has integrated components of Twitter. Twitter is a multilingual, publicly accessible microblogging service on which users may publish and spread so-called tweets, e.g. short messages, which are limited to 280 characters. These short messages are available for everyone, including those who are not logged on to Twitter. The tweets are also displayed to so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Furthermore, Twitter allows you to address a wide audience via hashtags, links or retweets.

 

The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, UNITED STATES.

 

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available under https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers.

 

If the data subject is logged in at the same time on Twitter, Twitter detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-page of our Internet page was visited by the data subject. This information is collected through the Twitter component and associated with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, then Twitter assigns this information to the personal Twitter user account of the data subject and stores the personal data.

 

Twitter receives information via the Twitter component that the data subject has visited our website, provided that the data subject is logged in on Twitter at the time of the call-up to our website. This occurs regardless of whether the person clicks on the Twitter component or not. If such a transmission of information to Twitter is not desirable for the data subject, then he or she may prevent this by logging off from their Twitter account before a call-up to our website is made.

 

The applicable data protection provisions of Twitter may be accessed under https://twitter.com/privacy?lang=en.

 

18. Data protection provisions about the application and use of YouTube

 

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

 

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

 

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

 

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

 

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

 

YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

 

OTHER POINTS

We may keep certain login credentials of users (like email, website, phone, username, passwords, etc) for our SaaS products and other websites, platforms, apps and software tools. These are necessary to provide auto login, security measures, to abide fair usage policy by our users and other platform usability and feature related uses. However we do not share or sell such information to third parties or outsiders.

 

onlinecard.co.za Privacy Policy

This privacy policy has been compiled to better serve those who are concerned with how their 'Personally Identifiable Information' (PII) is being used online.

PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context.

Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.

What personal information do we collect from the people that visit our blog, website or app?

When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, business information, WhatsApp number, business details, about,

social URLs and profile pages, and other related information that people want to put on their digital business card or other details to help you with your experience.

When do we collect information?

When you register on our website, place an order, subscribe to a newsletter, respond to a survey, fill out a form, use live chat, open a support ticket or enter information on our website, we collect information from you.

Provide us with feedback on our products or services

How do we use your information?

When registering, making a purchase, signing up for our newsletter, responding to a survey or marketing communication, browsing the website, or using certain other site features, we may use the information we collect from you in the following ways:

• To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested.

      • To improve our website in order to better serve you.

      • To allow us to better service you in responding to your customer service requests.

      • To administer a contest, promotion, survey or other site feature.

      • To quickly process your transactions.

      • To ask for ratings and reviews of services or products

      • To follow up with them after correspondence (live chat, email or phone inquiries)

 

How do we protect your information?

In order to make your visit to our site as safe as possible, our website is scanned on a regular basis for security holes and known vulnerabilities.

We use regular Malware Scanning.

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

 

We implement a variety of security measures when a user places an order to maintain the safety of your personal information.

 

All transactions are processed through a gateway provider and are not stored or processed on our servers.

 

 

Do we use 'cookies'?

 

Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

 

We use cookies to:

      • Help remember and process the items in the shopping cart.

      • Understand and save user's preferences for future visits.

      • Keep track of advertisements.

      • Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.

Every time a cookie is sent, you can choose to have your computer warn you or you can opt to turn off all cookies. You do this through the configuration of your browser. Because the browser is slightly different, look at the help menu of your browser to learn the correct way to modify your cookies.

If users disable cookies in their browser:

If you turn cookies off it will turn off some of the features of the site.

Third-party disclosure

 

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice.

This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential.

We may also release information when it's release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property or safety.

 

However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

 

Third-party links

 

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies.

We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

 

Google

 

Google's advertising requirements can be summed up by Google's Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en

 

We use Google AdSense Advertising on our website.

As a third-party vendor Google uses cookies to serve advertisements on our site. Based on previous visits to our website and other websites, Google's use of the DART cookie allows it to serve ads to our users. Users may opt-out of using the DART cookie by visiting the privacy policy of the Google Ad and Content Network.

We have implemented the following:

      • Remarketing with Google AdSense

      • Google Display Network Impression Reporting

      • Demographics and Interests Reporting

      • DoubleClick Platform Integration

Together with third-party vendors such as Google, we use first-party cookies (such as Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers to collect data on user interactions with ad impressions and other functions related to our website.

Opting out:

Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.

 

 

 

 

California Online Privacy Protection Act

 

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. - See more at: http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf

 

According to CalOPPA, we agree to the following:

Users can visit our site anonymously.

Once this privacy policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.

Our Privacy Policy link includes the word 'Privacy' and can easily be found on the page specified above.

 

You will be notified of any Privacy Policy changes:

      • On our Privacy Policy Page

Can change your personal information:

      • By emailing us

How does our site handle Do Not Track signals?

We don't honour Do Not Track signals and Do Not Track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place. We don't honour them because:

There are many resellers on our platform and it is not possible for everyone to disable tracking.

Does our site allow third-party behavioural tracking?

It's also important to note that we allow third-party behavioural tracking

 

COPPA (Children Online Privacy Protection Act)

 

When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online.

 

We do not specifically market to children under the age of 13 years old.

Do we let third-parties, including ad networks or plug-ins collect PII from children under 13?

 

Fair Information Practices

In the United States, the Fair Information Practices Principles form the backbone of privacy law and the concepts they include have played an important role in the development of data protection laws around the world. To comply with the various privacy laws that protect personal information, understanding the Fair Information Practice Principles and how they should be implemented is critical.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:

We will notify the users via in-site notification

      • Within 7 business days

 

We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.

 

CAN SPAM Act

 

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

 

We collect your email address in order to:

      • Send information, respond to inquiries, and/or other requests or questions

      • Process orders and to send information and updates pertaining to orders.

      • Send you additional information related to your product and/or service

      • Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.

 

To be in accordance with CANSPAM, we agree to the following:

      • Not use false or misleading subjects or email addresses.

      • Identify the message as an advertisement in some reasonable way.

      • Include the physical address of our business or site headquarters.

      • Monitor third-party email marketing services for compliance, if one is used.

      • Honor opt-out/unsubscribe requests quickly.

      • Allow users to unsubscribe by using the link at the bottom of each email.

 

If at any time you would like to unsubscribe from receiving future emails, you can email us at

support@onlinecard.co.za and we will promptly remove you from ALL correspondence.

Other Important Disclaimers

All our customers whose Online Card or Profile (web page or post) is created on our website (or platform), can share their Online Card in their network.

They need to mention that we are using remarketing tracking scripts like Facebook Ads or Google Adwords, etc. And even third party or anyone who visits your Online Card will be tracked and we may show them Remarketing Ads.

We also have white label resellers, who may also provide same Online Card or Profile services to their customers. Resellers also need to communicate with their customers about remarketing tracking scripts used for showing third party ads.

All contact and business information present on Online Card or profile are actually public information and anyone (including other customers, outsiders and general public) can browse or search your business or contact details.

So do not put any sensitive data or information on Online Card. Consider this is a public open business listing directory where your contact and business information are make available to the public.

So we suggest resellers and customers and end users to put only those details that you actually want to make publicly available to all on the internet. We do not have control on how website or Online Card visitors will use your contact and business information. Also, you cannot put any products, information or other contents that are prohibited by any laws or don’t abide any laws. You should put contents like images, text, contact details and business information for which you are authorized to share. You should not put any contents for which you don’t have permission to use or is prohibited by any copyright law. You yourself will be liable for putting such illegal contents or for unlawful practices. We may update our terms, privacy and other disclaimers on this page without any further notice. Keep visiting this page to get updated information.

Contacting Us

If there are any questions regarding this privacy policy, you may contact us using the information below.

onlinecard.co.za

Fourways

Johannesburg

South Africa

support@onlinecard.co.za

Last Edited on 2020-09-06