This page describes your rights under the Protection of Personal Information Act 4 of 2013 (POPIA) of the Republic of South Africa and, where applicable, the General Data Protection Regulation (GDPR) of the European Union. For Dinokeng's full Privacy Policy, see /legal/privacy.
Your South African Privacy Rights (POPIA)
POPIA gives South African residents specific rights regarding their personal information. If you are a South African resident, you have the following rights:
- Right to be informed — You have the right to know how we collect, use and process your personal information.
- Right of access — You have the right to request a copy of the personal information we hold about you. To do so, please contact us at support@mipos.co.za.
- Right to rectification — You have the right to request that we correct any inaccurate personal information we hold about you.
- Right to erasure ("right to be forgotten") — Subject to certain conditions, you have the right to request that we delete or destroy the personal information we hold about you.
- Right to restrict processing — In certain circumstances, you have the right to request that we restrict the processing of your personal information.
- Right to data portability — You have the right to receive your personal information in a structured, commonly used and machine-readable format, and to transmit that data to another controller.
- Right to object — You have the right to object to the processing of your personal information where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground.
- Rights in relation to automated decision-making and profiling — You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Information Officer
Dinokeng's designated Information Officer for purposes of POPIA can be reached at:
Email: support@mipos.co.za
This website is operated on Dinokeng's behalf by a platform provider.
Lawful Basis for Processing
Dinokeng processes your personal information on the following lawful bases under POPIA:
- Contract performance — Processing is necessary to perform the contract with you (i.e., to complete your booking).
- Legal obligation — Processing is necessary to comply with a legal obligation to which we are subject (e.g., tax laws, anti-money laundering laws).
- Legitimate interest — Processing is necessary for the purposes of our legitimate interests, provided those interests are not overridden by your interests, rights and freedoms (e.g., fraud prevention).
- Consent — Where you have given us your specific, informed and unambiguous consent to process your personal information (e.g., for marketing communications).
How We Collect Your Personal Information
We collect personal information directly from you when you:
- Create an account on the Dinokeng platform;
- Make a booking or purchase;
- Contact our support team;
- Subscribe to our newsletter or marketing communications;
- Participate in surveys, competitions or promotions.
We also collect information automatically when you use our website, including through cookies and similar technologies. See our Cookie Policy for more detail.
How We Use Your Personal Information
We use your personal information to:
- Process and confirm your bookings;
- Communicate with you about your bookings and account;
- Provide customer support;
- Send marketing communications (only if you have opted in);
- Improve our products and services through analytics;
- Comply with legal obligations;
- Detect and prevent fraud.
How Long We Retain Your Personal Information
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. When determining the appropriate retention period, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes by other means.
Who We Share Your Personal Information With
We may share your personal information with:
- Operators and service providers — The accommodation, activity and experience operators who need your booking details to provide the service you have purchased;
- Payment processors — Peach Pay process your card payments on our behalf;
- Cloud and IT service providers — We use cloud hosting and related infrastructure services to operate the platform;
- Analytics providers — We use analytics tools to understand how users interact with our platform;
- Legal and regulatory bodies — We may disclose information to law enforcement, courts or regulators when required to do so by law.
We do not sell your personal information to third parties.
Cross-Border Transfers
Some of our service providers and partners may be located outside South Africa. When we transfer personal information outside South Africa, we take steps to ensure that appropriate safeguards are in place in accordance with POPIA's cross-border transfer requirements.
Security of Your Personal Information
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. For details of our technical security measures, see the Data Security section in our Privacy Policy.
GDPR Rights (European Union Residents)
If you are located in the European Union, the GDPR gives you additional rights that broadly mirror those described under POPIA above. In addition, if you believe that our processing of your personal information infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work or the place of the alleged infringement.
How to Exercise Your Rights
To exercise any of the rights described on this page, or to ask questions about how we process your personal information, please contact our Information Officer at support@mipos.co.za. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
Complaints
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa:
Website: inforegulator.org.za
Email: inforeg@justice.gov.za
Changes to This Page
We may update this POPIA / GDPR information page from time to time. Please check back regularly for updates. For all privacy-related questions, contact us at support@mipos.co.za.
Questions about this page: support@mipos.co.za.