Access to Information Manual

1. Introduction

Section 51 of the Act requires Private Bodies to compile a Manual setting out the procedure and requirements to be adhered to in seeking to obtain access to information held by that Private Body. The section also stipulates the minimum requirements a Manual has to comply with. To this end section 51 of PAIA requires the Manual to contain, amongst others, the following:

• The postal and street address, phone and fax number and, if available, electronic mail address of the head of the body;
• Contact details of the Head of the Private Body;
• Categories of information available without formal request, if any;
• A description of the records available in accordance with other legislation;
• Sufficient detail to facilitate a request for access to a record of the Private Body;
• A description of the categories of subjects and of the information or categories of information;
• A description of the subjects on which the body holds records and the categories of records held on each subject,
• Such other information as may be prescribed
• Purpose of processing
• the Protection of Personal Information Act (PoPIA), Personal Information must be processed for a specified purpose. The purpose for which Personal Information is processed by Vodacom will depend on the nature of the Personal Information and the particular Data Subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time when Personal Information is collected.
• Access to Personal Information
• POPIA provides that a Data Subject may, upon proof of identity, request the Responsible Party to confirm, free of charge, all the information it holds about the Data Subject and may request access to such information, including information about the identity of third parties who have or have had access to such information. Further, POPIA provides that where the Data Subject is required to pay a fee for services provided to him/her, the Responsible Party must provide the Data Subject with a written estimate of the payable amount before providing the service and may require that the Data Subject pay a deposit for all or part of the fee.
• Categories of Data Subjects
• > Vodacom holds information and records on the following categories of Data Subjects: a) employees / personnel of Vodacom; b) clients of Vodacom; c) any third parties and/or suppliers with whom Vodacom conducts its business services; d) contractors of Vodacom; e) partners and agents f) service providers of Vodacom. 
  (This list of categories of Data Subjects is non-exhaustive)
• The categories of recipients to whom the information is supplied
• Depending on the nature of the Personal Information, Vodacom may supply information or records to the following categories of recipients: a) statutory oversight bodies, regulators, law enforcement agencies or judicial commissions of enquiry making a request for information; b) any court, administrative or judicial forum, arbitration, statutory commission, or ombudsman making a request for personal information or discovery in terms of the applicable rules (e.g the Information Regulator ); c) South African Revenue Services, or another similar authority; d) Emergency Service Organisations (if you make an emergency call), including your approximate location; e) anyone making a successful application for access in terms of PAIA; f) subject to the provisions of POPIA and the National Credit Act No. 34 of 2005, Vodacom may share information about a client’s creditworthiness with any credit bureau or credit provider.
• Planned transborder flows of information
• If you are visiting our websites from a country other than South Africa the various communications will necessarily result in the transfer of information across international boundaries. 
  
  Vodacom may also need to transfer your information to other Vodacom or Vodafone group of companies or service providers in countries outside South Africa, in which case we will fully comply with applicable data protection legislation. This may happen if our servers or suppliers and service providers are based outside South Africa, or if our services are hosted in systems or servers in Vodafone Operating Companies outside South Africa including Europe or India and/or if you use our services and products while visiting countries outside this areas. Other countries outside South Africa may not have data protection laws which are similar to those of South Africa, however, Vodacom will ensure that your Personal Information is protected and enter into appropriate agreements to achieve this.
• Security measures implemented to ensure the confidentiality and privacy of the information which is to be processed
• Vodacom is committed to implementing leading data security safeguards. For this reason, Vodacom has specialised security teams who constantly review and improve its measures to protect your Personal Information from unauthorised access, accidental loss, disclosure or destruction. 
  
  If Vodacom has an agreement with another organisation to provide it with services or a service on its behalf to process your Personal Information, then Vodacom will make sure they have appropriate security measures and only process your Personal Information in the way we have authorised them to. These organisations will not be entitled to use your Personal Information for their own purposes. If necessary, our security teams will conduct a due diligence them to make sure they meet the security requirements we have set. 
  
  Communications over the internet (such as emails) are not secure unless they have been encrypted. Further, your communications may go through a number of countries before being delivered, as this is the nature of the internet. Consequently, we cannot accept responsibility for any unauthorised access or loss of Personal Information that is beyond our control.
   
• 2. Definitions
  The following words  shall bear the same meaning as under PoPIA: 
   

“Act/PAIA” means the Promotion of Access to Information Act No. 2 of 2000

“Consent” means a voluntary, specific and informed expression of will in terms of which a Data Subject agrees to the processing of Personal Information relating to him or her

“Data Subject”  means the person to whom Personal Information relates

“Information Officer” means the head of Vodacom as contemplated in section 1 of PoPIA

“Minister” means the Minister of Justice and Correctional Services

“Personal information”  means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person including:

• information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the person;
• information relating to the education or the medical, financial, criminal or employment history of the person;
• any identifying number, symbol, e-mail address, physical address, telephone number or other particular assignment to the person;
• the blood type or any other biometric information of the person;
• the personal opinions, views or preferences of the person;
• correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or  further correspondence that would reveal the contents of the original correspondence;
• the views or opinions of another individual about the person; and
• the name of the person if it appears with other personal information relating to the person or if the  disclosure of the name itself would reveal information about the person

“PoPIA” means Protection of Personal Information Act, Act No 4 of 2013

 “Private body” means a natural person who carries or has carried on any trade, business or profession in that capacity, a partnership or juristic person

“Processing” means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including:

(a) the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use;
(b) dissemination by means of transmission, distribution or making available in    any other form; or
(c) merging, linking, as well as blocking, degradation, erasure or destruction of information;

 “Public body” means any department of state or administration in the national, provincial or local sphere of government or functionary exercising pubic power or exercising public function in terms of any legislation;

“Responsible party”  means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing Personal Information;

“Requester” in relation to –

(a) a public body, means any person making a request for access to a record of that public body (or authorised representative); 
(b)  a private body, means  any person, including, but not limited to, a public body or an official thereof, making a request for access to a record of that private body  (or authorised representative).

3. Vodacom structure and functions

Vodacom is a leading African communications company providing a wide range of communication services, including mobile voice, messaging, data, financial and converged services to over 103 million (including Safaricom) customers. With its roots in South Africa, Vodacom has grown its mobile network business to include operations in Tanzania, the DRC, Mozambique, Lesotho and Kenya. Vodacom’s mobile networks cover a population of over 284 million people. Through Vodacom Business Africa (VBA), we offer business managed services to enterprises in 32 countries. Vodacom is listed on the JSE Limited.

Vodacom is majority owned by Vodafone Group Plc, one of the world’s largest mobile communications companies by revenue. As such Vodacom is bound by and adheres to Vodafone Group Privacy Commitments.

4. Particulars Required in terms of the Section 51(1)(a) of PAIA

To confirm whose particulars to be included, in particular, telephone, email and fax

5. List of Records and Information
The information held by Vodacom has been divided into different categories grouped into twelve subjects, each of which describes a single business unit, for example, "Human Resources". For ease of understanding and navigation, an additional level has been added between the "subject" and "category" levels. This additional level describes more accurately the sub-set of categories that falls under it. For example, under the additional level, the subject "Performance and Remuneration" is made up of information categories describing payroll, bonus and incentives, and employee performance information.

The categories of information are not exhaustive but are merely meant to give a broad indication of the information subject and categories held by Vodacom, without specification. A category may therefore contain sub-categories and sub-sets of information, which are not specifically listed. (For purposes of the list of records and information held by Vodacom see Appendix A: Categories and Types of Information).

Purpose of processing

In terms of POPIA, personal information must be processed for a specified purpose. The purpose for which personal information is processed by Vodacom will depend on the nature of the personal information and the particular data subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time the personal information is collected.

Access to personal information

POPIA provides that a data subject may, upon proof of identity, request the responsible party to confirm, free of charge, all the information it holds about the data subject and may request access to such information, including information about the identity of third parties who have or have had access to such information.

POPIA also provides that where the data subject is required to pay a fee for services provided to him/her, the responsible party must provide the data subject with a written estimate of the payable amount before providing the service and may require that the Requestor pay a deposit for all or part of the fee.

Categories of data subjects

Vodacom holds information and records on the following categories of data subjects:

• employees / personnel of Vodacom;
• any third party with whom Vodacom conducts its business services;
• contractors of Vodacom;
• suppliers of Vodacom; and
• service providers of Vodacom.

(This list of categories of data subjects is non-exhaustive.)

The categories of recipients to whom the information is supplied

Depending on the nature of the Personal Information, Vodacom may supply information or records to the following categories of recipients:

• statutory oversight bodies, regulators or judicial commissions of enquiry making a request for data;
• any court, administrative or judicial forum, arbitration, statutory commission, or ombudsman making a request for data or discovery in terms of the applicable rules (i.e. the Competition Commission in terms of the Competition Act No. 89 of 1998);
• South African Revenue Services, or another similar authority;
• anyone making a successful application for access in terms of PAIA; and
• subject to the provisions of POPIA and the National Credit Act No. 34 of 2005, Vodacom may share information about a client’s creditworthiness with any credit bureau or credit providers industry association or other association for an industry in which Vodacom operates.

Planned transborder flows of  information –

If you are visiting our websites from a country other than the country in which our servers are located, the various communications will necessarily result in the transfer of information across international boundaries.

We may need to transfer your information to other Vodacom or Vodafone group companies or service providers in countries outside South Africa, in which case we will fully comply with applicable data protection legislation. This may happen if our servers or suppliers and service providers are based outside South Africa, or if our services are hosted in systems or servers in Vodafone Operating Companies outside South Africa including Europe or India and/or if you use our services and products while visiting countries outside this area. These countries may not have data-protection laws which are similar to those of South Africa.

Security measures implemented to ensure the confidentiality and privacy of the information which is to be processed –

We are committed to implementing leading data security safeguards.
We have specialised security teams who constantly review and improve our measures to protect your personal information from unauthorised access, accidental loss, disclosure or destruction.

If we have a contract with another organisation to provide us with services or a service on our behalf to process your personal information, we will make sure they have appropriate security measures and only process your information in the way we have authorised them to. These organisations won’t be entitled to use your personal information for their own purposes. If necessary, our security teams will check them to make sure they meet the security requirements we have set.

Communications over the internet (such as emails) are not secure unless they’ve been encrypted. Your communications may go through a number of countries before being delivered – as this is the nature of the internet. We cannot accept responsibility for any unauthorised access or loss of personal information that is beyond our control.

6. Entry Point for Requests for Information
In order to ensure that Vodacom complies with the Act, management has designated Vodacom Customer Care as the only entry point through which any request in terms of the Act must be channeled.

All requests in terms of the Act must be addressed to:

VODACOM CUSTOMER CARE

Physical Address
Vodacom Customer Care
082 Vodacom Boulevard, Vodacom Valley, Midrand, 1685                                                                  

Postal Address
Vodacom Customer Care

Private Bag X9904, Sandton, 2146

Other
Telephone: (082) 135

Electronic mail: [email protected] / [email protected]

7. Who May Request Information or Records
a. The purpose for which Information is required

The Act provides that a person may only request information in terms thereof if that information is required for the exercise or protection of a right.

Further, PoPIA provides that a Data Subject may, upon proof of identity, request the Responsible Party to confirm, free of charge, all the information it holds about the Data Subject and may request access to such information, including information about the identity of third parties who have or have had access to such information, and may, where necessary, request the correction, destruction or deletion of his or her personal information.  PoPIA further provides that where the Data Subject is required to pay a fee for services provided to him/her/it the Responsible Party:

• Must provide the Data Subject with a written estimate of the payable amount before providing the service; and
• May require that the requestor pay a deposit for all or part of the fee

b. Categories of Requestors

The capacity under which a Requester requests documentation/ information will determine the category he or she falls in. Please note that the Requester category has a bearing on the conditions of access to the information.

Requesters have been classified into four categories:

• A Personal Requester: requests information about himself/herself/itself.
• A Representative Requester: requests information relating to and on behalf of someone else.
• A Third Party Requester: requests information about another person.
• A Public Body: requests information in the public interest.

c. Third party notifications

Where the records requested relates to third parties the Information Officer will take all reasonable steps to inform a third party to whom or which the record relates of the request. The third party will be informed as soon as reasonably possible, but within 21 days after that request is received and by the fastest means reasonably possible. When informing the third party about the information request the Information Officer will:

• inform the third party that he or she is considering a request for access to its records and describe the content of the record;

furnish the name of the requester;

• describe the type of information in question;
• if the disclosure is in the public interest, describe circumstances under which the disclosure is made
• inform the third party that it may, within 21 days after the third party is informed:

(a) make written or oral representations to the head why the request for access should be refused; or 

(b) give written consent for the disclosure of the record to the requester.

8. Request Procedure
a. Completion of Form C

Any request for information in terms of the Act must be submitted in terms of Form C (a copy of the form is enclosed as Annexure B hereto). These forms are available on request from Vodacom Customer Care and upon payment of a prescribed fee. The forms can also be downloaded from www.vodacom.co.za / www.vodacom.com.

Form C must be completed in full and returned to Vodacom Customer Care at the address referred to in paragraph 6 above as soon as reasonably possible together with any other information that may be required in order to consider and decide on the request. A request which does not comply with the formalities contained in this Manual will be referred back to the Requester with advice on the necessary steps for compliance. This includes Forms that are not completed in full.

The Affidavit contained in Form C must also be completed in full and signed by a Commissioner of Oaths,

b. Proof of identity

Proof of identity is required to authenticate the request and the Requester. In view hereof, a Requester will, in addition to Form C, be required to submit acceptable proof of identity such as a certified copy of their Identity Document or other legal form of identification.

c. Vodacom Products

In instances where information or records pertaining to any of Vodacom's products (other than marketing information) is requested, the Requester will have to prove ownership of the MSISDN (Mobile Station International Subscriber Directory Number) to which the requested information or records relate. The Requestor may also be required to provide further particulars to prove ownership or to provide an explanation why access to the identified records is required.

Note:Information will not be furnished unless a person clearly provides sufficient particulars to enable the company to identify the right the Requester is seeking to protect as well as an explanation of why the requested information is required for the exercise or protection of that right.

d. Checklist for submission of information requests 

Form C

• Number B – particulars of person requesting access to the records
• Number C – only if the request is a third party request
• Number D1 – the time period as well as type of information required
• Number D2 – the cell number or ref. number that was provided by Vodacom (if available)
• Number E – exemption from paying the fees, if so the client will need to supply his/her salary advice and if the client is married, a copy of the spouse’s salary advice will need to be supplied as well
• Number F1 – copy in a computer readable form (memory stick or compact disc)
• Number G1 – indicate which right is to be exercised or protected
• Number G2 –  the reason for which this information is required (we will not accept ‘personal reasons’ as a reason)
• Number H – preferred method of communication
• Documentation signed and every page must be initialed.

Affidavit

• Number 3 – choose a, b or c
• Number 6 – choose a, b or c
• Number 7 – only in the case of a Third Party request
• The affidavit must be commissioned by a Commissioner of Oath (eg SAPS or Notary).

NB the following information must also be attached:

• A certified copy of your identity document. Please also initial the identity document.
• For pre-paid clients. A Vodacom prepaid certificate, if available. This must also be initialed.
• Contract clients must supply a copy of their latest Vodacom statement. This must also be initialed.
• If it is a company owned contract, a letter from the company providing permission for the release of this information must be provided.
  
  9. Request Fees
  In terms of POPIA, a data subject has the right to request Vodacom to confirm, free of charge, whether or not it holds personal information about the data subject. However, both in terms of PAIA and PoPIA, Vodacom is entitled to levy a prescribed fee (as set out below) for the provision of records of personal information about the data subject or third parties in its possession.

The fees that may be charged have been published by the Minister of Justice and Correctional Services and are displayed below.

10. Granting or Refusal of Requests
All requests complying with the requirements set out above will be processed and considered expeditiously. 
If the request for access is granted then Vodacom will advise the Requestor on the following:

• the prescribed fee for accessing the information or documentation
• payable deposit fee and balance outstanding
• the form in which access will be given
• the right to lodge an internal appeal against the access fee to be paid or the form of access to be granted.

If the request for access is refused then Vodacom will advise the Requestor about the reasons for refusal of access and may advice the Requestor to lodge an application with the Information Regulator  against the refusal of the request after the Requestor has exhausted all Vodacom’s  internal appeal process.  

Chapter 4 of the PAIA Act stipulates the following grounds for refusing requests for information:

• protection of the privacy of a third party who is a natural person
• protection of commercial information of a third party
• protection of certain confidential information of a third party
• protection of safety of individuals and protection of property
• protection of records privileged from production in legal proceedings
• commercial information of the Private Body
• protection of research information of a third party and of the Private Body.

These grounds of refusal are also endorsed under PoPIA.

Vodacom will give the Requester a written notice of the decision within 30 days after the decision is made. In case of a request being refused, the notification will include the reasons for the refusal. Vodacom may extend the 30 day notice period for a further period not exceeding 30 days due to the nature of the request and the amount of time required to gather the requested information. The Requester will however be given notice of the extension prior to the expiry of the 30 day period and provided with reasons for the extension.

11. Appeal/ Lodgment of Complaints
The Act makes provision for the lodgment of complaint against:

• Access fee charged or the form of access granted
• Refusal of the request to grant access
• Decision to extend the 30 days’ period for granting the requested access
• Form in which access is granted

A complaint or an internal appeal must:

• be lodged within 30 days after the decision is communicated to the Requestor;
• be delivered or sent to the address, fax or electronic mail address contained in paragraph 6 above;
• identify the subject of the complaint or internal appeal and state the reasons for the complaint or internal appeal;
• be accompanied by the prescribed appeal fee as prescribed in paragraph 10 above;
• specify a postal address, fax number or electronic mail for the return of the decision.

(see Annexure D for the copy of the form to be used in lodging the internal appeal)

Where, in addition to a written reply, the complainant/appellant wishes to be informed of the decision in any other manner he/she/it must state that manner and provide the necessary particulars to be so informed. 

The complainant/appellant who is not happy with the decision of the internal process may lodge an application with the Information Regulator  against the decision made within 30 days after the decision was communicated to him/her/it. 

Where the complaint or internal appeal is lodged after the expiry of the 30 days period the Information Officer may, on good cause shown, allow the late lodgment of the complaint or internal appeal.

12. Other information as may be prescribed
Section 51(1)(f) of the Act grants the Minister powers to publish a notice prescribing any other information that companies will have to disclose.

13. Availability of the Manual
As provided for in terms of section 51(2) of PAIA this Manual will be updated as and when the need arises and as soon as any amendments have been finalized the latest version of the Manual will be made public through:

The Vodacom website: www.vodacom.co.za / www.vodacom.com

Alternatively, on request from:

The Information Officer

Vodacom Group Ltd

082 Vodacom Boulevard

Vodavalley Midrand

1685

Email: [email protected] ;

This Manual is available for inspection during office hours and at no charge. Should you wish to obtain a copy of this Manual or part thereto such copy can be obtained from either:

• the address set out above subject to payment of applicable fees (refer to clause 9 above); or
• downloaded from our website free of charge.
  
  14. Annexure A: Categories and types of Information that can be requested
  1.1 Categories and type of records automatically available without having to request access to these records (Section 52(2) of  PAIA  read with regulation 9A to the PAIA ):

The PAIA makes provision for the automatic disclosure of certain records. These records need not be formally requested from Vodacom since they are automatically available from our website www.vodacom.co.za / www.vodacom.com

The following are categories of records automatically available:

1.2 Categories and types of records that can be requested (section 51(1)(e) of the PAIA): 

Vodacom maintains the types and categories of records as listed below. Each request for information will be dealt with on a case by case basis and the mere fact that a record is listed below does not mean that access to that record will be granted.

The following are categories of records that can be requested from Vodacom:

Business partners

Information Category

Corporate Social Investment

Information Category

External Communication

Government Protocol

Legal

Management

Regulatory

Regulatory Submissions

VIP events

Customer Information

Customer Management

Retail account

Call Centre Management

Customer Interaction

Distribution Channel Management

Distribution Channel Structure

Accounting

Asset

Financial Performance

Wholesale Bill

GSM Device Site

GSM Network and IT Configuration

GSM Network and IT Statistics

Technical Alarm / Event

Internal Communication

Organisation Structure and Position

Performance and Remuneration

Personnel Detail

Personnel Development

Facility

Audit Information

Contract/SLA Management

Inventory Control

Procurement

Production

Product/Service Management

Retail Sale

Sales Management

Wholesale Sales & Distribution

Fault

Service Event

Service Profile

Legal & Criminal

Usage Event

Risk Management

1.3 Access to records held by Vodacom

The following procedure must be followed when requesting information and/or documents:

1. i) The request must be sent in the prescribed form. (The form can be downloaded from Vodacom’s website at www.vodacom.co.za / www.vodacom.com).
2. ii) The Request must be submitted to the Information Officer and sent to the address, fax number or electronic mail address as set out in paragraph 6 of the Manual.
3. iii) The Requestor must provide proof of identity of the person requesting the record
4. iv) If the request is made on behalf of another person, the Requestor must provide proof of the capacity in which he/she/it is making the request.

1.4 The following procedure will be followed by Vodacom after receipt of the request for access:

1. a) Once a request is made, the Requestor will receive notice from Vodacom to pay the prescribed deposit fee
2. b) The prescribed deposit fee must be paid before the request is processed
3. c) Payment of this fee should be made as directed by the Information Officer
4. d) After receiving payment of a deposit fee Vodacom will then make a decision in respect of the request and will notify the Requestor of the decision
5. e) Should the request be refused, the Requestor may lodge an application or appeal in accordance with paragraph 11 of the Manual  against the refusal of the request or payment of the requested fee and this will be advised in the notice to be sent to the Requestor (in terms of section 54(3) of the PAIA Act).
6. f) If the request is granted then the Requestor might be required to pay a further access fee for the search, reproduction and preparation of the record as well as for the time that has exceeded the prescribed hours to search and to prepare the record for disclosure to the Requestor (in terms of section 54(6) of the PAIA Act).
7. g) The fee schedule can be downloaded from the Department of Justice and Constitutional Development’s website at www.justice.gov.za
   
   15. Annexure B: Prescribed Form C
   REQUEST FOR ACCESS TO RECORDS HELD BY VODACOM
   (Section 53(1) of the Promotion of Access to Information Act, 2 of 2000) 
   A.         Particulars of Vodacom 
   Information Officer 
   Chief Officer: Legal and Regulatory Affairs c/o Information Officer
   082 Vodacom Boulevard 
   Vodacom Valley 
   Midrand 
   1685
   or 
   Private bag x 9904 
   Sandton 
   2146 
   Telephone number: 011 653 5000
   Fax number: 011 546 8137 
   Email: [email protected]
    

B.          Particulars of person requesting access to the record

Full names and surname: _____________________________________________________________                                                                                             Identity number:   __________________________________________________________________                                                                                                            
Postal address: :  __________________________________________________________________                                                                                                                                                                                                                                                                                       Fax number: ___________________________________________________
Telephone number:  ____________________________________________________________   
E-mail address:    ___________________________________________________________________                                   
Capacity in which request is made, when made on behalf of another person:                                                                                                                                                
C.         Particulars of person on whose behalf request is made

Full names and surname:  ____________________________________________________________

Identity number / Company Registration Number: __________________________________________

D. Particulars of record

1) Description of record or relevant part of the record: 
________________________________________________________________________________________
________________________________________________________________________________________
________________________________________________________________________________________
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        
2. Reference number, if available: ___________________________________________________
                                                                    
3. Any further particulars of record: __________________________________________________

______________________________________________________________________________

E. Fees

Reason for exemption from payment of fees: 
_________________________________________________________________________________
F. Form of access to record

G. Particulars of right to be exercised or protected

1. Indicate which right is to be exercised or protected:

  ______________________________________________________________________________________________________
_________________________________________________________________________________________________________ 
                                                                                                                                                                   

1. Explain why the record requested is required for the exercise or protection of the aforementioned right:

 ____________________________________________________________________________________

______________________________________________________________________________________________ ______________________________________________________________________________________________

H.         Notice of decision regarding request for access

How would you prefer to be informed of the decision regarding your request for access to the record? 
__________________________________________________________________________________ 

Signed at                                      this                 day of                               20              

                                                                                                       ______________________________________      
                                                                SIGNATURE OF REQUESTER / PERSON
ON WHOSE BEHALF THE REQUEST IS MADE

AFFIDAVIT
Request for Access to record held by Vodacom

I, the undersigned,     

………………………………………………………………………………………………………………………………………………………..……………………………………………………….

do hereby make oath and say:

1.

I am an adult male/female residing at   ……………………………………………………………………………………………………………………………...  I am the Requester in terms of the Promotion of Access to Information Act, No 2 of 2000.

PART: A (Applicant)

2.
The facts herein mentioned are within my personal knowledge, unless indicated to the contrary, and are in all respects true and correct.

3.
I am the (please select one of the options): 
(a)          sole owner and sole user of Vodacom Prepaid / Contract Account
(b)          owner of Vodacom Prepaid / Contract Account. The sim card is not in my possession nor under my control 
(c)          user of Vodacom Prepaid / Contract Account. The sim card is in my possession and under my control

4.
The information requested pertains to call data on cellular number …………………………………………………………allocated to me and am duly authorised to lodge my request in terms of the Promotion of Access to Information Act, No 2 of 2000.

5.
My Identity/passport number is ………………………………………………………… and I attach hereby a certified copy of my identity/passport document.

6.
Please select one of the following:
(a)          I also attach herewith a certified copy of the Vodacom prepaid certificate in respect of the number allocated, as stated above.
(b)          I am unable to supply a Vodacom prepaid certificate in respect of the number allocated, but I am the owner and only user of the said phone.
(c)          I am the owner and user of the contract number and the latest Vodacom Statement is attached.

PART: B (Third Party Permission – if applicable)
7.

I also declare that I am aware that ................................................................................ requires information pertaining to cellular number.....................................................................................

I hereby give permission to ....................................................................................................... to obtain the required information.

1. 8.

I know and understand the contents of this statement
I have no objection in taking the prescribed oath
I consider the oath to be binding on my conscience.

………………………………………………………………………
DEPONENT

I certify that the above statement was taken by me and that the deponent has acknowledged that he/she knows and understands the contents of this statement.  The statement was sworn to/affirmed to before me and deponents signature/mark/thumb print was placed thereon in my presence at

………………………………… on………………………. at …….h…..….….

……………….……………………………………………………
SIGNATURE Commissioner of Oaths

……………………………………………………………………..
Full First Names and Surname

……………………………………………………………………..

……………………………………………………………………..

………………..…………………………………………………..
Business Address (Street Address)

16. Annexure C: Some of the key pieces of legislation in terms of which Vodacom is obliged to retain information / records
Vodacom keeps information and/or documents in accordance with the following legislation (This is not an exhaustive list):

17. Annexure D: Notice of Internal Appeal
A. Particulars of the Information Officer

The Information Officer 
Vodacom Group Ltd 
082 Vodacom Boulevard 
Vodavalley 
Midrand 
1685 
Fax number: 011 546 8137 
Email: [email protected]

B. Particulars of the Complainant /Appellant

Full names and surname: _________________________________________________________________
____________________________________________________________________________________
Identity number: _______________________________________________________________________
Postal Address: ________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Telephone number: _________________________ Cellphone number: ___________________________
Fax: ______________________________ E-mail Address: ________________________________­­­­______

C. Particulars of the Requestor

Full names and surname: ________________________________________________________________
___________________________________________________________________________________
Identity number: ______________________________________________________________________

D. The decision against which the complaint/internal appeal is lodged

E. Grounds for complaint/appeal

State the ground on which the complaint/appeal is based: ____________________________________________
_________________________________________________________________________________________
_________________________________________________________________________________________
_________________________________________________________________________________________
_________________________________________________________________________________________

State any other information that may be relevant in considering the appeal: ______________________________
________________________________________________________________________________________
________________________________________________________________________________________
________________________________________________________________________________________
________________________________________________________________________________________
F. Notice of decision on complaint/appeal

State the manner: ___________________________________________________________________________
Particulars of the manner: _____________________________________________________________________
_________________________________________________________________________________________

Signed at _________________________________ this _____ day of _________________ 20 _______
 

                                                                                                                     ______________________________
Signature of the complainant/appellant

18. Annexure E: Objection to the Processing of Personal Information
Note:

1. 1. Affidavits or other documentary evidence in support of the objection must be attached.
2. 2. If the space provided for in this Form is inadequate, submit information as an Annexure to this Form and sign each page

A. Particulars of Vodacom

Information Officer 
C/O Chief Officer: Legal, Regulatory & Stakeholder Relations
082 Vodacom Boulevard 
Vodacom Valley 
Midrand 
1685
or 
Private bag x 9904 
Sandton 
2146 
Telephone number: 011 653 5000
Fax number: 011 546 8137 
Email: [email protected]

B. Particulars of the Data Subject

Full names and surname: ____________________________________________________________________________                                                                                                                                                                                                     
Name of public or private body (if the responsible party is not a natural person): ________________________________________________________________________________________________
Identity / Registration number: ________________________________________________________________________                                                                                                            
Residential, postal or business address: _____________________________________________________________________________________________________________                                                                                                                                                                                                                                                                                                                                                                                                                                                            Fax number: ______________________________________ Phone number ____________________________________
E-mail address:          _________________________________________________________________________________                                       
 

C. Reasons for Objection (please provide detailed reasons for the objection)

__________________________________________________________________________________ ______________________________________________________________________

D. Notice of decision regarding request for access

How would you prefer to be informed of the decision regarding your request for access to the record?    
__________________________________________________________________________________  __________________________________________

E. Reference number, if available: ______________________________________________________

Signed at ________________________ this __________ day of ___________________  20 ________   

____________________________ 
Signature of Data Subject (applicant)

AFFIDAVIT
I, the undersigned,     

________________________________________________________________________________________________

do hereby make oath and say:

1.

I am an adult male/female residing at   ______________________________________________________________  I am the Data Subject in terms of the Protection of Personal Information Act, No 4 of 2013.

PART: A (Data Subject)

2.
The facts herein mentioned are within my personal knowledge, unless indicated to the contrary, and are in all respects true and correct.

3.
I am the (please select one of the options): 
(a)             sole owner and sole user of Vodacom Prepaid / Contract Account
(b)             owner of Vodacom Prepaid / Contract Account. The sim card is not in my possession nor under my control 
(c)             user of Vodacom Prepaid / Contract Account. The sim card is in my possession and under my control

4.
I object, on reasonable grounds, to the processing and/or further processing of my Personal Information:

1. In possession or control of the Vodacom, unless legislation provides for such processing;
2. For purposes of direct marketing other than direct marketing by means of unsolicited electronic communications.

(Please select one of the above options) 
5.
My Identity/passport number is _________________________________ and I attach hereby a certified copy of my identity/passport document.

6.
Please select one of the following:
(a)             I also attach herewith a certified copy of the Vodacom prepaid certificate in respect of the number allocated, as stated above.
(b)             I am unable to supply a Vodacom prepaid certificate in respect of the number allocated, but I am the owner and only user of the said phone.
(c)             I am the owner and user of the contract number and the latest Vodacom Statement is attached.

7.

I know and understand the contents of this statement
I have no objection in taking the prescribed oath
I consider the oath to be binding on my conscience.

______________________________________
DEPONENT

I certify that the above statement was taken by me and that the deponent has acknowledged that he/she knows and understands the contents of this statement.  The statement was sworn to/affirmed to before me and deponent’s signature/mark/thumb print was placed thereon in my presence at _______________________________________ _____________________________________________ on __________________________ at ________h __________

……………….……………………………………………………
SIGNATURE Commissioner of Oaths

……………………………………………………………………..
Full First Names and Surname

……………………………………………………………………..

……………………………………………………………………..

………………..…………………………………………………..
Business Address (Street Address)

19. Annexure F: Request for correction or deletion ppf Personal Information or Destroying or deletion of reocrd of Personal Information
Note:

1. Affidavits or other documentary evidence in support of the objection must be attached.
2. If the space provided for in this Form is inadequate, submit information as an Annexure to this Form and sign each page

Mark the appropriate box with an "x". 
Request for: 
 

 Correction or deletion of the personal information about the data subject which is in possession or under the control of the responsible party.  

 Destroying or deletion of a record of personal information about the data subject which is in possession or under the control of the responsible party and who is no longer authorised to retain the record of information

A.            Particulars of Vodacom 
Information Officer 
C/O Chief Officer: Legal, Regulatory & Stakeholder Relations
082 Vodacom Boulevard 
Vodacom Valley 
Midrand 
1685
or 
Private Bag x 9904 
Sandton 
2146 
Telephone number: 011 653 5000
Fax number: 011 546 8137 
Email: [email protected]

B            Particulars of the Data Subject

Full names and surname: ____________________________________________________________________________                                                                                                                                                                                                     
Name of public or private body (if the responsible party is not a natural person): ________________________________________________________________________________________________
Identity/Registration number: _________________________________________________________________________                                                                                                            
Residential, postal or business address: __________________________________________________________________________________ _____________________________                                                             

Fax number: ______________________________________ 

Phone number_____________________________
E-mail address:          ___________________________________________________________________________________                                       
C            Reasons for correction or deletion of the personal information about the data subject/*destruction or deletion of a record of personal information about the data subject which is in possession or under the control of the responsible party. (please provide detailed reasons for the request)
__________________________________________________________________________________ ______________________________________________________________

D            Notice of decision regarding request for access

How would you prefer to be informed of the decision regarding your request for access to the record?    
__________________________________________________________________________________  __________________________________________

E            Reference number, if available: ______________________________________________________

Signed at ________________________ this __________ day of ___________________  20 ________   

____________________________ 
Signature of Data Subject (applicant)

AFFIDAVIT
I, the undersigned,     

________________________________________________________________________________________________

do hereby make oath and say:

1.

I am an adult male/female residing at   ______________________________________________________________  I am the Data Subject in terms of the Protection of Personal Information Act, No 4 of 2013.

PART: A (Data Subject)

2.
The facts herein mentioned are within my personal knowledge, unless indicated to the contrary, and are in all respects true and correct.

3.
I am the (please select one of the options): 
(a)             sole owner and sole user of Vodacom Prepaid / Contract Account
(b)             owner of Vodacom Prepaid / Contract Account. The sim card is not in my possession nor under my control 
(c)             user of Vodacom Prepaid / Contract Account. The sim card is in my possession and under my control

4.
I request Vodacom to:

1. correct or delete my Personal Information in its possession or under its control;
2. destroy or delete a record of my Personal Information which it is no longer authorised to retain.

(Please select one of the above options) 
5.
My Identity/passport number is _________________________________ and I attach hereby a certified copy of my identity/passport document.

6.
Please select one of the following:
(a)             I also attach herewith a certified copy of the Vodacom prepaid certificate in respect of the number allocated, as stated above.
(b)             I am unable to supply a Vodacom prepaid certificate in respect of the number allocated, but I am the owner and only user of the said phone.
(c)             I am the owner and user of the contract number and the latest Vodacom Statement is attached.

7.

I know and understand the contents of this statement
I have no objection in taking the prescribed oath
I consider the oath to be binding on my conscience.

______________________________________
DEPONENT

I certify that the above statement was taken by me and that the deponent has acknowledged that he/she knows and understands the contents of this statement.  The statement was sworn to/affirmed to before me and deponent’s signature/mark/thumb print was placed thereon in my presence at _______________________________________ _____________________________________________ on __________________________ at ________h __________

……………….……………………………………………………
SIGNATURE Commissioner of Oaths

……………………………………………………………………..
Full First Names and Surname

……………………………………………………………………..

……………………………………………………………………..

………………..…………………………………………………..
Business Address (Street Address)