THE PROMOTION OF ACCESS TO INFORMATION MANUAL ("MANUAL") FOR STARGAS CC, REGISTRATION NUMBER 2010/083238/23 ("STARGAS")
Published in terms of section 51 of the Promotion of Access to Information Act 2 of 2000 and in terms of the Protection of Personal Information Act 4 of 2013
1. Introduction
1.1 The Promotion of Access to Information Act of 2000 (PAIA) was enacted with the purpose of addressing section 32(1) of the Constitution of the Republic of South Africa (Constitution), which provides that any person has a right to gain access to any information held by a public or private body. If the record is requested from a private body, the requestor needs to prove that the record is required for the exercise or protection of a right.
1.2 The Protection of Personal Information Act 4 of 2013 (POPIA) was enacted to give effect to:
- 1.2.1 the constitutional right to privacy, by safeguarding personal information when processed by a responsible party, subject to justifiable limitations that are aimed at: (i) balancing the right to privacy against other rights, particularly the right of access to information; and (ii) protecting important interests, including the free flow of information within the Republic of South Africa and across international borders;
- 1.2.2 regulate the manner in which personal information may be processed, by establishing conditions, in harmony with international standards, that prescribe the minimum threshold requirements for the lawful processing of personal information;
- 1.2.3 provide persons with rights and remedies to protect their personal information from processing that is not in accordance with POPIA; and
- 1.2.4 establish voluntary and compulsory measures, including the establishment of an Information Regulator, to ensure respect for and to promote, enforce and fulfil the rights protected by POPIA.
1.3 One of the main requirements specified in PAIA is the compilation of a manual that provides information on both the types and categories of records held by a public or private body. In terms of PAIA, a private body includes any former or existing juristic person.
1.4 Insofar as POPIA is concerned, PAIA requires the manual to detail: (i) the purpose of processing of personal information; (ii) a description of the categories of data subjects and of the information or categories of information relating thereto; (iii) the recipients or categories of recipients to whom the personal information may be supplied; (iv) any planned transborder flows of information; and (v) a general description allowing a preliminary assessment of the suitability of the information security measures to be implemented by the responsible party to ensure the confidentiality, integrity and availability of the information which is to be processed.
1.5 This Information Manual (Manual) provides an outline of the type of records held by and the processing of personal information performed by Stargas CC (Stargas) and details the process for requesting access to these records under PAIA.
1.6 This document serves as the Manual for Stargas in terms of PAIA, to provide a reference as to the processing activities, the records held and the process that needs to be followed to request access to such records.
2. Administration of PAIA
Section 51(1)(a) of PAIA
2.1 The details of the contact persons who will deal with all requests made in terms of PAIA and who will act as the information officer and deputy information officer for the purposes of POPIA relating to Stargas are as follows:
Information Officer
- Name: Jennifer Klaaste
- Physical Address: 4 Axle Drive, Clayville Industrial, Olifantsfontein, 1666
- Tel: +27 (012) 756 1883
- Email: privacy@stargas.co.za
Deputy Information Officer
- Name: Fabio Casillo
- Physical Address: 4 Axle Drive, Clayville Industrial, Olifantsfontein, 1666
- Tel: +27 (012) 756 1883
- Email: privacy@stargas.co.za
3. Guide on How to Use PAIA
Section 10 of PAIA
3.1 The Information Regulator has in terms of section 10(1) of PAIA amended, updated and made available a revised guide containing information reasonably required by a person wishing to exercise any right in terms of PAIA and POPIA (Guide).
3.2 The Guide is available in each of the official languages and in braille.
3.3 The Guide that has been published by the Information Regulator contains the following information: (a) the objects of PAIA and POPIA; (b) the postal and street address, phone and fax number, and if available, the electronic mail address of the information officer of every public body and every deputy information officer of every public and private body designated in terms of section 17(1) of PAIA and section 56 of POPIA; (c) the manner and form of a request for access to a record of a public body and a record held by a private body; (d) the assistance available from the information officer of a public body in terms of PAIA and POPIA; (e) the assistance available from the Information Regulator in terms of PAIA and POPIA; all remedies in law regarding an act or an omission in respect of a right or duty conferred or imposed by PAIA and POPIA, including how to lodge an internal appeal, a complaint to the Information Regulator and a court application; (f) the requirements for a public body and private body, respectively, to compile a manual, and how to obtain access to a manual; (g) the voluntary disclosure of categories of records by a public body and private body, respectively; (h) the notices issued in terms of sections 22 and 54 of PAIA regarding fees to be paid in relation to requests for access; and (i) the regulations made in terms of section 92 of PAIA.
3.4 A copy of the Guide is available on the Information Regulator's website.
3.5 The Information Regulator is responsible for updating and making available the existing guide that will facilitate ease of use of PAIA for requesters. Please direct any queries to the Information Regulator using the details below:
- The Information Regulator of South Africa
- Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2017
- Postal Address: P.O. Box 31533, Braamfontein, Johannesburg, 2017
- Email: enquiries@inforegulator.org.za
- Website: www.inforegulator.co.za
4. Objectives of This Manual
The objectives of this Manual are to:
- 4.1 provide a list of all records held by Stargas;
- 4.2 set out the requirements regarding who may request information in terms of PAIA as well as the grounds on which a request may be denied;
- 4.3 define the manner and form in which a request for information must be submitted; and
- 4.4 comply with the additional requirements imposed by POPIA.
5. Entry Point for Requests
5.1 PAIA provides that a person may only make a request for information if the information is required for the exercise or protection of a legitimate right.
5.2 Information will therefore not be furnished unless a person provides sufficient particulars to enable Stargas to identify the right that the requester is seeking to protect as well as an explanation as to why the requested information is required for the exercise or protection of that right. The exercise of an individual's rights is subject to justifiable limitations, including the reasonable protection of privacy, commercial confidentiality and effective, efficient and good governance. PAIA and the request procedure contained in this Manual may not be used for access to a record for criminal or civil proceedings, nor should information be requested after the commencement of such proceedings.
5.3 The Information Officer has been delegated with the task of receiving and co-ordinating all requests for access to records in terms of PAIA, in order to ensure proper compliance with PAIA and POPIA.
5.4 The Information Officer will facilitate the liaison with the internal legal team on all requests received.
5.5 All requests in terms of PAIA and this Manual must be addressed to the Information Officer using the details in paragraph 2.1 above.
6. Records Automatically Available
Section 51(1)(b)(ii) of PAIA
In accordance with section 52(1) of PAIA, Stargas has elected not to voluntarily make available to the public any categories of records that do not require the making of a request for access in terms of PAIA.
7. Information Required in Terms of POPIA
Section 51(c)(i)–(v) of PAIA
7.1 In terms of POPIA, personal information must be processed for a specified purpose. The purpose for which data is processed by Stargas will depend on the nature of the data and the particular data subject. This purpose is ordinarily disclosed, explicitly or implicitly, at the time the data is collected.
7.2 Categories of personal information collected by Stargas
7.2.1 Stargas processes personal information relating to:
7.2.1.1 Shareholders and directors: (i) name and surname, nationality, age, address, date of birth, gender, sex, citizenship and passport/ID information, marital or civil partner status, previous legal names (if any); (ii) work permits, where applicable; (iii) business and personal contact information; (iv) emergency contact information; (v) job description data; and (vi) employment history data.
7.2.1.2 Current and former employees, interns, independent contract workers, suppliers and vendors for purposes of workplace health and safety as well as physical security purposes: (i) personal information (first name, nationality, age, last name, address, date of birth, gender, sex, citizenship and passport/ID information, marital or civil partner status, any previous legal names, photograph, bank details); (ii) work permit, if necessary; (iii) business and personal contact information; (iv) emergency contact information; (v) job description data; (vi) employment history data; (vii) data for the calculation and payment of compensation; (viii) where necessary and subject to applicable local laws, biometric data, including CCTV, camera and video surveillance records; (ix) background checks as may be required; (x) information relating to health, pregnancy or disability required for compliance with the Occupational Health and Safety Act 85 of 1993; (xi) information relating to race or ethnic origin required for compliance with the Employment Equity Act 55 of 1998 and the Broad-based Black Economic Empowerment Act 53 of 2003; (xii) subject to compliance with applicable laws and express employee consent, information relating to children, religion, beliefs, trade union membership as well as information relating to criminal behaviour; (xiii) the software and hardware attributes of the device used to access the Stargas website; and (xiv) dependent or beneficiary data.
7.2.1.3 Prospective recruitment candidates: (i) contact details including names, residential and postal addresses, email addresses and phone number(s); (ii) date of birth; (iii) gender; (iv) government issued identification; (v) dependent or beneficiary data; (vi) compensation and benefits data; (vii) employment history data; (viii) professional qualifications and certifications; (ix) work references; (x) social media handle; (xi) other personal data that may be included in a curriculum vitae or cover/motivation letter; (xii) results of pre-employment screening; (xiii) images, audio files and videos; and (xiv) profiles.
7.2.1.4 Vendors, suppliers, or third-parties (including any individuals who work for them) and visitors: (i) contact details including full name, address, email address, telephone number, company name, company registration number and registered place of business; (ii) personal details including gender, date of birth, image, signature; (iii) employment information including position in the company; (iv) log files.
7.3 The purpose of processing personal information
- 7.3.1 to provide you with information, products or services you request from us;
- 7.3.2 in order to refer you to an appropriate third-party service provider;
- 7.3.3 to communicate with you;
- 7.3.4 to provide you with support; and
- 7.3.5 to provide effective advertising (for example to provide you with news, special offers and general information about other services and events which we offer, that are similar to those that you have already procured or enquired about).
7.4 The recipients or categories of recipients to whom the personal information may be supplied
Stargas may share your information with:
- 7.4.1 a limited number of our employees and third-party service providers who interact with you on our behalf;
- 7.4.2 other parties in response to a legal or regulatory obligation we may have;
- 7.4.3 other parties when we perform an obligation we have towards you;
- 7.4.4 other parties in response to legal process or when necessary to conduct or protect our legal rights;
- 7.4.5 companies that provide services to us. These companies are limited in their ability to use information they receive in the course of providing services to us or you;
- 7.4.6 third-parties where you provide consent. Before we ask you to opt-in, we will endeavour to provide you with a clear description of what data would be shared with the third-party; and
- 7.4.7 third-parties in the course of a business transfer. Where all or a part of our business is merged, sold or reorganised, personal information about you may be shared with the successor entity.
7.5 Planned transborder flows of personal information
Stargas might transfer your personal information to places outside of South Africa and store it there, where our suppliers might process it. If this is required, Stargas will comply with applicable data privacy laws and its Privacy Policy before effecting the transfer of your personal information.
7.6 A general description of information security measures to be implemented
Stargas takes appropriate technical and organisational measures designed to ensure that personal data remains confidential and secure against unauthorised or unlawful processing and against accidental loss, destruction or damage.
8. POPIA Data Subject Request Process
8.1 POPIA provides that a data subject may, upon proof of identity, request Stargas to confirm, free of charge, all the information it holds about the data subject and may request access to such information, including information about the identity of third-parties who have or have had access to such information. POPIA provides that a data subject may object, at any time, to the processing of personal information by Stargas on reasonable grounds relating to his/her particular situation, unless legislation provides for such processing.
8.2 A data subject may also request Stargas to correct or delete personal information about the data subject in its possession or under its control that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully; or to otherwise destroy or delete a record of personal information about the data subject that Stargas is no longer authorised to retain in terms of POPIA's retention and restriction of records provisions.
8.3 If a data subject wishes to (i) submit an access request; (ii) object to the processing of personal information; or (iii) request the correction or deletion of personal information, or the destruction or deletion of a record of personal information; then the data subject must complete the applicable form which is accessible on the Information Regulator's website and submit the completed form to the Information Officer of Stargas.
8.4 Proof of the data subject's identity (and that of any related third-parties acting on behalf of the data subject) must be provided on submitting any of the data subject forms referenced above to the Information Officer of Stargas.
9. Records and Record Categories Available in Accordance with South African Legislation
Section 51(1)(b)(iv) of PAIA
9.1 Stargas has the following records available in terms of the following South African laws that are applicable to Stargas' business operation:
Companies Act, 71 of 2008
- Incorporation and reorganisation records (including the Memorandum of Incorporation)
- Company registers, share certificates and other statutory registers
- Notices and minutes of board meetings and resolutions
- Records relating to the appointment of director(s), auditor(s), company secretary and other officer(s)
- Documents on business processes
- Reports, including reports presented at annual general meetings
- Annual financial statements and any accounting records
- General policies and procedures
- Internal auditing/regulatory compliance records
- Compliance certifications
- Applicable statutory documents
Deeds Registries Act, 47 of 1937
- Lease agreements
- Records evidencing the land and buildings that are fixed assets
- Title deeds
Income Tax Act, 58 of 1962
- Income tax returns
- Pay As You Earn (PAYE) records
- Records of payments to SARS on behalf of employees
- IRP5 forms
Insurance Act, 63 of 2001
- Insurance claim records
- Insurance policies
- Details of insurance coverage, limits and insurers
Promotion of Access to Information Act, 2 of 2000
- PAIA Manual
- PAIA access to information requests
- Information Regulator's PAIA Guide
- PAIA compliance records
Protection of Personal Information Act, 4 of 2013
- Information officer and deputy information officer registration certificate
- Data subject rights requests
- Privacy policy
- Personal information compliance records
South African Revenue Services Act, 34 of 1997
- See records listed under Income Tax Act, 58 of 1962
Value Added Tax Act, 89 of 1991
- VAT Returns
Basic Conditions of Employment Act, 75 of 1997
- See records listed under Labour Relations Act, 66 of 1995
Compensation for Occupational Injuries and Diseases Act, 130 of 1993
- Employee health and safety, and accidents and injury records
- Registrations with the Department of Labour, Unemployment Insurance Fund, Compensation Fund and in terms of the Skills Development Levies Act
Labour Relations Act, 66 of 1995
- Recruitment and employee internal reference records and contact details
- Employment verification, immigration and expatriation records
- Employee personnel files and records
- Disciplinary procedures and records
- Grievance procedures
- Employee development and training programs
- Employee forms and applications
- Leave records
- Background check (criminal records, credit checks)
- Policies, standards, and procedures
Medical Schemes Act, 131 of 1998
- Employee medical aid records
Occupational Health and Safety Act, 85 of 1993
- Employee health and safety, and accidents and injury records
Pensions Funds Act, 24 of 1956
- Employee benefits/compensation and benefit contribution arrangements, rules, and records
Skills Development Levies Act, 9 of 1999
- Registrations with the Department of Labour, Unemployment Insurance Fund, Compensation Fund and in terms of the Skills Development Levies Act
- Employee skills development and training programs
Unemployment Insurance Contributions Act, 4 of 2002
- Registrations with the Department of Labour, Unemployment Insurance Fund, Compensation Fund and in terms of the Skills Development Levies Act
- UIF returns
Please note that the records listed above are not automatically available, and the process outlined in this PAIA Manual in respect of access to information requests and data subject personal information access requests must be followed.
10. PAIA Access Request Procedure
Section 51(1)(b)(iv) of PAIA
10.1 Completion of the prescribed form
10.1.1 Any request for access to a record in terms of PAIA must substantially correspond with Form 2 (Request For Access to Record), which is available on the Information Regulator's website, which must be completed taking due cognisance of the following instructions:
- 10.1.1.1 the access request form must be completed in English language;
- 10.1.1.2 type or print your answers for every question in BLOCK LETTERS;
- 10.1.1.3 if a question does not apply, state "N/A" in response to that question;
- 10.1.1.4 if there is nothing to disclose in reply to a particular question, state "nil" in response to that question;
- 10.1.1.5 if there is insufficient space on a printed form in which to answer a question, additional information may be provided on an additional folio (in which case, please precede each answer with the title applicable to the question being answered and ensure that all additional folios are signed by the requestor).
10.1.2 A request for access to information which does not comply with the formalities as prescribed by PAIA will be returned to you.
10.1.3 Grounds for refusal of the data subject's request are set out in PAIA and are discussed below.
10.2 Proof of identity
Proof of identity is required to authenticate your identity and the request. You will, in addition to this prescribed form, be required to submit acceptable proof of identity such as a certified copy of your identity document or other legal forms of identity.
10.3 Payment of the prescribed fees
10.3.1 There are two categories of fees which are payable:
- 10.3.1.1 The request fee, which will be a standard fee; and
- 10.3.1.2 The access fee, which must be calculated by taking into account reproduction costs, search and preparation time and costs, as well as postal costs.
10.3.2 Section 54 of PAIA entitles Stargas to levy a charge or to request a fee to enable it to recover the cost of processing a request and providing access to records. The fees that may be charged are set out in Annexure B of Government Notice No. R.757 dated 27 August 2021 promulgated under the PAIA Regulations.
10.3.3 Where a decision to grant a request has been taken, the record will not be disclosed until the necessary fees have been paid in full.
10.4 Timelines for consideration of a request for access
10.4.1 Requests will be processed within 30 (thirty) days, unless the request contains considerations that are of such a nature that an extension of the time limit is needed.
10.4.2 The Information Officer will inform the requester of the decision, and the fees payable (if applicable) on a form that corresponds substantially with Form 3 of Annexure A to Government Notice No. R.757 dated 27 August 2021 promulgated under the PAIA Regulations.
10.4.3 Should an extension be required, you will be notified, together with reasons explaining why the extension is necessary.
10.5 Grounds for refusal of access and protection of information
10.5.1 There are various grounds upon which a request for access to a record may be refused. These grounds include:
- 10.5.1.1 the protection of personal information of a third person (who is a natural person) from unreasonable disclosure;
- 10.5.1.2 the protection of commercial information of a third-party (for example: trade secrets; financial, commercial, scientific or technical information that may harm the commercial or financial interests of a third-party);
- 10.5.1.3 if disclosure would result in the breach of a duty of confidence owed to a third-party;
- 10.5.1.4 if disclosure would jeopardise the safety of an individual or prejudice or impair certain property rights of a third person;
- 10.5.1.5 if the record was produced during legal proceedings, unless that legal privilege has been waived;
- 10.5.1.6 if the record contains trade secrets, financial or sensitive information or any information that would put Stargas at a disadvantage in negotiations or prejudice it in commercial competition; and/or
- 10.5.1.7 if the record contains information about research being carried out or about to be carried out on behalf of a third-party or by Stargas.
10.5.2 Section 70 of PAIA contains an overriding provision. Disclosure of a record is compulsory if it would reveal (i) a substantial contravention of, or failure to comply with the law; or (ii) there is an imminent and serious public safety or environmental risk; and (iii) the public interest in the disclosure of the record in question clearly outweighs the harm contemplated by its disclosure.
10.5.3 If the request for access to information affects a third-party, then such third-party must first be informed within 21 (twenty one) days of receipt of the request. The third-party would then have a further 21 (twenty one) days to make representations and/or submissions regarding the granting of access to the record.
11. Availability of This Manual
Copies of this Manual are available for inspection, free of charge, at the offices of Stargas during normal business hours, or on the Stargas website.