POPIA compliance

This is a short statement of how this website meets the eight conditions for lawful processing in the Protection of Personal Information Act 4 of 2013 (POPIA). The full notice is the Privacy policy. Anything shown as [PLACEHOLDER: ...] is a fact we do not yet hold and will be filled in before launch.

Responsible party: Roche Products (Pty) Ltd, South Africa. Operator: Creative & Stuff, which runs this website for Roche.

  1. Accountability. Roche is the responsible party and Creative & Stuff is its operator. Information Officer: José Da Fonseca, email jose.da_fonseca@roche.com, telephone +27 (0)11 504 4850.
  2. Processing limitation. We ask only for what the assessment needs. The contact number and Roche PJP/Rep are optional. Processing starts only after you continue with this consent line: By continuing, you acknowledge that your details will be processed for the EMILIA CPD study, on behalf of Roche South Africa.
  3. Purpose specification. The information is collected to record participation in the EMILIA study CPD assessment and to facilitate the CPD/CEU process (2 CEU points). Entries are kept for a maximum of 1 year, then permanently deleted. Deletion date: 3 November 2027. Backups and server logs are also kept for a maximum of 1 year, and deleted information stays in them until they expire.
  4. Further processing limitation. The site does not use your information for anything beyond that purpose. There is no analytics and no tracking, only two functional cookies.
  5. Information quality. You type your own details and can correct them before you submit. Requests to correct them afterwards go to the Information Officer (jose.da_fonseca@roche.com, +27 (0)11 504 4850).
  6. Openness. The Privacy policy says what is collected, why, and who handles it. Responsible party contact: Roche Products (Pty) Ltd, registration number 1947/027044/07, Building E, Hertford Office Park, 90 Bekker Road, Vorna Valley, Midrand, 1686. P.O. Box 1469, Halfway House, 1685. Telephone +27 (0)11 504 4850, email pharmasa.privacy@roche.com.
  7. Security safeguards. HTTPS only, strict security headers, dashboard access limited to authorised staff with a password and an emailed one-time code, rate limiting, and server-side marking. Encryption at rest and hosting location: [PLACEHOLDER: encryption at rest and hosting location]
  8. Data subject participation. You may ask for access, correction or deletion, object, or withdraw your consent, and you may complain to the Information Regulator (South Africa). How to ask: contact the Information Officer (jose.da_fonseca@roche.com, +27 (0)11 504 4850). Complaints contact: Kovashni Nair (kovashni.nair@roche.com, +27 (0)11 504 4850).

Cross-border transfer: [PLACEHOLDER: cross-border transfer position]

Last updated: [PLACEHOLDER: date this notice was published]