Purpose specification. It is mandatory to share your personal data with the West University of Timisoara in order to enrol and complete your program of studies at WUT. The data is processed with a view to generating a centralized database. Refusal to provide the requested data will result in your academic disqualification and your admission exam results will be be rendered null and void.
Purpose specification. Xxxxxx’s business units and operations must be informed by the principle of transparency. Lesaka will process personal information only for specific, explicitly defined, and legitimate reasons. Xxxxxx will inform data subjects of these reasons prior to collecting or recording the data subject’s personal information. Lesaka will generally use personal information for purposes required to operate and manage its normal business operations and these purposes include one or more of the following non-exhaustive purposes: ▪ for the purposes of providing its products or services to customers; ▪ for purposes of onboarding suppliers as approved suppliers of Lesaka. For this purpose, Xxxxxx will also process a supplier's personal information for purposes of performing credit checks, and this may include engaging third party credit vetting agencies; ▪ for purposes of monitoring the use of Lesaka 's electronic systems and online platforms. Lesaka will, from time to time, engage third party service providers (who will process the data subject's personal information on behalf of Xxxxxx) to facilitate this; ▪ for purposes of monitoring the use of our relevant websites and mobile applications generally for the purpose of improving the functionality and performance of same; ▪ for purposes of preventing, discovering and investigating non-compliance with this policy and other Lesaka policies, and investigating fraud, or other related matters; ▪ in connection with the execution of payment processing functions, including payment of Lesaka suppliers' invoices; ▪ to provide a service to Lesaka customers in terms of relevant services agreements; ▪ for employment-related purposes such as recruitment, administering payroll and carrying out background checks; ▪ in connection with internal audit purposes (i.e. ensuring that the appropriate internal controls are in place in order to mitigate the relevant risks, as well as to carry out any investigations where this is required); ▪ in connection with external audit purposes. For this purpose, Xxxxxx engages external service providers and, in so doing, shares personal information of the data subjects with third parties; ▪ to respond to any correspondence that Lesaka commercial customers may send to Lesaka, including via email or by telephone; ▪ to contact the data subject for direct marketing purposes subject to the provisions of section 8 below; ▪ in order to address customer complaints in respect of Lesaka 's products and services; ▪ fo...
Purpose specification. Those individuals who have consented to have a HIM implanted or have been lawfully compelled to do so, do not simply forfeit their right to privacy and should nonetheless enjoy certain privacy protections and legal safeguards. The law must prohibit any entity from accessing or monitoring the location infor- mation of a person implanted with a HIM, or in any way in possession of a locating/ tracking device or embedded RFID tag (i.e. the data subject), outside the designated area and/or scope and specified purpose the same individual has given his/her opt-in consent to have his/her movements to be tracked, such as a secure area or office space, regardless if he/she is traveling in public and especially when he/she is off-duty. Certain exceptions may apply to law enforcement agencies with a proper warrant. A HIM purpose declaration/end-user agreement/service contract can serve as the legal, as opposed to technological, means of providing not just the opt-in consent, but the basis for any private legal action against a data controller who intentionally collects, monitors or accesses the location information of an implantee beyond the specified and legitimate purposes agreed upon. The purpose declaration can be included in a standard service provider agreement/service contract, binding all relevant data control- lers, service providers and any other applicable party, taking into account the relevant laws/regulations. With regards to RFID implantees, the purpose declaration, as the EC similarly recommends for other RFID applications, should specify which data is col- lected, which association, if any, from the RFID tag to personal data is made, and what the possible privacy risks are.769 However, as the EU’s Article 29 Working Party points out, “the principle of pur- pose limitation may be more difficult to apply and to control”,770 without solving the drawbacks of RFID interoperability and ensuring that only authorized readers can read RFID tags.771 Moreover, if RFID implants are to serve as means of identification for private individuals, then the implants should only respond to trusted RFID readers, in conformity with the “Law of Directed Identity”.772 Where necessary, human-centric RFID systems should provide for mutual authentication, whereby only authorized read- ers can read the RFID microchips.773 As proposed by the Article 29 Working Party, one way is to limit the initial query of readers to target only relevant RFID tags in the first place, thereby rea...
Purpose specification. The purposes for which personal data are collected should be specified not later than at the time of data collection and the subsequent use limited to the fulfillment of those purposes or such others as are not incompatible with those purposes and as are specified on each occasion of change of purpose.
Purpose specification. The third principle provides that personal information must be collected for a specific purpose and the data subject from whom the personal information is collected must be made aware of the purpose for which the personal information was collected.
Purpose specification personal information must be collected for a specific, explicitly defined and lawful purpose related to a function or activity of SA Office. The records of personal information must not be retained any longer than is necessary for achieving the purposes for which the information was collected or subsequently processed.5
