Registered with the PPRA
PAIA MANUAL
In terms of Section 51 of
The Promotion of Access to Information Act 2 of 2000
(as amended)
DATE OF COMPOSITION: 22/05/2021
DATE OF LAST REVISION: 15/11/2023
TABLE OF CONTENTS PAGES
Contact details 2
Abbreviations 3
Definitions 3
- Introduction 3
- Purpose of PAIA manual 3 – 4
- Guide on how to use PAIA and how to obtain access to the guide 4 – 5
4.Categories of records available without formal request. 6
5.Description of the records in accordance with any other legislation 6
6.Description of personal records and categories of records held 7
7.Processing of personal information 8 – 10
8.Availability of the manual 11
Updating Of The Manual & signatures 11
Contact details for access to information from: Happy Holiday Homes cc
PAIA Chief Information Officer (Principal)
Name: Lance Sean du Plessis
Tel: 039 315 6334 Cell phone: 082 787 0711
Email: lance@happyholidays.co.za
Access to information general contacts
Tel: 039 315 6334
Email: relax@happyholidays.co.za
This PAIA Manual of Happy Holiday Homes cc is available at: (Shop 6 Déjà vu Boulevard & 039 315 6334). As well as our Website: (www.happyholidays.co.za)
Email: relax@happyholidays.co.za
Happy Holiday Homes cc
Postal Address: PO Box 621, Uvongo, KwaZulu Natal, 4270
Physical Address: Shop 6, Déjà vu Boulevard, cnr Marine drive and Albert Meyer road, Shelly Beach, KwaZulu Natal, 4275.
Telephone: 039 315 6334
Email: relax@happyholidays.co.za
Website: www,happyholidays.co.za
LIST OF ABBREVIATIONS
“CEO” Chief Executive Officer
“DIO” Deputy Information Officer;
“CIO“ Chief Information Officer;
“PAIA” Promotion of Access to Information Act No. 2 of 2000( as Amended;)
“POPIA” Protection of Personal Information Act No.4 of 2013;
LIST OF ACRONYMS
“Constitution” Constitution of the Republic of South Africa 108 of 1996
“PAIA Manual” Information Manual
“Minister” Minister of Justice and Correctional Services
“Regulator” Information Regulator
“Republic” Republic of South Africa
- Introduction
The Promotion of Access to Information Act, No. 2of 2000 (PAIA) is giving effect to the constitutional right of all, in terms of section 32 of the Bill of Rights contained in the Constitution of the Republic of South Africa 108 of 1996 (“Constitution”) the of access to any information held by the state and any information that is held by another person and that is required for the exercise/protection of any rights
Promotion of Access to Information Act (PAIA) and the Protection of Personal Information Act (POPIA) could be confusing. They can be seen as “information” laws and are both from the 1st of July 2021 enforced by the same Information Regulator. PAIA is an “Access” law, all about access of Information and POPIA is a “Privacy” law all about privacy of personal information. They shouldn’t be seen as competing, but rather, both are there to help ensure that information is managed correctly.
- Purpose of PAIA manual
In terms of section 51 of the PAIA, all Private Bodies are required to compile an Information Manual (“PAIA Manual”). This PAIA Manual is useful for the public to-
- check the categories of records held by a Business which are available without a person having to submit a formal PAIA request;
- have a sufficient understanding of how to make a request for access to a record of a Business, by providing a description of the subjects on which a Business holds records and the categories of records held on each subject;
- now the description of the records of a Business which are available in accordance with any other legislation;
- access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access;
- know the description of the guide on how to use PAIA, as updated by the Regulator and how to obtain access to it;
- know if a Business will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto;
- know the description of the categories of data subjects and of the information or categories of information relating thereto;
- know the recipients or categories of recipients to whom the personal information may be supplied;
- know if a Business has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied; and
- know whether a Business has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.
- Guide on how to use PAIA and how to obtain access to the guide
- The Regulator has, in terms of section 10(1) of PAIA, as amended, updated and made available the revised Guide on how to use PAIA (“Guide”), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contained in PAIA and POPIA.
- The Guide is available in each of the official languages and in braille.
- The previously mentioned Guide contains the description of-
- the objects of PAIA and POPIA;
- the postal and street address, phone and fax number and, if available, electronic mail address of-
3.3.3 the manner and form of a request for-
3.3.3.1. access to a record of a public body contemplated in section 11[3]; and
3.3.3.2. access to a record of a private body contemplated in section 50[4];
3.3.4. the assistance available from the IO of a public body in terms of PAIA and POPIA;
3.3.5 the assistance available from the Regulator in terms of PAIA and POPIA;
3.3.6. all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging-
3.3.6.1. an internal appeal;
3.3.6.2. a complaint to the Regulator; and
3.3.6.3. an application with a court against a decision by the information officer of a public body, a decision on internal appeal or a decision by the Regulator or a decision of the head of a private body;
3.3.7. the provisions of sections 14[5] and 51[6] requiring a public body and private body, respectively, to compile a manual, and how to obtain access to a manual;
3.3.8. the provisions of sections 15[7] and 52[8] providing for the voluntary disclosure of categories of records by a public body and private body, respectively;
3.3.9. the notices issued in terms of sections 22[9] and 54[10] regarding fees to be paid in relation to requests for access; and
3.3.10. the regulations made in terms of section 92[11].
- Members of the public can inspect or make copies of the Guide from the offices of the public and private bodies, including the office of the Regulator, during normal working hours.
- The Guide can also be obtained-
- upon request to the Information Officer;
- from the website of the Regulator (https://www.justice.gov.za/inforeg/).
- A copy of the Guide is also available in the following two official languages, for public inspection during normal office hours-
- English
- Afrikaans
The SA Information Regulator Address: P.O Box 31533, Braamfontein, Johannesburg, 2017 or JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
General enquiries email: inforeg@justice.gov.za.
Complaint’s email: POPIAComplaints.IR@justice.gov.za & PAIAComplaints.IR.@justice.gov.za
- Categories of records of the Happy Holiday Homes cc which are available without a person having to request access by completing a form.
|
Category of records |
Types of the Record |
Available on Website |
Available upon request |
| PAIA Manual | Guidance for Property Practitioners & Clients | x | x |
| POPIA Compliance Framework | Guidance for Property Practitioners | x | |
| FICA Manual | Guidance for Property Practitioners | x | |
| Code of Conduct: AUTHORITY | Guidance for Property Practitioners | x |
- Description of the records of Happy Holiday Homes cc which are available in accordance with any other legislation
|
Category of Records |
Applicable Legislation
|
| PAIA Manual | Promotion of Access to Information Act 2 of 2000 |
| POPIA Compliance Framework | Protection of Personal Information Act of 2013 |
| FICA Manual & records | Financial Intelligence Centre Act 38 of 2001 |
| Code of Conduct: AUTHORITY | Property Practitioners Act, 2019 (Act 22 of 2019) & PP Regulations 2022 |
| Memorandum of incorporation | Companies Act 71 of 2008
|
- Description of the subjects on which the body holds records and categories of records held on each subject by the Happy Holiday Homes cc
| Subjects on which a Business holds records |
Categories of records |
| Strategic Documents, Plans, Proposals | Strategic Plan, Annual Performance Plan. |
| Companies Act Records | ü All trust deeds / Documents of Incorporation /Index of names of Directors / Memorandum of Incorporation
ü Minutes of meetings of the Board of Directors / Shareholders / Proxy forms / ü Share certificates/Register and other statutory registers ü Records relating to the appointment of: ü Auditors / Directors / Public Officer / Secretary ü Resolutions / Special Resolutions |
| Income Tax Records | ü VAT
ü PAYE Records- Documents to employee’s income tax & Payments made to SARS on behalf of employees ü Regional Services Levies / Skills Development Levies / UIF / Workmen’s Compensation |
| Financial Records | ü Annual Financial Reports / Statements
ü Banking details and bank accounts / Statements /Accounting & Banking Records / Paid Cheques ü Debtors / Creditors statements & invoices / Reconciliations ü Policies and procedures ü Rental Agreements / Asset Registers; ü Tax Returns / Audit reports ü Risk management frameworks / plans. ü Standard Terms and Conditions for supply of services and products ü Contractor, client and supplier agreements ü Lists of suppliers, products, services |
| AUTHORITY & Training Records
|
ü FFC’s / Payments to AUTHORITY
ü Outdoor advertising application and stickers for boards ü Training Manuals / Records |
| Human Resources | ü HR policies and procedures
ü Advertised posts ü Employees records |
| IT Department | ü Information security policies/standards/procedures
ü Information technology systems / user manuals / user policy documentation / Hardware asset registers ü Software licensing / System documentation / manuals ü Project implementation plans ü Computer / mobile device usage policy documentation |
- Processing of personal information
- Purpose of Processing Personal Information
We only collect the minimum amount of information that is relevant to the purpose. If you interact with us on the internet, the personal information we collect depends on whether you just visit our website or, require our services. If you visit our website, your browser transmits some data automatically, such as your browsing times, the data transmitted and your IP address.
If you use our services, personal information is required to fulfill the requirements of that service. (Including FICA documents, when applicable)
We usually collect only name and contact details, financial qualification (if completed by you), with property needs and requirement when we assist a Lessee/Buyer in finding a property.
While doing a price estimation to place a property on the market, we need the basic info and will be able to source the property info from the deeds office systems (Lightstone / SAPTG/PayProp/CMA).
To assist selling the property we need to have basic personal info and financial info to know if the sellers will be able to sell the property, cancel the bond, pay all fees, and move to another property.
- Description of the categories of Data Subjects and of the information or categories of information relating thereto
|
Categories of Data Subjects |
Personal Information that may be processed |
| Sellers / Purchasers / Landlords / Tenants | Name, Surname, and Maiden Name
Identification Number/S Married/Single Status. E-Mail Address Physical / Postal Address / Erf Number / Complex Details Telephone Number/S Financial & Banking Details (For Bond Qualification – Buyers And Bond Cancellations -Sellers And Rentals) |
| Service Providers | Names, Registration Number, Vat Numbers, Address, Trade Secrets And Bank Details |
| Employees | Address, Qualifications, Gender And Race |
- The recipients or categories of recipients to whom the personal information may be supplied
|
Category of personal information |
Recipients or Categories of Recipients to whom the personal information may be supplied
|
| Identity number and names, for criminal checks | South African Police Services |
| Qualifications, for qualification verification’s | South African Qualifications Authority
|
| Credit and payment history, for credit information | Credit Bureaus |
| Name, Surname, And Maiden Name
Identification Number/S Married/Single Status. E-Mail Address Physical / Postal Address / Erf Number / Complex Details Telephone Number/S Financial & Banking Details (For Bond Qualification – Buyers And Bond Cancellations -Sellers And Rentals) |
Colleague’s Or Other Property Practitioner Business,
Attorneys, Bond Consultants, Compliance Inspectors, Homeowner Association, Trustees, In Some Cases, Public Or Legal Authorities. |
- Planned transborder flows of personal information
|
Type of personal information |
Transborder flows / storage
|
| Name, Surname, And Maiden Name
Identification Number/S Married/Single Status. E-Mail Address Physical / Postal Address / Erf Number / Complex Details Telephone Number/S Financial & Banking Details (For Bond Qualification – Buyers And Bond Cancellations -Sellers And Rentals) Photos |
One Drive: Cloud Storage |
| If there is an international component to the work which we are doing while selling / letting | Personal information will be protected in this foreign country, and we will endeavour to assist you finding their countries procedures and laws. |
- General description of Information Security Measures to be implemented by the responsible party to ensure the confidentiality, integrity and availability of the information
We restrict, secure, and control all our information against unauthorised access, interference, modification, damage, loss, or destruction; whether physical or electronic.
We will do a safety and security risk assessment from time to time to ensure we keep up with requirements and this will be discussed at our monthly staff meeting for all personnel’s input.
Our staff must be informed / trained to be compliant with POPI Act, and this training must be ongoing and up to date.
We do everything we can to prevent personal information from falling into unauthorized hands.
Our business premises where records are kept must remain protected by access control, burglar alarms and armed response.
All our laptops, phones and computer network are protected by passwords which we changed on a regular basis.
We are as small Business, so it is easy to determine which employees are permitted access personal information and what information they are permitted to access.
Personal information can only be accessed or modified by those employees with the password’s authorising them to do so.
The online profiles and access of staff who left the Property Practitioner Business must be properly deleted.
Each employee uses his/her own password to access the data, therefore we can identify the source of a data breach and we can neutralize such a breach.
If there were a data breach, we will determine the source, neutralise it and prevent the re-occurrence of such a data breach.
When we make use of an external operator our principal (responsible party) will, in terms of a written contract between our Property Practitioner Business and the operator, ensure that the operator establishes and maintains the required security measures.
The operator must advise immediately if there is the possibility that personal data has been accessed or acquired by any unauthorized person.
The Data Subject will be advised via e-mail or in writing immediately if it is suspected that their personal information has been access by unauthorized persons. Sufficient information will be provided to allow the Data Subject to put measures in place to safeguard themselves against potential consequences of the security compromise.
The Information Regulator will be informed in the event of a security breach where personal information could be compromised. It is the duty of the Principal to ensure this process is followed.
- Availability Of The Manual
- A copy of the Manual is available-
- on (happyholidays.co.za), if any;
- office of Happy Holiday Homes cc for public inspection during normal business hours;
- to any person upon request and upon the payment of a reasonable prescribed fee; and
- to the Information Regulator upon request.
- A copy of the Manual is available-
A fee for a copy of the Manual, as contemplated in annexure B of the Regulations, shall be payable per each A4-size photocopy made.
The principal of Happy Holiday Homes cc will on a regular basis update this manual.
Issued by:
Lance Sean du Plessis Nat.Cert:Real Estate, MPRE
Principal Member
Chief Information Officer
[1] Section 17(1) of PAIA- For the purposes of PAIA, each public body must, subject to legislation governing the employment of personnel of the public body concerned, designate such number of persons as deputy information officers as are necessary to render the public body as accessible as reasonably possible for requesters of its records.
[2] Section 56(a) of POPIA- Each public and private body must make provision, in the manner prescribed in section 17 of the Promotion of Access to Information Act, with the necessary changes, for the designation of such a number of persons, if any, as deputy information officers as is necessary to perform the duties and responsibilities as set out in section 55(1) of POPIA.
[3] Section 11(1) of PAIA- A requester must be given access to a record of a public body if that requester complies with all the procedural requirements in PAIA relating to a request for access to that record; and access to that record is not refused in terms of any ground for refusal contemplated in Chapter 4 of this Part.
[4] Section 50(1) of PAIA- A requester must be given access to any record of a private body if-
- that record is required for the exercise or protection of any rights;
- that person complies with the procedural requirements in PAIA relating to a request for access to that record; and
- access to that record is not refused in terms of any ground for refusal contemplated in Chapter 4 of this Part.
[5] Section 14(1) of PAIA- The information officer of a public body must, in at least three official languages, make available a manual containing information listed in paragraph 3 above.
[6] Section 51(1) of PAIA- The head of a private body must make available a manual containing the description of the information listed in paragraph 3 above.
[7] Section 15(1) of PAIA- The information officer of a public body, must make available in the prescribed manner a description of the categories of records of the public body that are automatically available without a person having to request access
[8] Section 52(1) of PAIA- The head of a private body may, on a voluntary basis, make available in the prescribed manner a description of the categories of records of the private body that are automatically available without a person having to request access
[9] Section 22(1) of PAIA- The information officer of a public body to whom a request for access is made, must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.
[10] Section 54(1) of PAIA- The head of a private body to whom a request for access is made must by notice require the requester to pay the prescribed request fee (if any), before further processing the request.
[11] Section 92(1) of PAIA provides that –“The Minister may, by notice in the Gazette, make regulations regarding-
(a) any matter which is required or permitted by this Act to be prescribed;
(b) any matter relating to the fees contemplated in sections 22 and 54;
(c) any notice required by this Act;
(d) uniform criteria to be applied by the information officer of a public body when deciding which categories of records are to be made available in terms of section 15; and
(e) any administrative or procedural matter necessary to give effect to the provisions of this Act.”