UJ Privacy Notice
Introduction
When you use our UJ Wayfinder® mobile application, you trust us with your personal data. We are committed to keeping that trust. That starts with helping you understand our privacy practices.
This notice describes the personal data we collect, how it is used, shared and your choices regarding this data.
Overview
Scope
This notice applies to users of UJ Wayfinder®, services at our South African Campuses.
This notice describes how the University of Johannesburg (“UJ”) and its affiliates, collect, and use personal data. This notice applies to all users of our applications (apps), websites, features, or other services, unless covered by a separate privacy notice. This notice specifically applies to:
Users: individuals who download and make use of the UJ Wayfinder® app’s services.
This notice also governs UJ’s other collections of personal data in connection with UJ’s services. We may also collect the personal data of those who start but do not complete or skip application registration on the UJ Wayfinder® app.
All those subject to this notice are referred to as ‘users’ in this notice.
Our data practices are subject to applicable laws in South Africa where we operate. This means that we engage in the practices described in this notice in South Africa only if permitted under the laws of South Africa. Please contact us with any questions regarding our practices.
Data controller and transfer
UJ is the data controller for the personal data collected in connection with use of UJ’s
services anywhere else.
UJ operates, and processes data, globally. We may also transfer data to countries other than the one where our users live or use UJ services. We do so in order to fulfil our agreements with users, such as our Terms of Use, or based on user’s prior consent, other transfer mechanisms as may be available under applicable law, such as the Standard Contractual Clauses.
Questions, comments, and complaints about UJ’s data practices can be submitted to us on wayfinding@uj.ac.za You may also use this email to submit a question to UJ’s Data Protection Officer.
Data collections and uses
The data we collect
UJ collects:
Data created during use of our services, such as location, app usage, and device data
The following data is collected by or on behalf of UJ:
1- Data provided by users. This includes:
Specifically, Location Data is used to greet users as the enter and leave the campus, as a reminder to open the UJ Wayfinder® app, so they can receive notices.
User feedback, such as ratings, feedback, or compliments.
Users participating in our referral programs. For example, when a user refers another person, we receive the referred person’s personal data from that user.
Publicly available sources.
Marketing service providers.
UJ may combine the data collected from these sources with other data in its possession.
How we use personal data
UJ collects and uses data to enable a convenient visit experience. We also use the data we collect:
To enhance and improve our services
For customer support
For research and development
To enable communications between users
To send non-marketing communications to users
UJ does not sell or share user personal data with third parties for their direct
marketing, except with users’ consent.
UJ uses the data it collects for purposes including:
This includes using the data to:
Enable features that allow users to share information with other people, such as when users share content with their contacts using other social media applications on their smart phones. UJ Wayfinder® does not directly share any information, and only plays a facilitation role.
Perform internal operations necessary to provide our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, research, to monitor, analyse usage and activity trends.
Welcome users to the campus and prompt them to open their app.
Using device, location, profile, usage, and other data to prevent, detect and combat fraud.
Direct questions to the appropriate customer support person
Investigate and address user concerns
Monitor and improve our customer support responses and processes
Deactivating users who are identified as having engaged in fraud or activities that may otherwise harm UJ, its users, and others. In some cases, such as when a user is determined to be abusing UJ’s rewards program, such behaviour may result in automatic deactivation.
We may use the data we collect to personalize the communications that we send, including based on user location, past use of UJ’s services, and user mobile device preferences and settings.
Cookies and third-party technologies
UJ’s and its partners use cookies and other identification technologies on our apps, websites,
emails, and online ads for purposes described in this notice.
Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and advertisements. UJ uses cookies and similar technologies for purposes such as:
Remembering user preferences and settings
Determining the popularity of content
Delivering and measuring the effectiveness of campaigns
Analysing site traffic and trends, and generally understanding the online behaviours and interests of people who interact with our services
We may also allow others to provide audience measurement and analytics services for us, to serve advertisements on our behalf across the Internet, and to track and report on the performance of those advertisements. These entities may use cookies, web beacons, SDKs, (software development kit), and other technologies to identify the devices used by visitors to our websites, as well as when they visit other online sites and services.
Data sharing and disclosure
Some of UJ’s products, services, and features require that we share data with other users or at a user’s request. We may also share data with our affiliates, subsidiaries, and partners, for legal reasons or in connection with claims or disputes.
None.
This includes sharing data with:
Other people at the user’s request. For example, when a user shares content using
social media links with a friend or contact.
UJ business partners. For example, if a user requests a service through a partnership or promotional offering made by a third party, UJ may share certain data with those third parties. This may include, for example, other services, platforms, analytics, apps, or websites that integrate with our APIs; services; those with an API or service with which we integrate; or other UJ business partners and their users in connection with promotions, contests, or specialized services.
Questions or comments from users submitted through public forums such as UJ social media pages may be viewable by the public, including any personal data included in the questions or comments submitted by a user.
UJ provides data to vendors, consultants, research firms, and other service providers or business partners. These include:
Data analytics providers
Research partners, including those performing surveys or research projects in partnership with UJ or on UJ’s behalf
Vendors that assist UJ to enhance the safety and security of its apps
Consultants, lawyers, accountants, and other professional service providers
UJ may share users’ personal data if we believe it’s required by applicable law, regulation, operating license or agreement, legal process, or governmental request, or where the disclosure is otherwise appropriate due to safety or similar concerns.
This includes sharing personal data with law enforcement officials, public health officials, other government authorities, or other third parties as necessary to enforce our Terms of Service, user agreements, or other policies; to protect UJ’s rights or property or the rights, safety, or property of others; or in the event of a claim or dispute relating to the use of our services
This also includes sharing personal data with others in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.
UJ’s may share a user’s personal data other than as described in this notice if we notify the
user and they consent to the sharing.
Data retention and deletion
UJ retains user data for as long as necessary for the purposes described above. Users may request deletion of their data at any time. UJ may retain user data after a deletion request due to legal or regulatory requirements or for the reasons stated in this policy.
UJ retains user data for as long as necessary for the purposes described above. This means that we retain different categories of data for different periods of time depending on the
category of user to whom the data relates, the type of data, and the purposes for which we collected the data.
Users may request deletion of their gathered data at any time through UJ’s website or
email.
Following a data deletion request, UJ deletes the user’s data, unless they must be retained due to legal or regulatory requirements, for purposes of safety, security, and fraud prevention, or because of an issue relating to the user such as an unresolved claim or dispute. For users, their data is generally deleted within 90 days of a deletion request, except where retention is necessary for the above reasons.
Grounds for processing
We only collect and use personal data where we have lawful grounds to do so. These include processing user personal data to provide requested services and features, for purposes of
UJ’s legitimate interests or those of other parties, to fulfil our legal obligations, or based on consent.
We collect and use personal data only where we have one or more lawful grounds for doing so. Such grounds may vary depending on where our users are located, but generally include processing personal data:
In order to provide our services, we must collect and use certain personal data. This includes:
User location data, which we use to remind users to open their app to receive navigation assistance when visiting our campuses.
Usage data, which is necessary to maintain, optimize, and enhance UJ Wayfinder®’s services.
Transaction information
Information relating to customer support
User preferences
This includes using personal data to maintain and enhance our user’s safety and security.
This also includes purposes such as combating fraud; improving our services, research, and development; and enforcing UJ’s Terms of Service.
In addition, it includes using personal data to the extent necessary for the interests of other people or the general public, such as in connection with legal or insurance claims, and to protect the rights and safety of others.
For example, UJ is subject to laws and regulations in South Africa that may require us to collect and retain data and to provide copies of such data to the government or other authorities. We collect and use personal data to comply with such laws.
UJ may also share data with law enforcement regarding criminal acts or threats to public safety, or requests by third parties pursuant to legal processes. UJ may also share information with public health authorities where required or permitted by law.
UJ may collect and use personal data based on the user’s consent. For example, we may collect personal data through voluntary surveys and competitions. Responses to such surveys are collected on the basis of consent and will be deleted once no longer necessary for the purposes collected.
A user who has provided consent to a collection or use of their personal data can revoke it at any time. However, the user will not be able to use any service or feature that requires collection or use of that personal data.
Choice and transparency
UJ enables users to access and control the data that UJ collects, including through:
Device permissions
UJ also enables users to request access to or copies of their data, deletion of their data, or that restrict its processing of user personal data.
Settings menus on their mobile device for users give them the ability to set or update their location-sharing preferences and their preferences for receiving mobile notifications from UJ. Information about these settings, how to set or change these settings, and the effect of turning off these settings is described below.
Location data
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. iOS devices notify users the first time the UJ Wayfinder® app requests permission to access certain types of data and gives users the option to grant or refuse permission. Android devices notify users of the permissions that the UJ Wayfinder® app seeks before their first use of the app and use of the app constitutes a grant of such permission.
In addition, depending on their location, users may have the right to file a complaint relating to UJ’s handling of their personal data with the data protection authority in South Africa.
Updates to this notice
We may occasionally update this notice. Use of our services after an update constitutes consent to the updated notice to the extent permitted by law.
We may occasionally update this notice. If we make significant changes, we will notify users in advance of the changes through the UJ Wayfinder® apps or through other means, such as email. We encourage users to periodically review this notice for the latest information on our privacy practices.
After such notice, use of our services by users will be understood as consent to the updates to the extent permitted by law.
Updated: 31 January 2022