PRIVACY POLICY

1. Introduction
Welcome to the official website of Derric van Rensburg. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA), and—where applicable—the General Data Protection Regulation (GDPR) of the European Union.
By using this website, you agree to the terms of this Privacy Policy.

 

2. Information We Collect
We only collect information that is necessary and directly related to the purposes of promoting Derric van Rensburg's art and informing you about his activities.

• Subscribing to a Newsletter/Alerts: Your email address and potentially your name.

• Submitting an Enquiry via a Contact Form: Your name, email address, and any other personal information you choose to include in your message.

• Registering for a Workshop or Exhibition: Your name, email address, and potentially a contact number or location (if necessary for event planning).

​

Automatically Collected Information (Usage Data): When you visit the Website, our servers, or third-party analytics services (like Google Analytics), automatically record certain information, which may constitute personal information in some jurisdictions (e.g., under GDPR). This includes:

• Your IP address.

• Browser type and operating system.

• The pages you view, and the time and date of your visit.

• Referring website addresses.

​

3. How We Use Your Information
We will only use your personal information for the specific purposes for which it was collected, such as:

• Responding to enquiries about artworks, exhibitions, or workshops.

• Managing bookings, registrations, and communications for events.

• Sending newsletters or promotional updates (only if you opt in).

• Analysing website usage to improve our services and user experience.

• Complying with applicable laws and legal obligations.

We will not process your personal information for any other purpose unless we obtain your further consent or if we are legally obliged to do so.

​

4. Legal Basis for Processing
In accordance with POPIA and, where applicable, GDPR, we process personal information based on one or more of the following legal grounds:

• Consent – You have given explicit consent for specific purposes (e.g., marketing communications).

• Contractual Necessity – Processing is needed to perform a service you have requested (e.g., event registration).

• Legitimate Interest – To promote the artworks and artistic activities of Derric van Rensburg.

• Legal Obligation – To comply with South African or international law.

​​

5. Data Storage and Security

• Security: We are the Responsible Party (as defined by POPIA) and take reasonable technical and organisational measures to ensure the integrity and confidentiality of the personal information we hold, protecting it from loss, damage, unauthorised access, or unlawful processing.

• Retention: We will keep your personal information for no longer than is necessary to fulfil the purposes for which it was collected or as required by law. For newsletter subscriptions, we will retain your email address until you exercise your right to unsubscribe.

​

6. Sharing of Information
We do not sell, rent, or trade your personal information. We may share data only with trusted service providers who help operate the website, send communications, or manage events—strictly under confidentiality and data protection agreements. Information may also be disclosed when required by law or to protect our legal rights.
 

7. International Data Transfer
The Website is operated from South Africa. By using the Website and providing us with your information, you understand that your personal information may be processed and stored on servers located in South Africa and/or transferred to third-party service providers (such as email service platforms or hosting providers) located outside of South Africa. We will only transfer your information to third-party service providers that offer a level of protection equal to or better than POPIA (e.g., those compliant with GDPR). By using our contact form or subscribing to our newsletter, you explicitly consent to this transfer of information.
 

8. Use of Cookies
The Website may use cookies (small text files placed on your device) to collect Usage Data and enhance your experience. We use cookies for essential website functions and to gather anonymised analytics. Where required by law, we will obtain your explicit consent before deploying any non-essential cookies (like analytics or marketing cookies) on your device. You can manage your cookie preferences through your browser settings.
 

9. Your Rights as a Data Subject (POPIA and GDPR)
You have the right to control your personal information. Under POPIA and GDPR, your rights include:

• Right of Access: You may request access to the record of your personal information we hold.

• Right to Correction/Deletion: You may request us to correct or delete your personal information if it is inaccurate, irrelevant, excessive, or has been retained longer than necessary.

• Right to Object: You may object, on reasonable grounds, to the processing of your personal information.

• Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

• Right to Unsubscribe: All marketing emails will contain an easy and visible "unsubscribe" link.

To exercise any of these rights, please contact the Information Officer as detailed in Section 12.
 

10. Right to Lodge a Complaint
If you believe that your rights have been infringed, you have the right to contact the relevant supervisory authority.

• South Africa (POPIA):

  • The Information Regulator (South Africa)

  • Website: https://www.justice.gov.za/inforeg/

  • Email (Complaints): POPIAComplaints@inforegulator.org.za

• International Visitors (e.g., GDPR):

  • You have the right to lodge a complaint with the Data Protection Authority in your country of residence.
     

11. Updates to This Policy
This Privacy Policy may be updated periodically to reflect changes in law, business practices, or website functionality.
The latest version will always be available on this page, with the “Last Updated” date adjusted accordingly.
 

12. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact:
Derric van Rensburg
Email: info@derricvanrensburg.com 
Website: https://www.derricvanrensburg.com