Still-life, fruit

Privacy Policy

Still-life, fruit

WHAG Privacy Statement


This privacy policy (“Privacy Policy“) applies to how we process your Personal Information when using this Website and Services (terms are defined in the Website Terms and Conditions accessible on our website (the “Terms“).

The William Humphreys Art Gallery is a national Museum and agency of the Department of Sport, Arts and Culture.




The William Humphreys Art Gallery (WHAG) is strongly committed to protecting personal information/data. This privacy statement describes why and how we collect and use personal information and provide information about individuals’ rights in relation to personal information. It applies to all personal information provided to the museum, both by individuals themselves and by other stakeholders. The museum may use personal information provided to for any of the purposes described in this privacy statement or as otherwise stated at the point of collection.




As used in this privacy statement “WHAG”, “us”, “we” refer to the William Humphreys Art Gallery and/or anyone of its members that might process personal information of data subjects.

In this privacy statement, we refer to information about any data subject or information defined as personal data or personal information. We also collectively refer to handling, collecting, protecting, or storing personal information as processing such personal information.


“data subject” means the person to whom personal information relates. Data subjects may include, but is not limited to:

“personal information” means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, juristic person, including, but not limited to:


Our legal grounds for processing personal information


Legislation may require the museum to set out in this privacy statement the legal

grounds on which we rely in order to process personal information. In such cases, the museum relies on one or more of the following processing conditions:

Processing of personal information at the WHAG


The types of personal information the WHAG will typically collect and maintain for its purposes can be accessed from the personal information inventory published on the museum website. This inventory may be updated from time to time.


How does the Museum use your personal information?


The WHAG collects personal information only for specific, explicitly defined, and lawful purposes related to an activity or function performed by the WHAG.

You, as the data subject, will be made aware of this purpose.


The WHAG will inform the data subject of the following:


The WHAG will use your personal information only for the purposes for which it was collected and agreed upon. In addition, when necessary, your personal information may be retained for legal or research purposes.


Disclosure/transfer of information


The WHAG will take all reasonable steps to ensure that personal information is not disclosed to any third parties, except in certain allowed circumstances. The WHAG has arrangements in place to ensure that the museum comply with the privacy requirements as informed by the Protection of Personal Information Act.


Cross border transfer of personal information


If the museum processes any personal information, this personal information may be transferred to and stored outside the Republic of South Africa only when:

Transfer of personal information to third party providers


The museum may transfer or disclose personal information we process to third party contractors, subcontractors, and/or their subsidiaries and affiliates under certain allowed circumstances.


The servers powering and facilitating our IT infrastructure might be located in secure data centres around the world, and personal information might be stored on any one of them.


Third party service providers may use their own third-party subcontractors that have access to personal information. It is the museum’s policy to use only third-party service providers that are bound to maintain appropriate levels of security and confidentiality to process personal information only as instructed by the museum, and to follow the same obligations down to their sub processors.


Other disclosures


The museum may disclose personal information under the following circumstances:


Information security


The museum is obliged to provide adequate protection for the personal information we hold and to stop unauthorised access and use of personal information. The museum will implement generally accepted standards of technology and operational security in order to protect personal information from loss, misuse, alteration, or destruction. Only authorised persons are provided access to personal information, such individuals have agreed to maintain the confidentiality of this personal information.


Although we use appropriate security measures once we have received personal information, the transmission of information over the internet (including by email) is never completely secure. The museum endeavour to protect personal

information but cannot guarantee the security of information transmitted to or by us.


The museum will on an ongoing basis, continue to review all security controls and related processes to ensure that all data subject’s personal information remains secure.


WHAG security policies and procedures cover:


When the museum contract with third parties, we impose appropriate security, privacy, and confidentiality obligations on these parties to ensure that personal information that we remain responsible for, is kept secure.


The museum will ensure that anyone to whom we pass personal information agree to treat this personal information with the same level of protection as we are obliged to.


The rights of the data subject


All data subjects may have certain rights under legislation in relation to the personal information we hold. Data subjects have a legal right to:

The right to delete personal information processing in the following cases: