POPIA provides that a data subject may, upon proof of identity, request CONNECT SPACE to confirm, free of charge, all the information it holds about the data subject and may request access to such information, including information about the identity of third parties who have or have had access to such information. POPIA provides that a data subject may object, at any time, to the processing of personal information by CONNECT SPACE, on reasonable grounds relating to his/her particular situation, unless legislation provides for such processing.

A data subject may also request CONNECT SPACE to correct or delete personal information about the data subject in its possession or under its control that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully; or destroy or delete a record of personal information about the data subject that CONNECT SPACE is no longer authorised to retain in terms of POPIA's retention and restriction of records provisions. If a data subject that wishes to:

• Submit a data subject access request, must complete the form attached hereto as Appendix A.2:
• object to the processing of their personal information must complete the form attached hereto as Appendix C and;
• request a correction or deletion of personal information or the destruction or deletion of a record of personal information must complete the form attached hereto as Appendix D and submit it to the Information Officer. The purpose of this section is to provide directive and guidance on the process to follow when requesting information from CONNECT SPACE.
• The Requestor should contact CONNECT SPACE’s Information Officer to obtain guidance on the process to follow when sending documentation containing personal information. This includes application forms and proof of identification documents.
• The prescribed form must be used and completed to make the request for access to a record. The form can be downloaded from the Department of Justice website (refer to Appendix A.1).
• Proof of identification of the Requestor (and related third parties acting on behalf of the Requestor) must be provided on submitting the request form.
• The requester must specify the right that they are seeking to protect or that they wish to exercise and provide an explanation as to why the requested records are required for the protection or exercise of that right.
• If the request is made on behalf of another person, then proof is required of the capacity in which the requester is making the request.
• Proof of identity must be provided in the form of a certified copy of the Requestor’s and/or delegate’s identity document or passport via secure methods provided by the Information Officer in the initial correspondence.
• An initial response to a request will take approximately 30 days. The Information Officer may extend the period by an additional 30 days depending on the complexity of the request requirements.
• Please note that an application for access to information can be refused in the event that the application does not comply with the requirements of PAIA.
• The successful completion and submission of the access request does not automatically allow the Requestor access to the requested records.
• If access to a record/information is granted, the Requestor will be notified, and the notification will include the following:
→ An indication of the access fee that should be paid upon gaining access (if any).
→ An indication of the form in which the access will be granted.

• If access to a record/information is denied, the Requestor will be notified, and will include the following:
→ Adequate reasons for the refusal.
→ Process to appeal the refusal.

• Should the requester not be satisfied with the decision of the Information Officer, the Requester may apply to court for relief. In terms of PAIA, the said application must be made within 180 days after the decision has been made by the Information Officer.