PRIVACY NOTICE — AMC BUSINESS INSTITUTE CORRIDOR
Version: 1.0
Status: Active Governance Framework
Last reviewed: 9 November 2026
1. Purpose
This notice explains how personal information is processed through the AMC Business Institute / African AiCons digital corridor, including event registration, ESG Masterclass enquiries, diagnostic tools, and related operational services.
Processing is governed by the Protection of Personal Information Act 4 of 2013 (POPIA).
2. Roles and Responsibilities
Responsible Party
AMC Business Institute
Responsible Party: Mr. Emmanuel Mwaba
AMC Business Institute determines the purposes and means of processing personal information collected through the corridor.
Operator
Andre Snyman, trading as QuantumIntellect Digital
The Operator processes personal information on behalf of AMC Business Institute, subject to documented instructions and the signed Data Processing Agreement (DPA).
The Operator shall:
- Process personal information only with the knowledge or authorisation of the Responsible Party.
- Maintain confidentiality and appropriate security safeguards.
- Not use personal information for independent marketing, profiling, resale, or unrelated purposes.
- Immediately notify the Responsible Party upon reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person.
3. Categories of Personal Information
Name, business email, organisation, role, event registration, diagnostic responses, and technical logs. The diagnostic tool must not request special personal information, ID documents, or financial details.
4. Purposes of Processing
ESG Masterclass registration, delegate communications, diagnostic services, security monitoring, and compliance records.
5. Lawful Processing
The Responsible Party determines the lawful basis for processing. Data subjects receive the required collection notice under Section 18. Information is adequate and relevant.
6. Data Subject Rights
Subject to applicable law, data subjects may request access, correction, or deletion of their information; object to processing; or lodge a complaint with the Information Regulator.
Requests should be directed to: [email protected]
The Operator shall promptly assist the Responsible Party with requests.
7. Data Retention
Information is retained only as necessary to fulfil the purpose or satisfy legal obligations. The Responsible Party approves the retention schedule.
8. Data Evacuation and Exit Clause
Upon termination, the Operator shall export all data to the Responsible Party, securely delete remaining copies, and provide written confirmation of completion.
9. Security and Breach Notification
Appropriate technical and organisational safeguards are maintained (POPIA Section 19). The Operator shall notify the Responsible Party immediately upon a security compromise. The Responsible Party manages statutory notifications (Section 22).
10. Third-Party Services and Cross-Border Processing
The corridor uses Cloudflare and authorised processors. No international transfer occurs without the required lawful basis and safeguards (Section 72).
11. Changes to this Notice
This notice is reviewed when processing changes. It does not replace the signed DPA.