Privacy Notice

Data Controller

Vodacom Tanzania  is the controller of the personal data that you (the data subject) provide Vodacom Tanzania where Vodacom Tanzania  provides the farmer database to Mezzanine (Pty.) ltd.

Mezzanine (Pty.) Ltd. is the controller, when you provide your personal data as an individual, of the personal data that you (the data subject) provide us.

Once you consent to the collection of your personal data through the use of this product ("product") we collect the below-listed types of personal data from you the data subject.

The use and storage of your data are processed in accordance with this privacy notice.

Data Processing

Purpose of Processing

The processing of the data is used to determine which credit facility the farmer qualifies after calculation of the farmer credit score using the farmer profile data and historical transaction data. Also the data is processed to inform which products and services are relevant to which farmers.

Legal Basis for Processing

The legal basis for the processing of the personal data of the data subject is:

• (b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

Voluntary or Mandatory Provision of Personal Data

The personal data listed in section "Provision of Mandatory Personal Data" is mandatory for the fulfilment of the product or service (contract) to which the data subject has or is applying for.

The personal data listed in section "Provision of Voluntary Personal Data" that is provided voluntarily is, and is provided voluntarily due to the below-listed reasons.

• Photograph, Optional inclusion for the data subjects profile (Please note that your photograph is only retained if upload by you)

Provision of Mandatory Personal Data 

Once you consent (or due to the legal basis listed above) to the collection of your personal data through the use of this product we collect the below-listed types of personal data from you the data subject.

• First name, last name/surname, maiden name
• Phone number
• Date of birth
• Gender
• National ID number
• Location data
• Farm ownership
• Farm size
• Farm geometry as a polygon
• Farm value chain
• Value chain harvest quantity

Provision of Voluntary Personal Data

• Photo
• Passport number
• Next of Kin name & mobile number
• Photo of ID / Passport
• Other sources of income

Consequences of failure to provide information

The consequences of failure to provide the personal data listed in section "Provision of Personal Data" is lack of access to services offered by the controller such as access to credit facility, best farming practices content, insurance services and access to market for farm produce.

Data Transfer

Personal Data Recipients

The personal data of the data subject processed by the controller shall not be transferred to any third parties.

In the event that it is necessary to transfer personal information of the data subject to a third party the data subject identity will be protected by the use of an UUID and the data subject shall be informed and the appropriate steps taken based on the lawfulness of processing.

The personal data of the data subject will be processed by the below-listed recipients.

• Vodacom Tanzania
  • Kilimo Trust (services terminated in April 2021)
  • Future tenants will be listed here.
• Uganda
  • Cordaid (implementation partner
  • Emata (Credit provider)
  • Asante (Credit Provider)
  • UNCDF (program funder)

Personal Data Storage

The period for which the personal data will be stored is indefinite in the secure cloud hosted databases.

Farmers who opt out of the services or are deleted will be retained in an archived database.

Automated Decision-Making

The processing activities applicable to the CF+ includes automated decision-making.

The automated decision-making process includes the processing of the farmer profile data, farm data and historic transactional data to determine the credit facilities and the insurance product policies the farmer qualifies for. The logic used is that each of the considered parameters has a configuration for maximum applicable score from which using the configured rule sets the farmer score is calculated automatically on request.

Source of Personal Data

The personal information of the data subject was lawfully obtained from the below-listed sources.

• Data Subject

Data Subject Rights

Data subjects have the below-listed rights with regards to the personal data of the data subject.

• Right of access to information regarding the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• Right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• Right to lodge a complaint with a supervisory authority
• Right to any available information as to their source where the personal data are not collected from the data subject
• Right to be informed of the existence of automated decision-making, including profiling, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
• Right to be informed of the appropriate safeguards where personal data are transferred to a third country or to an international organisation
• Right to be provided with a copy of the personal data undergoing processing
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
• Right to object to processing of personal information
• Right to be informed that and what personal information has been collected when not collected from the data subject
• Right to be informed that and what personal information has been accessed or acquired by an unauthorised person as well as security compromises

Data Subject Complaints

In the event that you wish to complain about how we have handled your personal data, please contact Data Protection Officer at data-protection-officer@mezzanineware.com or in writing at Suite 173, Private Bag x14, Die Boord, 7613.Our Data Protection Officer will then look into your complaint and work with you to resolve the matter.

If you still feel that your personal data has not been handled appropriately according to the law you can contact the Information Regulator: South Africa (POPIA) or the relevant Supervisory Authority (GDPR) of your region.