POPIA – Stadium Management South Africa

POPI (Protection of Personal Information Act)

PROTECTION OF PERSONAL INFORMATION ACT (POPIA) STATEMENT

Stadium Management South Africa

Effective Date: November 2025

1. INTRODUCTION

Stadium Management South Africa (Pty) Ltd (“we”, “us”, “our”, or “Stadium Management SA”) is committed to protecting your personal information and respecting your privacy. This Protection of Personal Information Act (POPIA) statement explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act, 2013 (Act No. 4 of 2013).

We are committed to conducting our business in accordance with applicable privacy laws and regulations, and this statement reflects our commitment to protecting the privacy of personal information that we collect and process.

2. PURPOSE AND SCOPE

This POPIA statement describes how Stadium Management SA processes personal information of:

Event attendees and ticket purchasers
Venue hirers and corporate clients
Contractors, suppliers, and service providers
Website visitors and online users
Job applicants and employees

3. RESPONSIBLE PARTY

Stadium Management South Africa (Pty) Ltd is the responsible party for purposes of POPIA.

Registered Address:

FNB Stadium, Soccer City Ave, Nasrec, Johannesburg South, 2147, South Africa

Contact Email: info@stadiummanagement.co.za

Telephone: +27 11 247 5300

Website: https://stadiummanagement.co.za/

4. TYPES OF PERSONAL INFORMATION WE COLLECT

We may collect and process the following categories of personal information:

4.1 Identity and Contact Information

Full name, surname, and title
Identity or passport number
Date of birth
Contact details (email address, telephone number, physical address)
Company name and position (for business contacts)

4.2 Financial Information

Bank account details
Credit or debit card information
Payment history and transaction records

4.3 Technical Information

IP address and device information
Browser type and version
Operating system
Website usage data and cookies

4.4 Security and Access Information

CCTV footage and security recordings
Access control records
Vehicle registration details

5. HOW WE COLLECT PERSONAL INFORMATION

We collect personal information through various means:

Directly from you when you book tickets, hire our venue, or complete online forms
When you visit our premises or website
Through CCTV and security systems at our facilities
From third-party service providers such as ticketing platforms
From publicly available sources
Through email, telephone, or written correspondence

6. PURPOSE OF PROCESSING PERSONAL INFORMATION

We process your personal information for the following purposes:

To facilitate event bookings, ticket sales, and venue hire arrangements
To provide stadium management and event coordination services
To process payments and manage financial transactions
To communicate with you regarding our services, events, or your bookings
To ensure safety and security at our facilities through CCTV monitoring
To comply with legal and regulatory requirements
To improve our services and website functionality
To send marketing communications (where you have consented)
To respond to inquiries and provide customer support
To manage employment relationships and recruitment processes

7. LEGAL BASIS FOR PROCESSING

We process personal information based on one or more of the following lawful grounds:

Your consent to the processing
To fulfill contractual obligations with you
Compliance with legal obligations
Protection of legitimate interests of Stadium Management SA or a third party
Pursuit of our legitimate business interests

8. SHARING AND DISCLOSURE OF PERSONAL INFORMATION

We may share your personal information with:

Service providers who assist with ticketing, payment processing, event management, and IT services
Event organizers and promoters for events held at our facilities
Security service providers for safety and security purposes
Legal and regulatory authorities when required by law
Professional advisors including lawyers, auditors, and insurers
Third parties in connection with business transfers or reorganizations

We ensure that all third parties who process personal information on our behalf are bound by confidentiality obligations and comply with POPIA requirements.

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, destruction, or damage. These measures include:

Secure servers and encrypted data transmission
Access controls and authentication procedures
Regular security assessments and updates
Physical security measures at our premises
Staff training on data protection and confidentiality
Incident response and breach notification procedures

10. YOUR RIGHTS AS A DATA SUBJECT

Under POPIA, you have the following rights regarding your personal information:

Right of Access: Request confirmation of whether we hold your personal information and access to that information
Right to Correction: Request correction or deletion of inaccurate or incomplete personal information
Right to Object: Object to the processing of your personal information on reasonable grounds
Right to Deletion: Request deletion of your personal information under certain circumstances
Right to Restriction: Request restriction of processing of your personal information
Right to Data Portability: Request your personal information in a structured, commonly used format
Right to Withdraw Consent: Withdraw your consent to processing at any time

To exercise any of these rights, please contact us using the contact details provided in Section 15.

11. RETENTION OF PERSONAL INFORMATION

We retain personal information for as long as necessary to fulfill the purposes for which it was collected or as required by law. Retention periods vary depending on:

The nature of our relationship with you
Legal and regulatory requirements
Contractual obligations
The need to resolve disputes or enforce agreements

When personal information is no longer required, we will securely delete or anonymize it in accordance with our retention and disposal policy.

12. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to enhance user experience and analyze website traffic. You can control cookie settings through your browser preferences. For more information, please refer to our Cookie Policy available on our website.

13. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

14. INTERNATIONAL DATA TRANSFERS

We may transfer your personal information to service providers located outside South Africa. In such cases, we ensure appropriate safeguards are in place to protect your personal information in accordance with POPIA requirements, including:

Ensuring the recipient country has adequate data protection laws
Implementing appropriate contractual safeguards
Obtaining your consent where required

15. UPDATES TO THIS POPIA STATEMENT

We may update this POPIA statement from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised effective date. We encourage you to review this statement periodically.

16. COMPLAINTS AND INFORMATION REGULATOR

If you believe that your personal information has been used in a manner that is inconsistent with this POPIA statement or your rights under POPIA, you have the right to lodge a complaint with us or with the Information Regulator.

Information Regulator (South Africa):

Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Postal Address: P.O Box 31533, Braamfontein, Johannesburg, 2017

Telephone: +27 10 023 5207

Email: inforeg@justice.gov.za

17. CONTACT US

If you have any questions, concerns, or requests regarding this POPIA statement or our processing of your personal information, please contact us at:

Stadium Management South Africa (Pty) Ltd

Physical Address: FNB Stadium, Soccer City Ave, Nasrec, Johannesburg South, 2147, South Africa

Email: info@stadiummanagement.co.za

Telephone: +27 11 247 5300

Website: https://stadiummanagement.co.za/

We will respond to your inquiry or request within a reasonable timeframe in accordance with POPIA requirements.

—

Last Updated: November 2025