POPIA
Privacy notice
What we collect, why we collect it, and your rights.
This notice explains what personal information the Mirunzini Film Festival and Mirunzini Theatre Fest collect when you enter a film or apply to perform, why, who sees it and what your rights are under the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
Both festivals are run by Ngoma Productions, 186 Smit Street, Braamfontein, Johannesburg (the responsible party). Contact our Information Officer at info@ngomaproductions.co.za.
2. What we collect and why
| Information | Why we need it |
|---|---|
| Email address | To sign you in with a one-time code and to contact you about your entries. |
| Name, phone number, province and city | To identify you, reach you quickly, and report where entries come from (as totals only). |
| SA ID or passport number and date of birth | To confirm you are eligible, keep it to one account per person, and pay any prizes. Judges never see it. |
| Parent or guardian details (under 18 only) | POPIA requires a competent person's consent before we process a child's information. |
| Film details, credits, screener links, passwords and files | To assess your film and, if selected, to screen it. |
| Performance details, group members, technical needs and sample links | To assess your application and, if selected, to programme and stage your work. |
| Technical data: IP address, browser, and the time of each action | To keep the portal secure and to detect fraud, such as duplicate or automated entries. |
We do not ask for race, religion, health or any other special personal information. Company, website and bio are optional. If you do not give the required details, we cannot accept your entry.
3. Our lawful basis
We process your information to run the competition you enter (POPIA section 11(1)(b)), to protect the festival and entrants from fraud (section 11(1)(f)), and with your consent where we ask for it, such as news about future festivals.
4. Who sees it
- Festival staff who manage entries.
- Judges see your film or performance application, its details and your name. They do not see your ID number or contact details.
- Service providers who host and deliver the portal for us: Cloudflare (hosting, database, file storage and bot protection) and our email providers (Resend and Brevo). They process your information only on our instructions.
- Funders such as the NFVF, the National Arts Council and the Department of Sport, Arts and Culture receive totals only, such as entries per province, unless an agreement requires more and we tell you.
5. Information stored outside South Africa
Our service providers store and process information on servers that may be outside South Africa. They are bound by agreements that protect personal information to a standard similar to POPIA (section 72), and you consent to this transfer when you enter.
6. How long we keep it
For entries that are not selected, we delete uploaded files and personal details within six months after the festival. For selected entries, we keep what we need for the festival archive and for our funders' reporting, and nothing more.
7. How we protect it
The portal uses encrypted connections, one-time sign-in codes instead of passwords, role-based access, and a log of every change. ID numbers are shown only to the festival office. If we ever suspect a security compromise, we will tell you and the Information Regulator as soon as reasonably possible.
8. Your rights
You may ask to see the information we hold about you, correct it, delete it, or object to how we use it. Email info@ngomaproductions.co.za. You can edit most of your details yourself in the portal. If you are unhappy with our response, you may complain to the Information Regulator (inforegulator.org.za).
9. Children
If you are under 18, a parent or legal guardian must give their details and consent before your entry is complete. We never publish a child's personal information without that consent.
10. News and marketing
We only send news about future festivals if you tick the box asking for it. Every message has a way to stop receiving them.
11. Cookies
The portal uses one essential cookie that keeps you signed in. We do not use advertising or tracking cookies.