PAIA manual

1List of acronyms and abbreviations

2Purpose of PAIA manual

This PAIA Manual is useful for the public to:

• 2.1check the categories of records held by a body which are available without a person having to submit a formal PAIA request;
• 2.2have a sufficient understanding of how to make a request for access to a record of the body, by providing a description of the subjects on which the body holds records and the categories of records held on each subject;
• 2.3know the description of the records of the body which are available in accordance with any other legislation;
• 2.4access all the relevant contact details of the Information Officer and Deputy Information Officer who will assist the public with the records they intend to access;
• 2.5know the description of the guide on how to use PAIA, as updated by the Regulator and how to obtain access to it;
• 2.6know if the body will process personal information, the purpose of processing of personal information and the description of the categories of data subjects and of the information or categories of information relating thereto;
• 2.7know the description of the categories of data subjects and of the information or categories of information relating thereto;
• 2.8know the recipients or categories of recipients to whom the personal information may be supplied;
• 2.9know if the body has planned to transfer or process personal information outside the Republic of South Africa and the recipients or categories of recipients to whom the personal information may be supplied; and
• 2.10know whether the body has appropriate security measures to ensure the confidentiality, integrity and availability of the personal information which is to be processed.

3Key contact details for access to information

3.1 Information Officer / Chief Executive Officer

Name

Noah Kirby

Title

Chief Executive Officer and Information Officer

Tel

087 822 1092

Email

privacy@gigabrain.africa

3.2 Deputy Information Officer

No Deputy Information Officer has been designated in terms of section 17(1) of PAIA and section 56 of POPIA as at the date of this manual. Gigabrain is reviewing the appointment of one or more Deputy Information Officers; this section will be updated once a designation is made.

3.3 Access to information general contacts

Email

privacy@gigabrain.africa

3.4 National / head office

Postal address

179 Buitengracht Street, Cape Town, Western Cape, 7925

Physical address

179 Buitengracht Street, Cape Town, Western Cape, 7925

Telephone

087 822 1092

Email

privacy@gigabrain.africa

Website

https://gigabrain.africa/

Registration number

2024/659657/07

VAT registration number

4900321177

4Guide on how to use PAIA and how to obtain access to the guide

• 4.1The Regulator has, in terms of section 10(1) of PAIA, as amended, updated and made available the revised Guide on how to use PAIA (“Guide”), in an easily comprehensible form and manner, as may reasonably be required by a person who wishes to exercise any right contemplated in PAIA and POPIA.
• 4.2The Guide is available in each of the official languages.
• 4.3The aforesaid Guide contains the description of—
• 4.3.1the objects of PAIA and POPIA;
• 4.3.2the postal and street address, phone and fax number and, if available, electronic mail address of every Deputy Information Officer of every public and private body designated in terms of section 17(1) of PAIA and section 56 of POPIA;
• 4.3.3the manner and form of a request for access to a record of a private body contemplated in section 50;
• 4.3.4the assistance available from the Information Officer of a public body in terms of PAIA and POPIA;
• 4.3.5the assistance available from the Regulator in terms of PAIA and POPIA;
• 4.3.6all remedies in law available regarding an act or failure to act in respect of a right or duty conferred or imposed by PAIA and POPIA, including the manner of lodging an internal appeal, a complaint to the Regulator, and an application with a court against a decision by the head of a private body;
• 4.3.7the provisions of sections 14 and 51 requiring a public body and private body, respectively, to compile a manual, and how to obtain access to a manual;
• 4.3.8the provisions of sections 15 and 52 providing for the voluntary disclosure of categories of records by a public body and private body, respectively;
• 4.3.9the notices issued in terms of sections 22 and 54 regarding fees to be paid in relation to requests for access; and
• 4.3.10the regulations made in terms of section 92.
• 4.4Members of the public can inspect or make copies of the Guide from the offices of the public and private bodies, including the office of the Regulator, during normal working hours.
• 4.5The Guide can also be obtained—
• 4.5.1upon request to the Information Officer;
• 4.5.2from the website of the Regulator (https://www.justice.gov.za/inforeg/).

5Categories of records available without a person having to request access

6Subjects on which Gigabrain SA holds records, and the categories of records held

7Processing of personal information

7.1 Purpose of processing personal information

Gigabrain processes personal information to provide GPU compute infrastructure-as-a-service to its clients, to onboard and verify clients and vendors (including KYC/AML and UBO verification), to manage vendor and employee relationships, and to comply with applicable legal, tax, and regulatory obligations. Gigabrain does not access, monitor, or process the content or workloads that clients run on the infrastructure it provides.

7.2 Categories of data subjects and of the information relating thereto

7.3 Recipients or categories of recipients to whom personal information may be supplied

7.4 Planned transborder flows of personal information

Gigabrain uses Google Workspace for identity management, email, and document/data storage (e.g. Google Docs and Sheets). Where personal information is captured or stored within Google Workspace, it may be stored in Europe.

7.5 General description of information security measures to ensure the confidentiality, integrity and availability of the information

Gigabrain is implementing information security measures aligned with internationally recognised standards, including the ISO/IEC 27001 framework, as part of an active certification programme. These measures include, among others, data encryption, access control and multi-factor authentication, vendor and third-party risk management, and incident response procedures. Gigabrain will continue to strengthen and update these measures as its information security management system matures.

8Availability of the manual

A copy of this manual is available:

• 8.1.1on https://gigabrain.africa/;
• 8.1.2to any person upon request and upon the payment of a reasonable prescribed fee; and
• 8.1.3to the Information Regulator upon request.
• 8.2A fee for a copy of the manual, as contemplated in Annexure B of the Regulations, shall be payable per each A4-size photocopy made, currently R1.50 – R2.00 per A4 page (in line with the fees prescribed under the PAIA Regulations).

9Updating of the manual

The head of Gigabrain SA (RF) (Pty) Ltd will on a regular basis update this manual.

Issued by Noah Kirby, Chief Executive Officer and Information Officer, Gigabrain SA (RF) (Pty) Ltd.