PRIVACY POLICY: 2026 MPTA AIR SHOW

Physical Address: Nelspruit Airport (FANS), Mpumalanga, South Africa.

1. PREAMBLE & SCOPE
This Privacy Policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by the MPTA and its authorised Operators. This policy applies to all visitors to the 2026 MPTA Air Show, users of our website, and participants in the “Win a Hot Air Balloon Ride” competition.

2. DEFINITIONS (SECTION 1 OF POPIA)
“Data Subject”: The person to whom the personal information relates (You, the attendee).

“Personal Information”: Information relating to an identifiable, living, natural person, including but not limited to, identifiers like name, ID number, location data, or online identifiers.

“Processing”: Any operation concerning personal information, including collection, storage, use, and destruction.

“Responsible Party”: The MPTA, which determines the purpose and means for processing.

“Operator”: A person/entity who processes personal information for a responsible party in terms of a contract (e.g., Quicket, Google, Meta).

3. THE 8 CONDITIONS FOR LAWFUL PROCESSING
3.1. Accountability
The MPTA ensures that all processing of personal information is done in compliance with POPIA. We have appointed an Information Officer to oversee compliance.

3.2. Processing Limitation
We process data only:

With your express Consent.

To perform a Contract (e.g., delivering your ticket).

To comply with a Legal Obligation (e.g., SACAA safety manifests).

To protect your Legitimate Interest (e.g., emergency medical response).

3.3. Purpose Specification
We collect and process your information for these specific, explicitly defined purposes:

Ticketing & Access: To verify entry at Nelspruit Airport.

Aviation Safety: To calculate aircraft weight and balance for prize winners (Section 4 below).

Digital Marketing: To provide relevant advertising via Google and Social Media (Section 5 below).

Security: To monitor airport premises for the prevention of crime and aviation interference.

3.4. Further Processing Limitation
Data collected for ticketing will not be repurposed for unrelated third-party marketing without a secondary, specific opt-in.

3.5. Information Quality
We rely on you to provide accurate information via Quicket. You may request an update to your records at any time if your contact details change.

3.6. Openness (Section 18 Notification)
We notify you that we are collecting your data at the point of ticket purchase and via signage at the Nelspruit Airport entrance.

3.7. Security Safeguards
We employ rigorous technical and organisational measures:

Encryption: Data in transit between our site, Quicket, and marketing partners is encrypted (SSL/TLS).

Access Control: Only authorised aviation safety officers have access to medical/weight data.

Operator Contracts: Written agreements with Quicket, Meta, and Google ensure they treat your data with the same level of protection required by POPIA.

3.8. Data Subject Participation
You have the right to request access to your data, object to its processing, or request its destruction (where legal retention periods allow).

4. SPECIAL PERSONAL INFORMATION (AVIATION SAFETY)
For the Hot Air Balloon Competition, we process “Special Personal Information” as defined in Section 26 of POPIA:

Body Weight: Required for the Pilot-in-Command to calculate the aircraft’s “Weight and Balance” manifest as per SACAA regulations.

Health Status: Required to assess fitness for flight (e.g., heart conditions, pregnancy, or physical mobility).

Retention: This sensitive data is stored separately from marketing databases and is permanently deleted 30 days after the event concludes and all safety audits are finalised.

5. DIGITAL MARKETING & CROSS-BORDER TRANSFERS
[META & GOOGLE ADVERTISING]
5.1. Tracking Pixels: Our website uses the Meta Pixel and Google Tag. These tools track your behaviour on our site to show you relevant ads (Remarketing).
5.2. Hashed Data Sharing: We may share “hashed” identifiers (anonymised versions of your email or phone number) with Meta and Google to create “Custom Audiences” or “Lookalike Audiences.”
5.3. Cross-Border Transfer (Section 72): You acknowledge that by using these services, your data is transferred to servers in the USA and Ireland. These countries may have different data protection laws; however, our Operators (Meta/Google) are bound by Standard Contractual Clauses (SCCs) to provide POPIA-equivalent protection.

6. MEDIA & PUBLICITY RELEASE
The 2026 MPTA Air Show is a public event of significant interest.

Crowd Photography: By entering the Nelspruit Airport, you acknowledge that you may be captured in wide-angle photography or video for promotional use.

Commercial Use: The Lowveld Air Show retains all rights to media captured at the event. If you are the primary subject of a close-up photograph intended for commercial use, the MPTA will seek specific consent where reasonably possible.

7. DATA RETENTION
Financial Records: 7 years (as required by the Companies Act and SARS).

Marketing Data: Until you “Unsubscribe.”

Safety Manifests: 30–90 days post-event (SACAA audit window).

8. CONTACT THE INFORMATION OFFICER
For any POPIA-related queries, access requests, or to lodge an objection:

Information Officer

Email: webmaster@lowveldairshow.co.za

Physical Address: MPTA Head Office / Nelspruit Airport (FANS).

Last updated: 11 April 2026