8. ADDITIONAL RIGHTS, OBLIGATIONS
AND UNDERTAKINGS OF THE PARTICIPANT
The Participant, in addition to its other rights, obligations and undertakings stipulated in this
Agreement: 8.1 Agrees and undertakes to adhere to and punctually comply with the TOMSA Code of
Conduct; 8.2 Acknowledges that, in collecting the Tourism Levies, it will act as a collection agent for
TOMSA and that it will not have any right or entitlement to the Tourism Levies.
9. PROTECTION
9.1 TOMSA acknowledges that in concluding this agreement with the Participant,
TOMSA may be exposed to Personal Data as defined in the Protection of Personal
Information Act, supplied to TOMSA by the Participant or stored, collected, collated,
accessed or processed on behalf of the Participant. 9.2 The Parties specifically record that all Personal Data provided by the Participant
to the TOMSA, or to which TOMSA may be exposed, shall constitute confidential
information and where applicable, intellectual property belonging to Participant. 9.3 TOMSA hereby warrants in favour of the Participant that is shall at all times
strictly comply with all applicable data privacy legislation and with all the provisions and
requirements of any Participant data protection policies and procedures which may be in
force from time to time. 9.4 TOMSA hereby warrants and undertakes that it shall not, at any time, copy, compile,
collect, collate, process, mine, store, transfer, alter, delete, interfere with or in any other
manner use the Personal Data for any purpose other than with the express prior written
consent of the Participant, and to the extent necessary for purposes of executing this
Agreement. 9.5 TOMSA further warrants that it shall ensure that all its systems and operations which it
uses to provide the services, including all systems on which Personal Data is copied,
compiled, collated, processed, transmitted, stored, collected, mined, altered or deleted
or otherwise used as part of providing the services, shall at all times be of a minimum
standard required by law and be of a standard no less than the standards which are in
compliance with the international best practice for the protection, control and use of
Personal Data.