Last Updated 21 November 2019
ESA is committed to protecting the privacy of personal data. ESA safeguards your privacy by complying with its obligations in the Privacy Act 1988 (Cth) (Privacy Act) and its international obligations.
The Australian Privacy Principles in the Privacy Act regulate how organisations such as ESA may collect, use, disclose and store personal data and how individuals may access and correct such data.
Information on Australian privacy law can be found on the website of the Office of the Australian Information Commissioner.
Personal Data is anything that discloses your identity because it is unique to you. For example, your name, an identification number, location data or an online identifier. It also includes personal information as defined in subsection 6(1) of the Privacy Act:
information or an opinion about an identified individual, or an individual who is reasonably identifiable:
- whether the information or opinion is true or not; and
- whether the information or opinion is recorded in a material form or not.
The personal data that ESA may collect when you use the DT Hub is:
ESA will endeavour to collect only the minimum amount of personal data necessary to provide relevant DT Hub services to you.
ESA collects personal data about you directly from you or from your authorised representative. The ways in which ESA collects personal data from you or your authorised representative are when you:
The ways in which ESA collects data through the DT Hub are:
Log Information (browsing)
When you visit the DT Hub the ESA server makes a record of your visit and logs information such as your server address, your top level domain name (for example: .com; .gov; .au; .net; .edu; etc.), the time and date of your visit to the website, the pages and documents you have accessed or viewed, previous sites visited, browser type and language, and one or more cookies that may uniquely identify your browser.
Google Inc. uses this information for the purpose of evaluating your use of the DT Hub, compiling reports on website activity for ESA and providing other services relating to website activity and internet usage. Google Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google Inc's behalf. Google Inc. will not associate your IP address with any other data held by Google Inc.
ESA only collects personal data from the DT Hub where that information is necessary for the primary purposes of operating the DT Hub.
Personal data will:
ESA does not collect unsolicited personal data via the DT Hub.
If you contribute to the DT Hub and you give consent to ESA to publish your name on the DT Hub you should be aware that personal data published on the DT Hub is accessible by multiple users from all over the world, that it may be indexed by search engines and that it may be copied and used by any web user. This means that, once personal data is published on the DT Hub, ESA will have no control over its subsequent use and disclosure.
If ESA holds personal data that was collected for a particular purpose (primary purpose), ESA will not use or disclose it for another purpose (secondary purpose) unless:
ESA may use your personal data for the following purposes:
Where you have expressly given ESA your consent, we may process your personal data also for the following purposes:
With regard to email communication, ESA will only provide you with such information after you have opted in and provide you the opportunity to opt out anytime if you do not want to receive further communication from ESA.
ESA will not use your personal data for taking any automated decisions affecting you or creating profiles other than described above.
ESA endeavours to ensure that the personal data that it holds is accurate, up-to-date, complete and relevant. If you want to know what, if any, personal data ESA holds about you, or wish to correct any personal data ESA may hold about you, you may access this data by contacting ESA using the ESA contact information below.
ESA may allow access to, make your requested changes to or delete your personal data unless otherwise required or permitted by law. ESA will notify you of the basis of any denial of access to your personal data.
If you are listed on the DT Hub subscriber email lists, you can opt out at any time by clicking on the 'unsubscribe' link in the subscriber emails.
When personal data is no longer required, ESA takes reasonable steps to de-identify, securely destroy or delete such personal data.
Where it is not impractical or unlawful, you may interact with ESA without identifying yourself or using a pseudonym. However, if you do so, ESA may not be able to provide you with the most relevant information or provide you with access to a web offering or newsletter.
Whilst ESA offers the option to provide dietary information when you register for an event, you are not obliged to provide that personal data.
ESA understands the importance of data security. It takes reasonable steps to protect the personal data that it holds against misuse, interference, loss, unauthorised access, modification or disclosure by utilising up-to-date electronic and physical security controls that comply with relevant industry standards and guidelines.
If you do not wish to use the internet to transmit personal data you can mail or telephone ESA using the contact information provided below.
Please note that if you use a link to a non-ESA web page, a different privacy and security statement will apply.
All personal data collected through the DT Hub is stored in Australia and is not disclosed, accessed or transferred to overseas recipients except for personal data collected to provide you with access to webinars.
ESA engages two external providers to provide services to the DT Hub as follows:
Where your personal data is transferred abroad, it may be transferred to countries which do not provide the same level of protection as the laws of your home country (for example, the laws of Australia). ESA will remain responsible for the safe keeping of your personal data and will ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by relevant laws. You may contact ESA anytime using the contact details below if you would like further information on such safeguards.
ESA requires its sub-contractors who are outside Australia and to whom ESA transfers your personal data to ensure a similar level of data protection.
ESA has a records management program in place which requires that all records are managed in accordance with specified security and disposal steps.
Whenever ESA collects or processes your personal data, it will store it safely and only for as long as is necessary for the original purpose for which it is collected or as required by law.
At the end of the documented retention period, your data will either be deleted completely or de-identified.
ESA will do its best to address and resolve any issues you raise. If you are not satisfied with ESA’s response you may take your complaint to the Office of the Australian Information Commissioner.