CASA ENGINEERING (BRISBANE) PTY LTD
- We are committed to complying with the Privacy Act 1988 (Cth) (Privacy Act) in relation to all personal information we collect. Our commitment is demonstrated in this policy. The Privacy Act incorporates the Australian Privacy Principles (APPs). The APPs set out the way in which personal information must be treated.
- This policy applies to any person for whom we currently hold, or may in the future collect, personal information.
- This policy applies to personal information. In broad terms, 'personal information' is information or opinions relating to a particular individual who can be identified.
- Information is not personal information where the information cannot be linked to an identifiable individual.
2.how do we manage the personal information we collect?
2.1We manage the personal information we collect in numerous ways, such as by:
- implementing security systems for protecting personal information from misuse, interference and loss from unauthorised access, modification or disclosure;
- providing staff with training on privacy issues;
- appropriately supervising staff who regularly handle personal information;
- implementing mechanisms to ensure any agents or contractors who deal with us comply with the APPs;
- implementing procedures for identifying and reporting privacy breaches and for receiving and responding to complaints; and
- appointing a privacy officer within the business to monitor privacy compliance.
- We will take reasonable steps to destroy or permanently de-identify personal information if that information is no longer needed for the purposes for which we are authorised to use it.
- We predominately deal with other businesses in relation to the SMP Services. This, and due to the nature of the work means it is not generally possible for you to use a pseudonym or remain anonymous in most circumstances. However, if you wish to use a pseudonym or remain anonymous please contact us before your personal information is collected.
- We may be also subject to professional obligations which may affect how we deal with personal information.
3.What kinds of information do we collect and hold?
3.1We might collect and hold personal information about you, which might include:
- sensitive information (see below);
- contact information;
- financial information;
- date and place of birth;
- employment arrangements and history;
- tax file numbers;
- insurance information;
- credit information;
- banking details; and
- any other personal information required to perform the SMP Services.
3.2 ‘Sensitive information’ is a subset of personal information and includes personal information that may have serious ramifications for the individual concerned if used inappropriately.
3.3We may collect sensitive information if it is relevant in providing the SMP Services. The sensitive information we collect and hold about you may include any of the following:
- health information;
- criminal records;
- membership of professional or trade associations; and
- membership of trade unions.
3.4We will not collect sensitive information without the individual’s consent to whom the information relates unless permitted under the Privacy Act.
4.How and when do we collect personal information?
- Our usual approach to collecting personal information is to collect it directly from the business that has engaged us to provide the SMP Services.
- We may also collect personal information in other ways, which may include:
- from the individual directly;
- through marketing and business development events;
- from third party contractors, providers and suppliers; and
- from any other entity involved in a project or job in which we are involved..
5.how do we hold personal information?
5.1Our usual approach to holding personal information includes:
i.at our premises (securely); and
ii.off-site, by third party physical storage providers (securely);
i.on secure online servers; and
ii.by a third party data storage provider.
5.2We secure the personal information we hold in numerous ways, including:
- securing areas that contain personal information after hours;
- using secure servers to store personal information;
- using unique usernames, passwords and other protections on systems that can access personal information; and
- holding certain sensitive documents securely.
6.why do we collect, hold, use or disclose personal information?
- We take reasonable steps to use and disclose personal information for the primary purpose for which we collect it. The primary purpose for which information is collected varies, depending on the particular service being provided, but is generally to provide SMP Services to you. For example, this could include the following non-exhaustive list of services:
- structural, mechanical or piping;
- engineering, procurement, construction, management;
- civil and concrete construction;
- structural steel;
- general site and erections;
- plate and chute work;
- stainless steel fabrication and site fitting;
- tank building fabrication and erecting;
- crane hire;
- specialised rigging;
- labour hire; and
- equipment rental.
- In the case of potential employees, the primary purpose the information is collected is to assess the individual’s suitability for employment.
- Personal information may also be used or disclosed by us for secondary purposes which are within your reasonable expectations and which are related to the primary purpose of collection.
6.4For example, we may collect and use your personal information for marketing and business development purposes.
6.5We may disclose personal information to:
- government bodies or Commonwealth contractors;
- our advisors and consultants;
- other contractors; and
- any other entities if it is necessary to provide the SMP Services, or to assist our functions or activities (such as third party contractors engaged to perform internal staff training).
- Otherwise, we will only disclose personal information to third parties if permitted by the Privacy Act.
7.will we disclose personal information outside Australia?
- It is not practical to provide a list of the countries which we may disclose to as it depends on the particular projects we are involved with at a particular time.
- If you would like a list of the countries that we currently have projects in, please contact our Privacy Officer using the details in section 9 of this policy.
7.3Your personal information will not be disclosed to an overseas recipient unless we are satisfied that the receiving party provides commitments to privacy and confidentiality which are at least equal to the Australian Privacy Principles or the recipient is subject to privacy protection laws that offer at least the same level of protection as required under the Privacy Act in Australia.
8.how do we manage your credit information?
What kinds of credit information may we collect?
8.1In the course of providing SMP Services to you, we may collect and hold the following kinds of credit information:
- your identification information;
- information about any bankruptcy or debt agreements involving you; and
- any publicly available information about your credit worthiness; and
- any information about you where you may have fraudulently or otherwise committed a serious credit infringement.
8.2In some circumstances, we may collect credit information and personal information from credit reporting bodies (e.g. Veda). The kinds of information we collect may include any of those kinds of information outlined in sections 3.1 and 8.1 of this policy.
8.3We may also collect personal information which may affect your credit worthiness from other credit providers (e.g. banks or other entities involved in a project) that collect that information from credit reporting bodies. The kinds of personal information we collect may include any of those kinds of personal information outlined in sections 3.1 and 3.3 of this policy.
How and when do we collect credit information?
- In most cases, we will only collect credit information about you if you or your employer discloses it to us and it is relevant in providing the SMP Services.
- Other sources we may collect credit information from include:
- credit reporting bodies;
- other individuals and entities via referrals; and
- suppliers and creditors.
How do we store and hold the credit information?
- We store and hold credit information in the same manner as outlined in section 5 of this policy.
Why do we collect the credit information?
- Our usual purpose for collecting, holding, using and disclosing credit information about you is to enable us to provide the SMP Services.
8.8We may also collect the credit information to process payments and to assess eligibility for credit.
Overseas disclosure of the credit information
- We will not disclose your credit information to entities without an Australian link unless you expressly request us to.
How can I access my credit information, correct errors or make a complaint?
- You can access and correct your credit information, or complain about a breach of your privacy in the same manner as set out in section 9 of this policy.
9.how Do you make complaints and access and correct your personal information or credit information?
- It is important that the information we hold about you is up-to-date. You should contact us if your personal information changes.
Access to information and correcting personal information
- You may request access to the personal information held by us or ask us for your personal information to be corrected by using the contact details in this section.
- We will grant you access to your personal information as soon as possible, subject to the request circumstances.
- In keeping with our commitment to protect the privacy of personal information, we may not disclose personal information to you without proof of identity.
- We may deny access to personal information if:
- the request is unreasonable;
- providing access would have an unreasonable impact on the privacy of another person;
- providing access would pose a serious and imminent threat to the life or health of any person; or
- there are other legal grounds to deny the request.
- We may charge a fee for reasonable costs incurred in responding to an access request. The fee (if any) will be disclosed prior to it being levied.
- If the personal information that we hold is not accurate, complete and up-to-date, we will take reasonable steps to correct it so that it is accurate, complete and up-to-date, where it is appropriate to do so.
- If you wish to complain about an alleged privacy breach, they you must follow the following process:
- the complaint must be firstly made to us in writing, using the contact details in this section. We will have a reasonable time to respond to the complaint.
- in the unlikely event the privacy issue cannot be resolved, you may take your complaint to the Office of the Australian Information Commissioner.
Who to contact
- A person may make a complaint or request to access or correct personal information about them held by us. We will take reasonable steps to ensure the personal information we hold is accurate and complete. Such a request must be made in writing to the following address or contact officer:
Privacy Officer: Adam Layton (General Counsel)
Postal Address: PO Box 269, Carole Park QLD 4300
Telephone number: 07 3271 2300
Email address: firstname.lastname@example.org
10.Changes to the policy
- This policy is effective from March 2014. If you have any comments on the policy, please contact the privacy officer with the contact details in section 9 of this policy.