- GENERAL
The aim of this Privacy Policy (‘Policy’) is to explain how and why Savii Solutions collects, uses, discloses and enables access and correction of Personal Information provided to Savii Solutions in Australia. This Policy also explains the kinds of Personal Information that Savii Solutions collects and holds.
In the course of its business activities Savii Solutions will collect, hold, use and disclose Personal Information in accordance with this policy, its obligations under the Privacy Act 1988 (Cth) (‘Privacy Act’) and the Australian Privacy Principles established under the Privacy Act.
This Policy applies to all Savii Solutions offices and Projects in Australia. Some Savii Solutions Projects may have additional or supplementary privacy policies that apply in respect of that Project only.
In the context of this Policy ‘Savii Solutions’ refers to Savii Solutions Project Services Pty Ltd and its Related Bodies Corporate operating in Australia.
This Policy does not include how Savii Solutions collects, uses, stores and discloses employee data. Refer to the Privacy of Personal Data Policy for how Savii Solutions manages employee data.
- DEFINITIONS
- ‘Agent’ – is any third party that collects or uses Personal Information under the instructions of, and for, Savii Solutions or to which Savii Solutions discloses Personal Information for use on Savii Solutions’ behalf.
- ‘Savii Solutions’ – is defined in Section A.
- ‘Savii Solutions Subcontract Workers’ – are current and former employees of Savii Solutions subcontractors.
- ‘Personal Information’ – has the meaning given to it in the Privacy Act. In general terms, it is any information that can be used to personally identify you. This may include your name, address, telephone number, email address and profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered Personal Information.
- ‘Privacy Act’ – is defined in Section A.
- ‘Privacy Officer’ – defined in Section C.
- ‘Project’ – means any project or defined business activity being undertaken by Savii Solutions.
- ‘Related Bodies Corporate’ – of an entity means another entity which is
- related to the first entity within the meaning of Section 50 of the Corporations Act 2001 (Cth of Australia)
- in any consolidated entity (as defined in Section 9 of the Corporations Act) which contains the first entity; or
- an express trust of which an entity described in paragraph a or b above is a trustee.
- ‘Sensitive Information’ – means personal data (including information or an opinion) about an individual’s racial or ethnic origin, political opinions and memberships, religious or philosophical beliefs or associations, trade union membership, criminal record, health information or the health services they have received, details of their sexual orientation, or their biometric or genetic information.
- GUIDANCE, CONTACT DETAILS AND COMPLAINTS HANDLING
For any questions concerns or a complaint regarding a possible breach of privacy, please contact Savii Solutions’ Privacy Officer using the details set out below.
Savii Solutions’ Privacy Officer can be contacted at:
Email: hello@saviisolutions.com.au
Savii Solutions will treat the complaint or grievance confidentially. It will investigate the complaint and aim to ensure that a Savii Solutions representative contacts the individual and that their complaint is resolved within a reasonable time (and in any event within the time required by the Privacy Act, if applicable).
- PRIVACY POLICY
- What is Savii Solutions’ general approach to privacy compliance?
Savii Solutions respects the privacy rights and interests of any party whose Personal Information it collects, uses, discloses, stores or otherwise processes. Savii Solutions adheres to the following general principles when collecting, holding, using and disclosing Personal Information:
- Personal Information will be processed in a transparent and open manner, in accordance with applicable laws and this Policy.
- Personal Information will be collected for legitimate purposes.
- Unsolicited Personal Information that could not have otherwise been collected directly from the individual must be destroyed or de-identified.
- Before Savii Solutions collects Personal Information, notification will be provided about: the purposes for which Personal Information is collected and used; how the individual can access, change or make complaints about the collection, holding, use or disclosure of their Personal Information; the types of third parties to which Savii Solutions discloses their Personal Information; the means Savii Solutions offers for limiting the use and disclosure of their Personal Information; and the security measures that Savii Solutions adopts to safeguard their Personal Information; and details of possible disclosure to overseas recipients.
- Reasonable steps will be taken to maintain Personal Information accurately and the individual will be given the opportunity to request correction to Personal Information.
- Savii Solutions will offer individuals the opportunity to ask where Savii Solutions is collecting Personal Information from.
- Savii Solutions will notify individuals if their Personal Information will be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual.
- Personal Information will be relevant to and not excessive for, the purposes for which it is collected and used.
- Savii Solutions will notify individuals if their Personal Information is to be disclosed to overseas recipients and the likely countries of disclosure where practical.
- Savii Solutions will obtain assurances from its Agents that they will safeguard personal information consistent with this policy. Where Savii Solutions has knowledge that an Agent is using or disclosing Personal Information in a manner contrary to this policy, Savii Solutions will take reasonable steps to prevent or stop the use or disclosure.
- Reasonable precautions will be taken to prevent: unauthorized or accidental destruction, alteration or disclosure of; accidental loss of; unauthorized access to; misuse of; unlawful management of; or damage to, Personal Information.
- What Personal Information does Savii Solutions collect and hold?
In the course of conducting its business activities, Savii Solutions may collect the following types of Personal Information:
- name;
- mailing or street address;
- email address;
- telephone number;
- facsimile number;
- age or birth date;
- profession, occupation or job title; and
- any additional information relating to that individual that is provided to Savii Solutions, whether through Savii Solutions’ representatives or otherwise
- How does Savii Solutions collect Personal Information?
Savii Solutions collects Personal Information from individuals in various ways, including:
- through individuals’ access and use of Savii Solutions’ website;
- during conversations, either verbal or through e-mail communication, between individuals and Savii Solutions’ representatives;
- from the individual whose Personal Information is being collected (such as when that person applies for a job or other role with Savii Solutions);
- through recordings which may enable identification of individuals (such as CCTV footage, photographs, audio or other images);
- from the individual’s employer, if that individual is not a Savii Solutions employee; and
- when Savii Solutions otherwise interacts with the individual in the course of its business activities.
In some circumstances, Savii Solutions may collect Sensitive Information from the individual, such as where health information is collected if the individual is asked to submit to a drugs and alcohol test. Sensitive Information will only be collected with the consent of the individual.
Savii Solutions may also collect Personal Information about individuals from third parties including:
- that individual’s current or former employer;
- from service providers, including health history, credit history or employment information; or
- from regulatory entities such as law enforcement agencies and other government entities.
- What happens if Savii Solutions can’t collect Personal Information?
If individuals do not provide Savii Solutions with the Personal Information described above, some or all of the following may happen:
- Savii Solutions may not be able to answer the individual’s query or provide any documents or other materials requested;
- Savii Solutions may not be able to offer the individual a job or other form of engagement; or
- Savii Solutions may not be able to perform its other business functions relating to the individual, either to the same standard or at all.
- What purposes does Savii Solutions collect, hold, use and disclose Personal Information?
Savii Solutions collects Personal Information about individuals so that Savii Solutions can perform its business activities and functions and answer any enquiries made by individuals. Savii Solutions will collect, hold, use and disclose Personal Information for the following purposes:
- to answer enquiries and provide information about existing and new Projects that Savii Solutions may be undertaking;
- to conduct business processing functions including providing Personal Information to Savii Solutions’ Related Bodies Corporate, contractors, service providers or other third parties;
- for the administrative, planning, quality control and research purposes of Savii Solutions and its Related Bodies Corporate, contractors or service providers;
- to provide updated Personal Information to Savii Solutions’ Related Bodies Corporate, contractors or service providers;
- to update Savii Solutions’ records and keep individuals’ contact details up to date;
- for security management;
- for health and safety management;
- for subcontract management;
- for tracking the engagement of Savii Solutions Subcontract Workers and third parties;
- for communication with community members;
- for internal technical and operational support;
- to process and respond to any complaint made by individuals;
- managing human resources;
- to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or to co-operate with any governmental authority; and
- where required to protect its legal rights (e.g., to defend litigation or anticipated litigation)
- Who does Savii Solutions disclose and transfer Personal Information to?
- What third parties does Savii Solutions disclose Personal Information to?
Savii Solutions may disclose the Personal Information of individuals, including for the purposes set out above:
- to other Related Bodies Corporate of Savii Solutions for purposes connected with Savii Solutions’ business activities;
- for the legal and other reasons described below;
- to customers and Agents as described below;
- to Savii Solutions employees and Savii Solutions Subcontract Workers, for purposes connected with Savii Solutions’ business activities;
- to Savii Solutions’ other contractors or service providers for the purposes of its business activities (including without limitation to web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers, electronic network administrators, and professional advisors such as accountants, solicitors, business advisors and consultants);
- to suppliers and other third parties with whom Savii Solutions has a commercial relationship, but only for the purpose of Savii Solutions’ business and related purposes; and
- to any other organization for any authorized purpose with the express consent of the individual whose Personal Information is collected.
- What Personal Information Transfers Outside of Savii Solutions May Be Made? Savii Solutions may transfer Personal Information outside of Savii Solutions:
- where required as a matter of law (e.g., to tax authorities);
- where required to protect its legal rights (e.g., to defend litigation or anticipated litigation);
- where required in an emergency where the health or security of a Project Personnel is endangered (e.g., an accident at work); or
- where required for business purposes to Savii Solutions’ Related Bodies Corporate, third party suppliers and service providers outside of Australia.
- Does Savii Solutions disclose Personal Information to anyone outside Australia?
Savii Solutions may disclose the Personal Information of individuals to its Related Bodies Corporate and third party suppliers and service providers located overseas for some of the purposes listed above.
Savii Solutions takes reasonable steps to ensure that the overseas recipients of Personal Information do not breach the privacy obligations relating to the management of the Personal Information of individuals.
- SAVII SOLUTIONS’ COMPLIANCE WITH OTHER PRIVACY OBLIGATIONS
- Security and Confidentiality
Savii Solutions is committed to taking appropriate technical, physical and organizational measures to protect Personal Information against: unauthorized or accidental destruction, alteration or disclosure; accidental loss; unauthorized access; misuse; unlawful management; or damage.
These measures include equipment, application and information security, access security and training of Savii Solutions employees, who are required to collect, hold use and disclose Personal Information.
- Access and Correction Rights
- What Are Individuals’ Rights to Access Their Personal Information?
Any individual may inquire as to the nature of his/her Personal Information held by Savii Solutions. Savii Solutions will endeavour to respond to an inquiry without excessive delay and within the time limits prescribed by the Privacy Act (if any) or otherwise within a reasonable time period.
An individual wishing to access a copy of his/her Personal Information held by Savii Solutions should contact the Privacy Officer. Where Savii Solutions holds information that an individual is entitled to access, Savii Solutions will try to provide the individual with suitable means of accessing it (for example, by mailing or emailing it to them).
In responding to a request for access to Personal Information, Savii Solutions may request for the requesting individual:
- to provide Savii Solutions with sufficient information to allow it to confirm their identity;
- in order to locate responsive information, to identify his/her concerns which led to or motivated the request; and
- to identify which Savii Solutions employee interacted with the individual and the nature of the Personal Information requested
- What Are Individuals’ Rights to Correct Their Personal Information?
If an individual believes the Personal Information that Savii Solutions is holding about them is incorrect, incomplete or inaccurate, then the individual may request that Savii Solutions correct this information. An individual wishing to correct his/her Personal Information held by Savii Solutions should contact the Privacy Officer.
Savii Solutions will consider if the information requires amendment. If Savii Solutions does not agree that there are grounds for amendment, then the individual may request that Savii Solutions adds a note to the Personal Information stating that the individual disputes the accuracy of their Personal Information.