site_policies/acer_privacy.txt

286 lines
13 KiB
Plaintext

SITE: acer_privacy
URL: https://www.acer.org/privacy
Privacy Policies and Legal Disclaimers
ACER and your personal information
This is our Privacy Policy which sets out under the Australian Privacy
Act 1988:
* What personal information The Australian Council for Educational
Research Ltd (collectively, ACER, we, our or us) collect about you;
* how we collect your personal information, how we hold it, how we
use it and who we disclose it to;
* what information we may collect from you when you use our website
or an ACER product or service; and
* how you may access and seek correction of your personal information
or complain about a breach of your privacy.
Where the General Data Protection Regulation 2016/679 (implemented
within the United Kingdom by its Data Protection Act 2018) (GDPR) is
applicable to any personal information collected by us the following
notice https://www.acer.org/gb/privacy-policy sets out our obligations
and your rights.
This Privacy Policy may be amended from time to time if our practices
change.
On our website, you may find links to other websites not operated by
us. This Privacy Policy does not apply to them - always check the
Privacy Policy of any other website you enter.
You can navigate separate sections of this Privacy Policy through the
links below.
1. What kinds of personal information do we collect and how?
2. What is our approach to collecting personal information about
children?
3. When do we collect your personal information?
4. Why do we collect the information and how do we use or disclose it?
5. Can you choose to remain anonymous?
6. How can you request not to receive direct marketing?
7. Who do we disclose your personal information to?
8. Do we disclose your information overseas?
9. How do we hold your personal information and keep it secure?
10. How can you seek access to, and correction of your information?
11. How can you seek further information or complain about a breach of
your privacy?
What kinds of personal information do we collect and how?
The personal information we collect depends on your relationship with
us - whether you are a client, a candidate or a prospective employee -
and the product or service we are delivering. It may include:
* your contact details, photograph and personal preferences (such as
name, address, email address, phone number and dietary
requirements);
* your website registration and login information;
* your payment details (such as credit card details);
* your employment history and qualifications;
* government-related identifiers and information (such as student
number, working with children details and police checks); and
* your testimonials, feedback and complaints.
Sometimes we may also collect sensitive information about you. This
may happen, for example, through surveys we conduct or when you sit
tests, and may include your race and religious beliefs and your health
information (such as whether you have any disability or medical
condition and require special testing accommodations). We will only
collect sensitive information from you or about you with your consent
unless otherwise required or authorised by law.
By supplying sensitive information about yourself or on behalf of your
child, you will be taken to have given your consent to our collection
of that information. When we obtain such information from a third
party (such as through a school or institution at which you or your
child studies), we will usually enlist that third party to obtain
consent from you if that is required.
What is our approach to collecting personal information about children?
We collect information about children who, for example, sit assessments
at schools to whom we provide our services, participate in our surveys
or participate in other research projects. Whether a child has the
capacity to make his or her own privacy decisions is assessed by us on
a case by case basis, having regard to factors such as their age and
circumstances. In general, a person over 15 years will have the
capacity to make his or her own privacy decisions.
For children who are under 15 years old, or who otherwise do not have
capacity to make these decisions for themselves, or where we cannot
make an assessment of their capacity, ACER will refer or deal with
requests for access, consent and notices in relation to personal
information to the parent and/or guardian or relevant school or
institution. We will treat consent given by a parent and/or guardian
as consent given on behalf of the child, and notices to the relevant
school or other institution or parent and/or guardian will act as
notice given to the child.
When do we collect your personal information?
We may collect your personal information when you contact us, purchase
or use our products or services (including when you sit a test or
participate in a survey or other research), register with us online,
participate in our online discussion boards or enter our competitions,
contribute to one of our social media pages (such as Twitter, LinkedIn,
Vimeo and Facebook), attend an ACER event, apply for a job with us,
provide services to us or make a donation through the ACER Foundation.
Given the nature of our products and services, we often collect
personal information about you from third parties, such as the school
or educational institution that you (or your child) attends. We may
also collect information through secure web based application systems
if you do certain assessments, and from other third parties where you
have agreed with them that your information may be disclosed.
Why do we collect the information and how do we use or disclose it?
We collect, hold, use and disclose your personal information:
* to deliver our educational research and learning products and
services (including our consultancy services and professional
development programs, such as testing, assessments and training);
* to publish educational material;
* to conduct our retail activities (including through our website);
* to operate and manage the ACER Foundation and ACER Cunningham
Library;
* to develop and enhance our products and services;
* to conduct research and plan and develop our product strategies;
* to provide and operate our competitions, events and promotions;
* to market and promote our products and services; and
* to comply with our legal obligations.
Can you choose to remain anonymous?
You may elect not to identify yourself or you may use a pseudonym in
your dealings with us, except where it is impracticable for us to deal
with you on this basis (for example, we will need to identify you in
order to provide most of our products and services). You can always
choose not to give us your information or remain anonymous, but if you
do we may not be able to provide you (or our client) with the products
and services that you (or they) have asked for.
How can you request not to receive direct marketing?
You may ask us at any time to stop sending you direct marketing
information or to stop being contacted by or on our behalf, in a
particular way or at all. You can do this by calling us on +61 3 9277
5555 or by contacting us via our website.
Who do we disclose your personal information to?
We may disclose your personal information (including, in certain
limited circumstances, your sensitive information):
* to schools, educational institutions, psychologists, HR
practitioners and other third parties who have contracted with us
for the provision of our products and services. For example, if
you are a candidate for an ACER scholarship test, we will supply
your test results to those schools to which you have applied for a
scholarship;
* to entities who assist us in providing and administering our
products and services and our events and promotions (including
hosting, data storage, payment systems, printing and scanning
providers and debt collectors);
* to companies that promote and market, or conduct research to help
us improve and target, our products and services;
* to social media sites on which we have a presence;
* where we are required to do so by law, or to government agencies,
or individuals appointed by government, responsible for
investigating and resolving disputes or complaints concerning our
products or services.
When you enter into a competition we are running or participate in a
sponsored event, we may seek, as a condition of entry, consent to pass
your information to a promoter or sponsor of the competition or event.
If we do this, we will notify you at the time of entering into the
competition or event with us.
Do we disclose your information overseas?
We may disclose your personal information:
* to our related bodies corporate located overseas (including in
India and the UK) to assist us in delivering our products and
services; and
* to overseas educational institutions (including schools and
universities) and other organisations or bodies (including
government agencies) who are our clients and to whom we need to
provide your personal information in order to deliver our products
and services.
How do we hold your personal information and keep it secure?
We hold your personal information in a combination of electronic and
hard copy files. We may store your personal information with one or
more third party data storage providers.
We may combine personal information we receive about you with other
information we hold about you. This includes information received from
third parties. Where reasonably practicable, we will de-identify
personal information we collect from studies we carry out as part of
our research activities.
We take all reasonable steps to ensure that the personal information we
hold is protected from misuse, interference and loss, and unauthorised
access, modification or disclosure by the use of various methods,
including password protection and secure storage. Where we store your
personal information with a third party data storage provider, we
require them to keep it secure and only use or disclose it for the
purpose for which it was provided.
Please contact us immediately if you become aware or have reason to
believe there has been any unauthorised use of your personal
information that we hold.
How can you seek access to, and correction of your information?
You may request access to your personal information by writing to us or
contacting us at any time at the details below. We will need to verify
your identity before we can give you access. We will promptly
acknowledge receipt, and we will endeavour to deal with and respond to
your request within a reasonable time (usually within two weeks).
In certain circumstances, we are permitted by law to refuse access to
your personal information (such as where providing access would have an
unreasonable impact upon the privacy of other individuals, or would
reveal our test scoring processes or other commercially sensitive
information).
In such cases, we will give you a written explanation for our decision
(including, where applicable, an alternative means of access to the
information, such as supervised inspection), and how you can complain
if you are not satisfied with our decision.
You will not be charged for making a request for your personal
information. However, we may charge a fee to provide your information
to cover administrative costs (including for supervised inspection).
We will inform you of any fee at the time your request is made.
If you think that any personal information we hold about you is
inaccurate, incomplete, out-of-date or irrelevant, you may ask us to
correct it. We will take reasonable steps to correct it unless we
disagree with your reasons. If we refuse to correct your personal
information we will give you a written explanation why.
How can you seek further information or complain about a breach of your
privacy?
If you have any questions about this Privacy Policy or consider that we
have breached your privacy, you can contact us at:
The Manager Legal and Corporate Services
The Australian Council for Educational Research Limited
19 Prospect Hill Road
Camberwell Victoria 3124
Australia
Email: david.noga@acer.edu.au
Telephone: +61 3 9277 5555
We will investigate any complaint, and notify you of our decision in
relation to the complaint, as soon as practicable after it is received.
If we are unable to satisfactorily resolve your concerns about our
handling of your personal information, you can contact the Office of
the Australian Information Commissioner:
GPO Box 5218
Sydney NSW 2001
Tel: 1300 363 992
www.oaic.gov.au
Contact us