GENERAL
The aim of this Privacy Policy (‘Policy’) is to explain how and why SAVII SOURCING collects, uses, discloses and enables access and correction of Personal Information provided to SAVII SOURCING in PNG. This Policy also explains the kinds of Personal Information that SAVII SOURCING collects and holds.
In the course of its business activities SAVII SOURCING will collect, hold, use and disclose Personal Information in accordance with this policy, its obligations under the Privacy Act 1988 (Cth) (‘Privacy Act’) and the PNGan Privacy Principles established under the Privacy Act.
This Policy applies to all SAVII SOURCING offices and Projects in. Some SAVII SOURCING Projects may have additional or supplementary privacy policies that apply in respect of that Project only.
In the context of this Policy ‘SAVII SOURCING’ refers to SAVII SOURCING Pty Ltd and its Related Bodies Corporate operating in PNG.
This Policy does not include how SAVII SOURCING collects, uses, stores and discloses employee data. Refer to the Privacy of Personal Data Policy for how SAVII SOURCING manages employee data.
DEFINITIONS
1. ‘Agent’ – is any third party that collects or uses Personal Information under the instructions of, and for, SAVII SOURCING or to which SAVII SOURCING discloses Personal Information for use on SAVII SOURCING’ behalf.
2. ‘SAVII SOURCING’ – is defined in Section A.
3. ‘SAVII SOURCING Subcontract Workers’ – are current and former employees of SAVII SOURCING subcontractors.
4. ‘Personal Information’ – has the meaning given to it in the Privacy Act. In general terms, it is any information that can be used to personally identify you. This may include your name, address, telephone number, email address and profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered Personal Information.
5. ‘Privacy Act’ – is defined in Section A.
6. ‘Privacy Officer’ – defined in Section C.
7. ‘Project’ – means any project or defined business activity being undertaken by SAVII SOURCING.
8. ‘Related Bodies Corporate’ – of an entity means another entity which is
1. related to the first entity within the meaning of Section 50 of the Corporations Act 2001 (Cth of Australia)
2. in any consolidated entity (as defined in Section 9 of the Corporations Act) which contains the first entity; or
3. an express trust of which an entity described in paragraph a or b above is a trustee.
9. ‘Sensitive Information’ – means personal data (including information or an opinion) about an individual’s racial or ethnic origin, political opinions and memberships, religious or philosophical beliefs or associations, trade union membership, criminal record, health information or the health services they have received, details of their sexual orientation, or their biometric or genetic information.
GUIDANCE, CONTACT DETAILS AND COMPLAINTS HANDLING
For any questions concerns or a complaint regarding a possible breach of privacy, please contact SAVII SOURCING’s Privacy Officer using the details set out below.
SAVII SOURCING’s Privacy Officer can be contacted at:
Email: hello@saviisourcing.com
SAVII SOURCING will treat the complaint or grievance confidentially. It will investigate the complaint and aim to ensure that a SAVII SOURCING representative contacts the individual and that their complaint is resolved within a reasonable time (and in any event within the time required by the Privacy Act, if applicable).
PRIVACY POLICY
1. What is SAVII SOURCING’s general approach to privacy compliance?
SAVII SOURCING respects the privacy rights and interests of any party whose Personal Information it collects, uses, discloses, stores or otherwise processes. SAVII SOURCING adheres to the following general principles when collecting, holding, using and disclosing Personal Information:
• Personal Information will be processed in a transparent and open manner, in accordance with applicable laws and this Policy.
• Personal Information will be collected for legitimate purposes.
• Unsolicited Personal Information that could not have otherwise been collected directly from the individual must be destroyed or de-identified.
• Before SAVII SOURCING collects Personal Information, notification will be provided about: the purposes for which Personal Information is collected and used; how the individual can access, change or make complaints about the collection, holding, use or disclosure of their Personal Information; the types of third parties to which SAVII SOURCING discloses their Personal Information; the means SAVII SOURCING offers for limiting the use and disclosure of their Personal Information; and the security measures that SAVII SOURCING adopts to safeguard their Personal Information; and details of possible disclosure to overseas recipients.
• Reasonable steps will be taken to maintain Personal Information accurately and the individual will be given the opportunity to request correction to Personal Information.
• SAVII SOURCING will offer individuals the opportunity to ask where SAVII SOURCING is collecting Personal Information from.
• SAVII SOURCING will notify individuals if their Personal Information will be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual.
• Personal Information will be relevant to and not excessive for, the purposes for which it is collected and used.
• SAVII SOURCING will notify individuals if their Personal Information is to be disclosed to overseas recipients and the likely countries of disclosure where practical.
• SAVII SOURCING will obtain assurances from its Agents that they will safeguard personal information consistent with this policy. Where SAVII SOURCING has knowledge that an Agent is using or disclosing Personal Information in a manner contrary to this policy, SAVII SOURCING will take reasonable steps to prevent or stop the use or disclosure.
• Reasonable precautions will be taken to prevent: unauthorized or accidental destruction, alteration or disclosure of; accidental loss of; unauthorized access to; misuse of; unlawful management of; or damage to, Personal Information.
1. What Personal Information does SAVII SOURCING collect and hold?
In the course of conducting its business activities, SAVII SOURCING may collect the following types of Personal Information:
• name;
• mailing or street address;
• email address;
• telephone number;
• facsimile number;
• age or birth date;
• profession, occupation or job title; and
• any additional information relating to that individual that is provided to SAVII SOURCING, whether through SAVII SOURCING’ representatives or otherwise
2. How does SAVII SOURCING collect Personal Information?
SAVII SOURCING collects Personal Information from individuals in various ways, including:
• through individuals’ access and use of SAVII SOURCING’ website;
• during conversations, either verbal or through e-mail communication, between individuals and SAVII SOURCING’ representatives;
• from the individual whose Personal Information is being collected (such as when that person applies for a job or other role with SAVII SOURCING);
• through recordings which may enable identification of individuals (such as CCTV footage, photographs, audio or other images);
• from the individual’s employer, if that individual is not a SAVII SOURCING employee; and
• when SAVII SOURCING otherwise interacts with the individual in the course of its business activities.
In some circumstances, SAVII SOURCING may collect Sensitive Information from the individual, such as where health information is collected if the individual is asked to submit to a drugs and alcohol test. Sensitive Information will only be collected with the consent of the individual.
SAVII SOURCING may also collect Personal Information about individuals from third parties including:
• that individual’s current or former employer;
• from service providers, including health history, credit history or employment information; or
• from regulatory entities such as law enforcement agencies and other government entities.
3. What happens if SAVII SOURCING can’t collect Personal Information?
If individuals do not provide SAVII SOURCING with the Personal Information described above, some or all of the following may happen:
• SAVII SOURCING may not be able to answer the individual’s query or provide any documents or other materials requested;
• SAVII SOURCING may not be able to offer the individual a job or other form of engagement; or
• SAVII SOURCING may not be able to perform its other business functions relating to the individual, either to the same standard or at all.
4. What purposes does SAVII SOURCING collect, hold, use and disclose Personal Information?
SAVII SOURCING collects Personal Information about individuals so that SAVII SOURCING can perform its business activities and functions and answer any enquiries made by individuals. SAVII SOURCING will collect, hold, use and disclose Personal Information for the following purposes:
• to answer enquiries and provide information about existing and new Projects that SAVII SOURCING may be undertaking;
• to conduct business processing functions including providing Personal Information to SAVII SOURCING’ Related Bodies Corporate, contractors, service providers or other third parties;
• for the administrative, planning, quality control and research purposes of SAVII SOURCING and its Related Bodies Corporate, contractors or service providers;
• to provide updated Personal Information to SAVII SOURCING’ Related Bodies Corporate, contractors or service providers;
• to update SAVII SOURCING’ records and keep individuals’ contact details up to date;
• for security management;
• for health and safety management;
• for subcontract management;
• for tracking the engagement of SAVII SOURCING Subcontract Workers and third parties;
• for communication with community members;
• for internal technical and operational support;
• to process and respond to any complaint made by individuals;
• managing human resources;
• to comply with any law, rule, regulation, lawful and binding determination, decision or direction of a regulator, or to co-operate with any governmental authority; and
• where required to protect its legal rights (e.g., to defend litigation or anticipated litigation)
5. Who does SAVII SOURCING disclose and transfer Personal Information to?
a. What third parties does SAVII SOURCING disclose Personal Information to?
SAVII SOURCING may disclose the Personal Information of individuals, including for the purposes set out above:
• to other Related Bodies Corporate of SAVII SOURCING for purposes connected with SAVII SOURCING’ business activities;
• for the legal and other reasons described below;
• to customers and Agents as described below;
• to SAVII SOURCING employees and SAVII SOURCING Subcontract Workers, for purposes connected with SAVII SOURCING’ business activities;
• to SAVII SOURCING’ other contractors or service providers for the purposes of its business activities (including without limitation to web hosting providers, IT systems administrators, mailing houses, couriers, payment processors, data entry service providers, electronic network administrators, and professional advisors such as accountants, solicitors, business advisors and consultants);
• to suppliers and other third parties with whom SAVII SOURCING has a commercial relationship, but only for the purpose of SAVII SOURCING’ business and related purposes; and
• to any other organization for any authorized purpose with the express consent of the individual whose Personal Information is collected.
b. What Personal Information Transfers Outside of SAVII SOURCING May Be Made? SAVII SOURCING may transfer Personal Information outside of SAVII SOURCING:
• where required as a matter of law (e.g., to tax authorities);
• where required to protect its legal rights (e.g., to defend litigation or anticipated litigation);
• where required in an emergency where the health or security of a Project Personnel is endangered (e.g., an accident at work); or
• where required for business purposes to SAVII SOURCING’srelated bodies, third party suppliers and service providers.
c. Does SAVII SOURCING disclose Personal Information to anyone?
SAVII SOURCING may disclose the Personal Information of individuals to its Related Bodies Corporate and third party suppliers and service providers located overseas for some of the purposes listed above.
SAVII SOURCING takes reasonable steps to ensure that the overseas recipients of Personal Information do not breach the privacy obligations relating to the management of the Personal Information of individuals.
E. SAVII SOURCING’s COMPLIANCE WITH OTHER PRIVACY OBLIGATIONS
1. Security and Confidentiality
SAVII SOURCING is committed to taking appropriate technical, physical and organizational measures to protect Personal Information against: unauthorized or accidental destruction, alteration or disclosure; accidental loss; unauthorized access; misuse; unlawful management; or damage.
These measures include equipment, application and information security, access security and training of SAVII SOURCING employees, who are required to collect, hold use and disclose Personal Information.
2. Access and Correction Rights
a. What Are Individuals’ Rights to Access Their Personal Information?
Any individual may inquire as to the nature of his/her Personal Information held by SAVII SOURCING. SAVII SOURCING will endeavour to respond to an inquiry without excessive delay and within the time limits prescribed by the Privacy Act (if any) or otherwise within a reasonable time period.
An individual wishing to access a copy of his/her Personal Information held by SAVII SOURCING should contact the Privacy Officer. Where SAVII SOURCING holds information that an individual is entitled to access, SAVII SOURCING will try to provide the individual with suitable means of accessing it (for example, by mailing or emailing it to them).
In responding to a request for access to Personal Information, SAVII SOURCING may request for the requesting individual:
• to provide SAVII SOURCING with sufficient information to allow it to confirm their identity;
• in order to locate responsive information, to identify his/her concerns which led to or motivated the request; and
• to identify which SAVII SOURCING employee interacted with the individual and the nature of the Personal Information requested
b. What Are Individuals’ Rights to Correct Their Personal Information?
If an individual believes the Personal Information that SAVII SOURCING is holding about them is incorrect, incomplete or inaccurate, then the individual may request that SAVII SOURCING correct this information. An individual wishing to correct his/her Personal Information held by SAVII SOURCING should contact the Privacy Officer.
SAVII SOURCING will consider if the information requires amendment. If SAVII SOURCING does not agree that there are grounds for amendment, then the individual may request that SAVII SOURCING adds a note to the Personal Information stating that the individual disputes the accuracy of their Personal Information.