1. What personal information do we collect?
Personal information is any information (including an opinion) which can be used to identify an individual.
Sensitive information is a subset of personal information which includes information about an individual’s race or ethnicity, political or religious beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences, criminal record and health information.
Personal information will not be shared, sold or disclosed by EMO Civil other than in accordance with this Policy, without an individual’s permission, or in accordance with the Privacy Act.
EMO Civil only collects, holds, uses or discloses personal information where it is reasonably necessary to:
enable EMO Civil to deliver services or information to individuals or to an organisation;
maintain or establish a business relationship, including with a customer, supplier, contractor, or employee;
enable EMO Civil to assist to provide services; or to improve, and better understand preferences in respect of EMO Civil services; and
fulfil its legal or regulatory obligations.
EMO Civil generally collects personal information directly from the individual to whom it relates, except where that individual has consented to EMO Civil collecting the personal information from a third party, the law otherwise permits EMO Civil to do so, or where it is unreasonable or impracticable to collect it directly. EMO Civil only collects sensitive information directly from individuals with their consent, or where required, it is authorised or otherwise permitted to collect the information from a third party by law.
Personal information may also be collected from, and disclosed to, third parties in the course of business activities. For example, during a recruitment process steps may be taken to verify the accuracy and completeness of the information and, in appropriate circumstances, health checks, credit checks or criminal records checks may be carried out.
An individual has the option, where lawful and practicable, not to be identified when communicating or entering into transactions with EMO Civil (including by the use of a pseudonym). However, in most circumstances, it will be impracticable for EMO Civil to do business with an individual or provide the services required by an individual unless personal information is provided.
2. Purposes for which we collect, hold, use and disclose personal information
Personal information will be stored in EMO Civil's systems for immediate business and administration purposes, as detailed above, and may be used or disclosed for the purpose for which it was collected, or for a related purpose which someone may reasonably expect. Sensitive information will only be disclosed for a purpose which is directly related to the purpose for which it was collected.
EMO Civil may also disclose or use personal information (including to overseas recipients):
to third party service providers and business associates, including our joint venture and alliance partners, who provide services in connection with its business. These third parties may be located locally or overseas.
with the individual’s consent;
where required, authorised or permitted to do so by law;
to a person authorised to act on the individual’s behalf; or
as required by law and specifically to any government agency if CIMIC believes in good faith that it must do so to comply with the law or that doing so is required to prevent, detect, investigate or remedy improper conduct potentially affecting it.
Where EMO Civil holds or transfers personal information outside Australia, it will meet the safeguards set out in the Privacy Act. Where personal information is held or disclosed overseas, all reasonable steps will be taken to ensure that the recipient will handle the information in a manner consistent with the Privacy Act.
3. Confidentiality and security
EMO Civil is committed to:
safeguarding all personal information provided to EMO Civil;
ensuring that personal information remains confidential and secure; and
taking all reasonable steps to ensure that personal privacy is respected.
EMO Civil maintains physical, electronic and procedural safeguards to protect personal information from misuse, interference, unauthorised access, modification or disclosure, and loss or corruption by computer viruses and other sources of harm. Access to personal information is restricted to those employees, joint venture partners, subsidiary companies and third parties who need to know that information.
In accordance with the Privacy Act, EMO Civil is required to notify you and the Australian Information Commissioner if it becomes aware of a data breach (such as an unauthorised disclosure of or unauthorised access to data, or a loss of data) where that breach is reasonably likely to result in serious harm. This will apply even if your data is being held offshore.
If an individual has a question, concern or complaint regarding the way in which personal information is handled, or believes that EMO Civil has breached its obligations under the Privacy Act or has failed to comply with this Policy, they should make a complaint in writing to EMO Civil's Privacy Officer.
EMO Civil will review and respond to any complaint as soon as possible, and generally within 30 days of receiving it.
If an individual is not satisfied with EMO Civil's response, the complaint can be referred to the Office of the Australian Information Commissioner (OAIC). The OAIC will generally only consider a complaint if the individual has first written to EMO Civil and given EMO Civil a reasonable opportunity to resolve the complaint (usually 30 days).
7. Privacy Officer Contact Details
Post: The Privacy Officer, PO Box 4960, North Rocks NSW 2151 AUSTRALIA