Autonomous Technology Pty Ltd

AUTONOMOUS TECHNOLOGY PTY LIMITED

PRIVACY STATEMENT

PURPOSE

Autonomous Technology adheres to the Privacy Act, Australian Privacy Principles and Queensland Information Privacy Act for collecting, storing and disclosing personal information as well as recognising the students’ requirements to access timely and accurate information about their participation and progress.

SCOPE

This Policy is written in accordance with the Australian Privacy Principles (APPs) and is available to anyone seeking information on how Autonomous Technology manage the personal information that is collected for the purpose of training students. This policy may be viewed on the Autonomous Technology website.

LEGISLATIVE CONTEXT

Commonwealth Privacy Act 1988.

Privacy Amendment (Private Sector) Act 2000.

Australian Privacy Principles.

Queensland Information Privacy Act 2009

POLICY STATEMENT

INTRODUCTION

• We (Autonomous Technology Pty Ltd) are CASA Certified for RPA Operators Certificate (ReOC) and provide drone training, including Remote Pilots Licence (RePL) educational and related services across Australia. In the course of our business, there are circumstances where we collect personal information. This privacy policy has been developed to ensure that such information is handled appropriately.
• We are committed to complying with the Privacy Act 1988 (Cth) (Privacy Act) in relation to all personal information we collect. Our commitment is demonstrated in this policy. The Privacy Act incorporates the APPs. The APPs set out the way in which personal information must be treated.

• WHO DOES THE PRIVACY POLICY APPLY TO?

• This policy applies to any person for whom we currently hold, or may in the future collect personal information.
• WHAT INFORMATION DOES THE PRIVACY POLICY APPLY TO?
• This policy applies to personal information. In broad terms 'personal information' is information or opinions relating to a particular individual who can be identified.
• Information is not personal information where the information cannot be linked to an identifiable individual.

HOW DO WE MANAGE THE PERSONAL INFORMATION WE COLLECT?

• We manage the personal information we collect in numerous ways such as:
• Implementing procedures for identifying and managing privacy risks.
• Implementing security systems for protecting personal information from misuse, interference and loss from unauthorised access, modification or disclosure.
• Providing staff with training on privacy issues.
• Appropriately supervising staff who regularly handle personal information.
• Appointing a privacy officer within the business to monitor privacy compliance.
• Allowing individuals the option of not identifying themselves, or using a pseudonym, when dealing with us in particular circumstances.
• We will take reasonable steps to destroy or permanently de-identify personal information if that information is no longer needed for the purposes for which we are authorised to use it.
• In limited circumstances, it may be possible for you to use a pseudonym or remain anonymous when dealing with us (for example, when making a general enquiry with us). However, if you would like to engage our Services, we will need your personal information in most instances in order to provide the Services to you. If you wish to use a pseudonym or remain anonymous, you should notify us when making first enquiries.

WHAT TYPES OF INFORMATION DO WE COLLECT AND HOLD?

PERSONAL INFORMATION.

We may collect and hold personal information about you, which may include:

• Sensitive information
• Contact information.
• Financial information.
• Date and place of birth
• Employment arrangements and history.
• Academic and education history.
• Tax returns and tax file numbers.
• Banking details.
• Any other personal information required to perform the services for you.

SENSITIVE INFORMATION.

Sensitive information’ is a subset of personal information and includes personal information that may have serious ramifications for the individual concerned if used inappropriately.

We may collect sensitive information if it is relevant in providing the Services. The sensitive information we collect and hold about you may include any of the following:

Our usual approach to collecting personal information is to collect it directly from you. We might also collect personal information in other ways, which may include:

• Health information.
• Racial or Ethnic origin.
• On secure online servers.
• On a private cloud (protected by SSL and hosted in Australia).
• By a third party data storage provider.

We secure the personal information we hold in numerous ways, including:

• We are unable to verify your identity.
• The request is unreasonable.
• Providing access would have an unreasonable impact on the privacy of another person.
• Providing access would pose a serious and imminent threat to the life or health of any person.
• There are other legal grounds to deny the request.
• The complaint must be firstly made to us in writing, using the contact details in this section. We will have a reasonable time to respond to the complaint.
• In the unlikely event the privacy issue cannot be resolved, you may take your complaint to the Office of the Australian Information Commissioner.

WHO TO CONTACT.

HOW AND WHEN DO WE COLLECT PERSONAL INFORMATION?

HOW DO WE HOLD PERSONAL INFORMATION?

Our usual approach to holding personal information includes:

WHY DO WE COLLECT, HOLD, USE OR DISCLOSE PERSONAL INFORMATION?

We take reasonable steps to use and disclose personal information for the primary purpose for which we collect it. The primary purpose for which information is collected varies, depending on the particular service being provided, but is generally to:

In the case of potential employees, the primary purpose the information is collected is to assess the individual’s suitability for employment.Personal information may also be used or disclosed by us for secondary purposes that are within your reasonable expectations and that are related to the primary purpose of collection.For example, we may collect and use your personal information:

• We may disclose personal information to:Otherwise, we will only disclose personal information to third parties if permitted in writing by you, where it is authorised by law, or will lessen or prevent a serious threat to your life, health, safety or the general public’s health, safety and welfare. Where any other organisation has presented a privacy agreement to you, and it has been signed, we will share relevant information as approved by you.Should a student request for Autonomous Technology to discuss their information and progress with a nominated person they are required to complete a Privacy Consent Form and email this to [email protected].

WILL WE DISCLOSE PERSONAL INFORMATION OUTSIDE OF AUSTRALIA?

We generally do not disclose information to overseas recipients. We take all reasonable steps to ensure that the service provider is committed to privacy and confidentiality obligations that are at least equal to the Australian Privacy Principles.

HOW DO YOU MAKE COMPLAINTS, AND ACCESS AND CORRECT YOUR PERSONAL INFORMATION OR CREDIT INFORMATION

It is important that the information we hold about you is up-to-date. You should contact us if your personal information changes.

ACCESS TO INFORMATION AND CORRECTING PERSONAL INFORMATION.You may request access to the personal information held by us or ask us for your personal information to be corrected by using the contact details in this section. We will grant you access to your personal information as soon as possible, subject to the request circumstances.In keeping with our commitment to protect the privacy of personal information, we may not disclose personal information to you without proof of your identity. We may deny access to personal information if:If the personal information we hold is not accurate, complete and up-to-date, we will take reasonable steps to correct it so that it is accurate, complete and up-to-date, where it is appropriate to do so.

COMPLAINTS

If you wish to complain about an interference with your privacy, then you must follow the following process:

A person may make a complaint or request to access or correct personal information about them held by us. Such a request must be made in writing to the following address:

Attention: The Privacy Officer, PO Box 635, Bribie Island QLD 4507, [email protected]

CHANGES TO THIS POLICY

We may update, modify or remove this policy at any time without prior notice. Any changes to the privacy policy will be published on our website. If you have any comments on the policy, please contact the Privacy Officer with the contact details above.

COMMUNICATION, TRAINING AND RECORD KEEPING

For internal use only - refer to the Communication, Training and Recordkeeping Procedure.

Australian Privacy Principles. As of 12 March 2014; agencies and certain organisations must ensure that they abide by the 13 Australian Privacy Principles:

• Open and transparent management of personal information
• Anonymity and Pseudonymity
• Collection of solicited personal information
• Dealing with unsolicited information
• Notification of the collection of personal information
• Use or disclosure of personal information
• Direct marketing
• Cross-border disclosure of personal information
• Adoption, use or disclosure of government related identifiers
• Quality of personal information
• Security of personal information
• Access to personal information
• correction of personal information
  • Personal Information. The Privacy Act defines personal information as:
  • Sensitive Information is a type of personal information and includes information about:

…information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.

Common examples are an individual’s name, signature, address, telephone number, date of birth, medical records, bank account details and commentary or opinion about a person.

• An individual’s racial or ethnic origin.
• Health information.
• Political opinions.
• Membership of a political association, professional or trade association or trade union.
• Religious beliefs or affiliations.
• Philosophical beliefs.
• Sexual orientation or practices.
• Criminal record.
• Genetic information.
• Biometric information that is to be used for certain purposes.
• Biometric templates.