General Privacy Notice
1. Introduction
In this general privacy notice (“Privacy Notice“) we describe how Ascendience Pty Ltd (ACN 648 292 291) (“Company”) uses the Personal Data of (prospective) clients, suppliers and (website) visitors. More specifically, we describe how we collect, store, secure and use (“process”) your Personal Data when you purchase our products or services, supply products or services to us, visit our premises or access our website(s). When we refer to “Company“, “we“, or “us” in this Privacy Notice, we refer to the Company and our employees responsible for your Personal Data and acting as “data controller”.
When we refer to “Personal Data” under this Privacy Notice, we mean any information through which we can identify you as an individual (e.g., your name, telephone number, e-mail address etcetera).
2. Scope of this Privacy Notice
This Privacy Notice applies to the processing of Personal Data of (prospective) clients, suppliers and (website) visitors.
3. What Personal Data do we process?
The type of Personal Data we process varies depending on the type of relationship we have with you and the kind of services we provide to you.
(Prospective) clients and suppliers – We process the following Personal Data of our (prospective) clients and suppliers to the extent available to us and in accordance with applicable law and regulation:
Visitors to our premises-We process the following Personal Data of persons visiting our premises:
Website visitors–We process the following Personal Data when you access our website(s):
data collected automatically – when you access our website(s), we collect data automatically through your browser or device by making use of cookies and other technologies including Google Analytics. In this way we track website visitors and collect information about your use of our website(s).
4. For what purposes do we process your Personal Data?
5. What is our legal basis for processing your Personal Data?
At all times, we process your Personal Data in accordance with applicable data protection laws. This means that we will only use your Personal Data if this is sufficient, relevant and limited to what is necessary. We will only process your Personal Data if we have a legal basis to do so. By law, we are required or permitted to collect or use your personal information in certain circumstances, including those described below.
The legal bases for processing your Personal Data are the following:
6. With whom do we share your Personal Data?
We share your Personal Data with third parties who assist us in the delivery of our services, or in order to operate and expand our business activities. We will only do so on a strictly need-to-know basis and after entering into the necessary contractual arrangements with such parties.
We share your Personal Data with the following parties:
7. How do we share your Personal Data?
We take all necessary steps to ensure that your Personal Data is shared and treated securely and in accordance with this Privacy Notice and applicable legislation. This means that we enter into appropriate legal arrangements with recipients of your data, such as Standard Contractual Clauses (“SCC’s”) as approved by the European Commission of the European Union or equivalent arrangements with parties outside the European Economic Area. You are entitled to receive a copy of any documentation showing the appropriate safeguards that have been put into place by making a request to the Company.
Do we disclose your personal information to anyone?
Unless you specify otherwise, we may disclose your information to the following groups, in each case in accordance with laws on data transfers:
tax, audit, or other authorities, when we believe that the law or other regulation requires us to share this data (for example, because of a request by a tax authority, as part of our statutory obligations, or to a court in response to a subpoena).
8. How do we secure your Personal Data?
The Company takes reasonable steps to ensure that your Personal Data is properly secured using appropriate technical, physical, and organisational measures. We take steps to limit access to your Personal Data to those individuals who need to have access for one of the purposes listed in this Privacy Notice. Furthermore, we contractually ensure that any third party processing your Personal Data on our behalf maintains at least equal security and integrity standards.
9. How long do we store your Personal Data?
We store your Personal Data on the basis of applicable law and regulation and as long as is required to satisfy the purpose for which the data is processed (for example, for the time necessary for us to provide you with client service, answer queries or resolve technical problems), unless a longer period is required for purposes such as complying with retention obligations for record keeping or commercial requirements.
10. Which rights do you have with respect to your Personal Data?
You have several rights in relation to the Personal Data processed by the Company. For example, you have the right to request, review, correct, update, restrict or delete personal data you have provided to us. If you wish to exercise your rights, you can contact us by sending an email to us. We will respond to your request, consistent with the applicable law. As part of your request, please indicate the specifics of the Personal Data you would like to have changed or removed from our database or what limitations you would like to put on our use of the data. We will comply with your request in accordance with the applicable law(s) and regulation(s) and as soon as reasonably practicable respond in writing advising you of the outcome. Please note that we may need to retain certain Personal Data for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. In the event your Personal Data is processed on the basis of your consent, you may withdraw consent at any time by sending an email to us. Please note that a withdrawal of consent does not affect the lawfulness of any processing which has taken place prior to your consent being withdrawn and that we can only action your request in accordance with applicable law.
If you believe that the processing of your Personal Data infringes this Privacy Notice or applicable law, please contact us to raise your concern. If you are a client or supplier, you can also address your concerns to your contact person. Lastly, if you feel that the Company has not addressed your concerns properly you have the right to lodge a complaint with the supervisory authority in your country of residence or place of work.
Individual rights
The Company complies with applicable laws which grant individuals certain rights in respect of their personal information (e.g. rights to access, correct, delete, withdraw consent, complain etc.). You can contact our Privacy Officer to exercise your rights. The rights that individuals have in respect of their personal information vary from country to country. We set out below a list of the key rights you should be aware of. Some rights will not apply in some jurisdictions and there may also be limitations on the ways in which rights can be exercised.
Right to access
You may request access to or correction of any of the personal information the Company holds about you. Your entitlement to access your personal information will be subject to applicable laws.
For more detailed requests for access to personal information, for example, access to information held in archives, a fee may be charged where permitted under applicable laws to cover the cost of retrieval and supply of this information to you.
Your request for access will be handled as soon as reasonably practicable. We will comply with applicable laws and, in any event, endeavour to process your request within 30 days after receiving the request. Some requests may take longer to process depending upon the nature of the personal information being sought.
Right to correction
The Company takes reasonable steps to ensure that information is up to date and complete. However, if you believe the information we hold about you is inaccurate or incomplete, you may request that we correct it.
Right to object to, or restrict use of, data
You may write to us to object to us using your personal information – either generally or for specific purposes.
Right of deletion
In some circumstances, you may be able to request that [the Company] erase some or all of the personal information we hold about you.
Right to data portability
If you have made personal information available to us for automated processing and have provided your explicit consent for that processing (or that processing is required for the purposes of a contract between [the Company] and you), you may be able to ask us to transfer that data to you or a third party in a machine-readable format.
Right to withdraw consent
If you have given us explicit consent for the use of your personal information, you may later withdraw that consent (although this will not affect the lawfulness of our previous use of your information).
Right to make a complaint
If you believe that the Company has not protected your personal information as set out in this Privacy Statement or has breached your privacy rights in any way, you may lodge a complaint with us by contacting us using the contact details set out below.
On receipt of your complaint, the Company will:
11. Cross-border disclosure of information
Due to the global nature of the Company’s business, we may disclose your information to recipients who are outside of the country in which your personal information was collected. Personal information may be disclosed to providers around the world. The Company, its contracted services providers (and their affiliates or subcontractors) may also use cloud services, systems and servers both within and outside of Australia to store and manage your personal information. The Company requires its service providers to ensure that any data transfer in relation to such cloud storage occurs in accordance with applicable privacy laws. The Company requires service providers it contracts with from time to time to take appropriate steps to protect the privacy and manage the security of your personal information. If you have any further questions about the protections the Company puts in place when transferring information overseas, please contact us.
12. Does this Privacy Notice apply when you link through to other websites?
Our websites may, from time to time, contain links to and from third-party websites, Such third-party websites may be managed by business partners or social media networks. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we do not accept any responsibility or liability for these policies/notices.
13. How do you contact the Company with privacy related questions?
If you have any questions or concerns about this Privacy Notice or the processing of your Personal Data in general, or if you wish to exercise any of your rights, please email us and be sure to indicate the nature of your query.