Data Collection Notice

Scope

1. This data collection notice applies to all products, services and systems developed, delivered and marketed by Deakin University trading as DeakinCo. (ABN: 56 721 584 203), hereafter referred to as ‘DeakinCo.’
2. The notice is pursuant to the Deakin University privacy policy.
3. The notice sets out the information prescribed in the Privacy Act 1988 (Cwlth), the Privacy and Data Protection Act 2014 (Vic) and the Health Records Act 2001 (Vic). It does not extend your rights or DeakinCo.’s obligations beyond those defined in the legislation. In the case of inconsistency between this notice and the legislation, the notice shall be interpreted to give effect to and comply with the legislation.
4. You accept the terms of this notice when you use our products, services and systems.
5. We reserve the right to amend this notice at any time, and your use of our products, services and systems following any amendments will represent your agreement to be bound by the notice as amended. We therefore recommend that you read this notice each time you use our products, services and systems.

Collection of personal information

Why we collect personal information

6. The Office of the Australian Information Commissioner (OAIC) defines personal information as ‘information, or an opinion, that could identify an individual’.
7. DeakinCo. collects personal information in order to develop, deliver and market its products, services and systems. Purposes of collection may include (but are not limited to):
1. Informing the design, development and delivery of our products, services and systems
2. Providing users with secure access to our products, services and systems
3. Responding to user queries and requests related to our products, services and systems
4. Marketing and promoting our products, services and systems
5. Monitoring and maintaining our products, services and systems
6. Processing and recording transactions relating to our products, services and systems
7. Personalising and improving the user experience of our products, services and systems
8. Enabling internal and client reporting about our products, services and systems

How we collect personal information

8. In accordance with the Privacy Act, the Privacy and Data Protection Act and the Health Records Act, we collect personal information only:
   
   1. Where necessary and relevant to business functions and activities
   2. Where there is a specific and immediate need to do so
   3. In a lawful, fair and not unreasonably intrusive way
9. The personal information we collect in order to develop, deliver and market our products, services and systems is generally (but not necessarily) gathered in one of the following ways:
   
   1. Provided voluntarily by you
   2. Provided by your employer on your behalf
   3. Collected automatically via tracking and analytics technologies
   4. Passed on to us by third-party service providers

   The types of personal information we collect

   10. The types of personal information we collect include (but are not limited to):
       
       1. Usage information – data about your use of our digital products, services and systems. Usage information is collected automatically via tracking and analytics technologies. It may include your IP address, location, browser, operating system and the timing, pattern and frequency of your system use.
       2. Account information – data we collect when you register an account, create a profile or subscribe in order to use our products, services and systems, or when your employer does so on your behalf. Account information may be voluntarily provided by you or may be provided by your employer. It may include your name, gender, contact details, employment and education information, profile information and images.
       3. Learning information – data about your learning and assessment activities, performance and outcomes when using our products, services and systems. Learning information may be voluntarily provided by you or collected automatically via tracking and analytics technologies. It may include learning activities, progress and outcomes as well as material submitted for assessment, including written and audio-visual submissions.
       4. Correspondence information – data we collect when receiving and responding to user queries and requests regarding our products, systems or services. Correspondence information is voluntarily provided by you. It may include inquiry messages, support requests and complaint information.
       5. Feedback information – data we collect when receiving or gathering user feedback on our products, systems or services. Feedback information is voluntarily provided by you. It may include direct feedback as well as responses to surveys and forms.
       6. Transaction information – data we collect when you enter into a transaction with us (e.g. the purchase of goods or services). Transaction information is voluntarily provided by you. It may include payment details, bank details and credit information.
       7. Biometric information – data we collect for the purpose of identity verification, typically via voice recognition technology. Biometric information is voluntarily provided by you and will not be collected without your express consent.
       8. Sensitive information – a subset of personal information that is given a higher level of protection under law. Sensitive information is voluntarily provided by you and will not be collected without your express consent. It may include political opinions, religious beliefs or affiliations, philosophical beliefs, and memberships of political, professional or trade associations or trade unions.
       9. Vocational education and training (VET) information – data we collect as a registered training organisation (RTO) in compliance with the Australian Vocational Education and Training Management Information Statistical Standard (AVETMISS), as required under the National Vocational Education and Training Regulator Act 2011 (Cwlth). Personal information required by AVETMISS includes information about who learners are, where they study and what they study. For more information about AVETMISS, visit https://www.ncver.edu.au/rto-hub/avetmiss-for-vet-providers.

       Use and disclosure of personal information

       11. DeakinCo. uses and discloses personal information in accordance with the Privacy Act, the Privacy and Data Protection Act and the Health Records Act.
       12. The personal information we collect is used only for the primary purpose of collection, a related secondary use reasonably anticipated by the individual, or where authorised by law.
       13. We have procedures and guidelines to ensure that staff only access personal information to the extent necessary to perform their job.
       14. When collecting personal information directly from an individual, whether by written or electronic means, we take all reasonable steps to ensure that the individual providing such information is made aware of how their information will be used and with whom it might be shared or communicated.

       Disclosure to your employer

       15. If you access our products, services and systems via an organisational contract between DeakinCo. and your employer, DeakinCo. may disclose to your employer information about your learning and assessment activities, performance and outcomes.
       16. If you access our products, services and systems for personal use, no such disclosure will occur.

       Disclosure to our service providers

       17. We may need to disclose your information to third-party service providers to enable the design and delivery of our products, services and systems. Information is only disclosed when necessary for the services provided to DeakinCo.
       18. Some DeakinCo. service providers are located overseas. When disclosing your information overseas, we take all legally required measures to ensure your information is treated in accordance with the standards that apply in Australia, unless we obtain your consent not to take these measures.

       Disclosure of AVETMISS information

       19. As an RTO, we disclose AVETMISS information as required under the National Vocational Education and Training Regulator Act. For more information about AVETMISS, visit https://www.ncver.edu.au/rto-hub/avetmiss-for-vet-providers.

       Access to and correction of personal information

       20. You have a right at any time to request that you be told what personal information we hold about you and to request that this information be destroyed.
       21. Access to and correction of personal information held by DeakinCo. is managed in accordance with the Privacy Act. If you wish to access or correct any of your personal information, please contact DeakinCo.’s Privacy Officer using the information under ‘Contact’ below.

       Enquiries and complaints

       22. DeakinCo. is committed to working with its customers to obtain a fair resolution of any complaint or concern about privacy. Enquiries or complaints about the management of your personal information may be directed to DeakinCo.’s Privacy Officer.
       23. All complaints must be made in writing, supported by documentary evidence and show the name, address and contact details of the complainant.
       24. We will acknowledge your written complaint within 30 days and advise you of further procedures.
       25. If you consider the response to be unsatisfactory, the complaint should be taken to the OAIC by calling their Privacy Hotline on 1300 363 992 or visiting http://www.oaic.gov.au/.

       Contact

       26. Enquiries, complaints and requests to access or correct personal information should be directed to the DeakinCo. Privacy Officer:

       Privacy Officer
       DeakinCo., Tower 2, Level 12, 727 Collins St, Docklands, VIC 3008
       commercial@deakinco.com