PURPOSE AND OVERVIEW
Cabra-Vale Diggers is committed to providing exceptional customer service. Cabra-Vale Diggers recognises that protecting an individual’s privacy and making them aware of this privacy policy is part of this commitment.
The Cabra-Vale Diggers Group provide premium hospitality and entertainment venues to members and guests. This policy sets out the approach which the Cabra-Vale Diggers group takes in relation to the treatment of Personal Information. This includes Campbelltown RSL and Cabra-Vale Diggers.
This policy includes information on how Cabra-Vale Diggers collects, uses, discloses, and keeps secure, individuals’ personal information. It also sets out how Cabra-Vale Diggers makes the personal information it holds available for access to and correction by the relevant individual.
PERSONAL DATA
Personal data refers to any information or opinion relating to an identified or identifiable natural person. This includes personal data which reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or any further categories as defined by Article 9 of the EU General Data Protection Regulation.
HOW CABRA-VALE DIGGERS COLLECTS AND STORES PERSONAL INFORMATION
Cabra-Vale Diggers only collects and stores personal information where it is necessary to do so in order to perform one or more of its functions or activities, and in accordance with this Privacy Policy.
Cabra-Vale Diggers collects information from individuals by various means including, without limitation, by individuals completing membership application or renewal forms, mailing subscription, entry into competitions and promotions and via access to our websites, in venue Wi-Fi, social media pages and Cabra Connect app.
Cabra-Vale Diggers collects personal information primarily to supply individuals who obtain products or services with information and details of our products and services. The Group also collects and uses personal information for the secondary purpose of:
- Provision of products and services
- Accounting purposes; and
- Business planning as well as product and service development
Cabra-Vale Diggers is also required to collect and store certain member information in accordance with the Registered and Licensed Clubs Act 1976 (NSW). Cabra-Vale Diggers is unable to allow individuals to join the club or to be a temporary member unless they have provided the required personal information.
WEBSITES, DEVICES, APPS AND COOKIES
Where applicable, Cabra-Vale Diggers will also collect the following information from you:
- Where devices are enabled to connect to, or are identifiable by, the Clubs complex infrastructure (for example Wi-Fi networks or Bluetooth infrastructure), we and our third-party providers may automatically collect data from those devices including usage, type of device, location within the complex and arrival and departure time
- The fully qualified domain name (www.cabravale.com.au) from which you accessed our websites and the Cabra Connect App available on the Apple Store and Google Play, or alternatively, your IP address
- The web browser that you are using and the pages you accessed
- Device ID number (MAC address)
- The date and time you accessed each page on our websites
- The URL of any webpage from which you accessed our websites or by using the complex Wi-Fi, and the details of any mobile Apps you have accessed from a device using the complex Wi-Fi
- Publicly accessible social media posts and any personal information you allow us to collect by linking your account on our website with a third-party social-networking site including but not limited to Facebook, Twitter, or Google+; and
- Cookies which track your visits to our web sites and App
MOBILE DEVICES – LOCATION SERVICE DATA
Location services data is collected by the app but can be turned off in the phone setting. This data is not stored nor shared with any third party and is only used for marketing purposes for patrons of the club.
USE OF PERSONAL INFORMATION
Cabra-Vale Diggers uses personal information primarily for the purposes listed above.
Where Cabra-Vale Diggers uses direct marketing to individuals, it will ensure that individuals are clearly notified of their right to opt out from further direct marketing.
We will not use personal information without taking reasonable steps to ensure that the information is accurate, complete, and up to date.
Cabra-Vale Diggers has a designated data protection officer, being the Privacy Officer, who is responsible for the protection and monitoring of the use of personal data held by Cabra-Vale Diggers.
DISCLOSURE OF PERSONAL INFORMATION
From time to time, Cabra-Vale Diggers may disclose personal information to related or unrelated third parties.
Cabra-Vale Diggers may disclose personal information to unrelated third parties to enable outsourcing of functions where that disclosure or use is for a related secondary purpose and has been notified to individuals or where such disclose is within the individual’s reasonable expectations.
Cabra-Vale Diggers will take reasonable steps to ensure that its contracts with third parties include requirements for third parties to comply with the use and disclose requirements of the Privacy Act 1988 (Cth).
In the rare event that Cabra-Vale Diggers is required to disclose personal information to law enforcement agencies, government agencies or external advisors, Cabra-Vale Diggers will only do so in accordance with the Privacy Act or any other relevant Australian legislation.
Individuals have the right to request that their personal data is only used or disclosed in limited circumstances, including where the individual’s consent is provided explicitly.
INFORMATION QUALITY
Cabra-Vale Diggers reviews, on a regular and ongoing basis, its collection and storage practices to ascertain how improvements to accuracy can be achieved.
We will take steps to de-identify or destroy personal information that is no longer needed for a primary or secondary purpose after a maximum of seven years, unless the law requires otherwise.
SECURITY OF PERSONAL INFORMATION
Access to personal information in electronic or hard copy form is provided to a limited number of Cabra-Vale Diggers staff whose roles require access to such information.
Cabra-Vale Diggers will review, on a regular and ongoing basis, its information security practices ascertaining how compliance with its ongoing responsibilities are maintained.
Cabra-Vale Diggers will ensure that it only uses third party data processors who provide sufficient guarantees that they implement technical and organisational measures to ensure compliance with the EU General Data Protection Regulation thereby protecting the rights of all individuals of which personal information is held.
ACCESS AND CORRECTION OF PERSONAL INFORMATION HELD BY CABRA-VALE DIGGERS
Cabra-Vale Diggers will allow its records containing personal information to be accessed by the individual concerned in accordance with the Privacy Act.
Cabra-Vale Diggers will correct its records containing personal information as soon as practically possible, at the request of the individual concerned, in accordance with the Privacy Act.
Individuals wishing to lodge a request to access and/or correct their personal information should do so by contacting a member of the Membership Team.
Subject to State and Federal legislation reporting and data retention requirements, individual also have the right to erasure (i.e. having their details removed from Cabra-Vale Diggers systems) where the information is no longer necessary for the purpose for which it was collected, or where the individual withdraws their consent and there is no longer a legal ground for processing their data.
SUSPECTED DATA BREACHES
Cabra-Vale Diggers takes unauthorised access or disclosure of personal information very seriously and uses its best endeavours to ensure that a data breach does not occur.
In the event of a suspected data breach, Cabra-Vale Diggers has an established Data Breach Response Plan in place in accordance with the Privacy Amendment (Notifiable Data Breaches) Act 2017.
HOW TO MAKE A COMPLAINT
Contact with Cabra-Vale Diggers membership team via phone or web inquiry will be the first point of contact for inquiries about privacy issues.
Any formal privacy related complaints should be directed in writing to Cabra-Vale Diggers.
The Privacy Officer
Cabra-Vale Diggers Club
Phone: (02) 9727 3600
Email: privacy@cabravale.com
The Privacy Officer, or another representative of the Club, will investigate the complaint and will provide you with an estimated time frame for when we will respond to your complaint and a written response within a reasonable time, following the completion of the investigation. While we hope that the Club will be able to resolve any complaints you may have without needing to involve third parties, you may also be able to lodge a complaint with the Australian Information Commissioner.