1. POLICY STATEMENT
Brisbane Airport Corporation Pty Limited ACN 076 870 650 respects the privacy of personal information you may provide to us. The way we manage your personal information is governed by the Privacy Act 1988 (Cth) (Act) and the National Privacy Principles (NPPs) established under the Act.
BAC, we, us or our refer to Brisbane Airport Corporation Pty Limited ACN 076 870 650;
You or your refers to you as an individual user of BAC facilities, our websites, other BAC media, any of our services or buying our products; and
The singular includes the plural and vice versa.
2. WHAT IS 'PERSONAL INFORMATION'?
"Personal information" is any information or opinion, in any form, which identifies an individual or from which an individual's identity is apparent or can be reasonably ascertained.
3. PERSONAL INFORMATION WE COLLECT AND WHY
3.1 What kind of personal information we collect
The information we collect will depend on the nature of your dealings with us. The types of personal information we may collect include:
- Your contact and identification details such as your name, address, date of birth, gender, telephone number, email address, driver licence details, vehicle registration details and passport information;
- Your image and movements on Closed Circuit Television (CCTV) footage;
- A voice recording from calls to certain airport operations or security telephone lines;
- Any information required for security reasons (for example, your photograph and background information when you apply for security clearance to access BAC land or premises);
- Information required for operational or safety reasons or for security at the Airport more generally;
- Transactional information provided when you purchase a product or service from us (for example, if you purchase car parking, your credit card details and vehicle registration number);
- Travel related information (for example, your vehicle registration number, visa status and flight details);
- Personal information provided when you commence a business relationship with us;
- Any correspondence between you and us; and
- Any other personal information you provide when you make an enquiry, request information, enter a competition, respond to marketing, correspond with us or lodge a complaint.
3.2 How we collect your personal information?
If possible, we always try to collect personal information directly from you when you deal with us such as when you make an enquiry, enter a competition run by us, make an application for a security clearance, respond to marketing or subscribe to a BAC publication, use or access any of our products or services, enter land or premises where CCTV is used or access our website.
We may also obtain your personal information from third parties we deal with, including:
- Law enforcement agencies (for example, Customs, the Australian Federal Police, the Queensland Police);
- Government agencies (for example, CASA, WorkCover and Federal, State or Local government bodies);
- BAC tenants and licensees (for example, airlines, car park operators and retail outlets on Brisbane Airport);
- Our professional advisers (for example, our insurers and consultants);
- Our contracted service providers (for example, contracted security, car parking, and cleaning companies); and
- Any other organisations conducting activities on behalf of BAC (for example, construction and related companies engaged by BAC).
We may also collect personal or other information from third parties you refer to us (for example, persons you engage to organise your travel). If we do so, we will assume and you will ensure that you have made that third party aware of your referral and the purposes involved in the collection, use and disclosure of the relevant personal or other information.
When you communicate with BAC through social media sites or using applications provided by third parties (for example, via your smart phone) we may collect information associated with that communication. If this occurs we assume you have informed yourself of the ways such sites or applications can collect and disclose your personal information to others (including BAC) and that you consent to that collection and disclosure and BAC’s collection for the purposes of your communication.
3.3 Reasons for collecting your personal information
We collect personal information as a condition of entry to BAC facilities so that we may carry out our functions or activities and to enable us to provide you with the products and services you require. This includes to:
- Keep in contact with you (where you have requested us to do so) and provide you with any information you have requested;
- Process any communications you send us (including answering any queries and dealing with any complaints or feedback you have);
- Determine your requirements to provide you with the appropriate products or services you require (for example, car parking or to any special travel requests you may have);
- Process applications effectively for the issue of authorities, licenses, passes, permissions and permits (including ADAs, ASICs, and other identification cards);
- Assess whether or not any authorities, licenses, passes, permissions and permits should be cancelled or suspended;
- Comply with our legal and regulatory obligations including for aviation transport security (for example, CASA audits);
- Maintain records required for security, aviation, insurance, claims or other legal purposes;
- Record, investigate and analyse any incidents or occurrences (including potential incidents and occurrences) which occur on BAC land or premises;
- Otherwise maintain and manage Airport operations and safety and general security at the Airport;
- Maintain any business relationship we may have with you;
- Facilitate any relevant consultation process between you and us;
- Help us develop, manage and improve services to our customers;
- Conduct retail and marketing activities including market research, providing offers, promoting our business and the Airport;
- Properly identify you and return any lost property (for example, passports or other items misplaced on BAC land or premises);
- Manage or enforce a contract or agreement BAC has with you or investigate, respond to or defend claims made against, or involving, BAC;
- To do anything you authorise or consent us to do; and
- Take any action we are required or authorised to take by law.
3.3.1 CCTV footage
Reasons we collect CCTV footage specifically include:
- Monitoring and maintaining transport security;
- Operational reasons such as traffic flow, passenger and aircraft facilitation and managing access;
- Detecting and deterring criminal behaviour on Brisbane Airport;
- Detecting and deterring suspicious, inappropriate or unauthorised use of our facilities; and
- Monitoring the safety and security of airport users and workers and conducting incident investigations.
3.4 What if you refuse to supply personal information?
If you do not provide us with your personal information, it may not be possible for us to provide you with the products, services or information you require.
Where it is lawful and practical to do so, we may allow you to deal with us anonymously.
4. DISCLOSING YOUR PERSONAL INFORMATION
4.1 Who we may disclose your personal information to
We respect the privacy of your personal information and will use and disclose it in accordance with the reasons for which it was collected and otherwise subject to the Privacy Act.
On that basis we may disclose your personal information to:
- Law enforcement agencies (for example, Customs, the Australian Federal Police, the Queensland Police);
- Government agencies (for example, CASA, WorkCover, various Federal, State or Local government bodies);
- BAC tenants and licensees (for example, airlines, car park operators, retail outlets on Airport, and other companies or businesses operating on BAC land or premises);
- Any other entity to which we are required or authorised by law to disclose such information (for example, CASA or the courts);
- Our professional advisers, contractors or other service providers we engage to carry out, or advise on, our functions or activities (for example, contracted security, car parking, cleaning, card services and communications companies, construction and related companies, consultants on any BAC project);
- Other organisations with whom we have alliances or arrangements for the purposes of promoting our respective products or services (for example, airlines, charities and community or sporting groups supported by BAC);
- Our business associates and others for purposes which are directly related to our purpose for collecting your personal information;
- Other parties which BAC have advised you of at the time the relevant personal information is collected; and
- With your consent, express or implied, to others.
4.2 Direct marketing
We may also use your personal information to provide you with information about our products and services. If you do not wish to receive this information, please contact us using our details set out in Part 13 below. After you have told us you no longer wish to receive marketing or promotional material from us, we will not send you any such material.
If you change your mind in the future about receiving marketing or promotional material from us, please contact us.
However, there may be times when the law requires us to provide certain information to you (for example, traveller safety information). We will continue to send this information even though you have told us you do not wish to receive other types of information about our products.
5. HOW WE STORE YOUR PERSONAL INFORMATION
Personal information is mainly stored in BAC's electronic databases but may be stored in cloud server arrangements. We take reasonable precautions to safeguard your personal information from loss, misuse, unauthorised access, modification or disclosure.
We may be required by law to retain certain information for a set period of time. Once this period of time expires, we will destroy or delete this information in a secure manner.
6. ACCESSING AND CORRECTING PERSONAL INFORMATION
To effectively conduct our business with you, it is important that the personal information we hold about you is complete, accurate and current. At any time while we hold your personal information, we may ask you to tell us of any changes to your personal information. Alternatively, if you are aware that the personal information we hold needs to be corrected or updated, please contact us using our details listed in Part 13 below.
You can also ask to obtain access to your personal information that we hold by contacting us at the contact details in Part 13 below.
In certain circumstances we may charge you a fee for providing you with access to your personal information, for example, if you make multiple requests for information, the information requested is voluminous or we incur third party costs in providing you access to your personal information.
Under certain circumstances in the NPPs, we may not be required to provide you with access or correct your personal information. Also, we may not be able to require other entities to provide personal information to you. If we decide not to provide you with access to or correct your personal information, we will give you reasons for our decision.
An "identifier" is a unique identification number assigned to you by the Commonwealth Government or a Commonwealth Government Agency. Examples of identifiers include your Tax File Number (TFN), Medicare number or passport number.
BAC will only use this information to identify you when we are required to do so by law or to properly identify you in order to protect your personal property or information.
8. OVERSEAS TRANSFER OF PERSONAL INFORMATION
BAC uses service providers of internet based services that have servers located overseas, including social media and cloud service providers. This means that personal information supplied to BAC via its websites or through BAC’s social media sites may sometimes be sent overseas.
If you elect to provide personal information to BAC through any of its online services you are deemed to consent to the overseas transfer that personal information.
Other than as described above, BAC will only transfer your personal information overseas if:
- We reasonably believe that the recipient of the information is subject to a law or contract which effectively upholds privacy principles similar to the NPPs;
- You have consented to the transfer;
- It is not practical to obtain your consent, the transfer is for your benefit and your consent would likely be given;
- The transfer of your information is necessary for the performance of a contract between you and BAC; or
9. SENSITIVE INFORMATION
"Sensitive information" is a kind of personal information which is given a greater level of protection under the NPPs. Examples of sensitive information include:
- Information about your health;
- Criminal records;
- Religious beliefs or affiliations; or
- Political opinions.
The NPPs impose greater obligations on us regarding any collection, use or disclosure we make of your personal information. We will only collect your sensitive information if we are permitted to do so under the NPPs, for example where:
- You have expressly consented to us doing so;
- We are required to by law; or
- The collection is necessary to establish, exercise or defend a legal claim.
10. ONLINE DEALINGS WITH BAC
10.1 Online payment systems
We take reasonable steps to maintain the security of personal information you provide to us online.
BAC uses third party payment process providers whose services meet stringent security requirements including Level 1 PCI DSS compliance, EMV certification and ISO 9001 accreditation. When you enter your payment details online, you are using a secure site which uses 1024 bit tunnelling encryption to protect your information during transmission. Transactions are protected by encryption technology and a combination of firewalls and intrusion detection systems.
We seek to keep current with available security and encryption technology so as to maintain the effectiveness of our security systems. However, no transmission over the Internet can be guaranteed as totally secure and accordingly, we cannot warrant or ensure the security of any information you provide to us over the internet. Please note that you transmit information at your own risk.
We reserve the right to gather more extensive information about any attempted access to the website that raises security issues and if appropriate, make disclosures to the relevant authorities.
10.3 Links to other websites
If you wish to make a complaint about how we have managed your personal information, please contact us at the contact details in Part 13 below.
If you are not satisfied with how we handled your complaint, you can lodge a complaint with the Federal Privacy Commissioner at:
Telephone: 1300 363 992 (if calling from outside Australia including Norfolk Island please call: +61 2 9284 9749)
TTY: 1800 620 241 (this number is for the hearing impaired only, no voice calls)
Post: Director of Complaints, Office of the Federal Privacy Commissioner, GPO Box 5218, SYDNEY NSW 2001
Fax: +61 2 9284 9666
13. OUR CONTACT DETAILS
Telephone: +61 7 3406 3000
Fax: +61 7 3406 3111
Post: Privacy Officer, P.O. Box 61, Hamilton Central, Queensland 4007, Australia