This Privacy Notice is intended to describe the practices EY follows in relation to www.startsmart.com.au (“Website”) with respect to the privacy of all individuals whose personal data is processed and stored because of their use of the Website.
Who manages the Website?
“EY” refers to one or more of the member firms of Ernst & Young Global Limited (“EYG”), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by providing this Website from which your personal data will be processed and stored is Ernst & Young Community Impact Services. The information you provide is being collected by EY, as a service provider to the Commonwealth Bank.
The personal data you provide on the Website may be shared by Ernst & Young Community Impact Services with one or more member firms of EYG (see “Who can access your information” section below).
The Website is hosted on servers in Australia.
Why do we need your information?
The Website provides information about the Commonwealth Bank’s Start Smart program.
Your personal data processed from the Website is used as follows:
- To respond to your enquiry or expression of interest in the program;
- To contact you in order to book the program; or
- To contact you to invite you to events or for other direct marketing purposes.
EY relies on the following basis to legitimize the processing of your personal data: You have given consent to the processing of your personal data for one or more specific purposes.
The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.
What type of personal data is processed?
The Website processes these personal data categories: First name, last name, email and telephone number.
This data is sourced from you directly.
Sensitive Personal Data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation. EY does not intentionally collect any sensitive personal data from you via the Website. The Website’s intention is not to process such information.
Who can access your information?
Your personal data is accessed by the following persons/teams: The program team, including facilitators or programs and administrative staff.
From time to time, we may also share your personal data with our clients (or other third parties) who may be providing, offering, sponsoring or otherwise assisting in the conduct of, the program you are participating in or expressed your interest to participate in. In relation to the Start Smart program, this may include sharing your information with Commonwealth Bank and other Start Smart Program stakeholders.
Unless it is not reasonably practicable for us to do so, we will notify you before we disclose your personal information to our clients.
The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at www.ey.com/ourlocations). EY will process your personal data from the Website in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY’s Binding Corporate Rules (www.ey.com/bcr).
All information collected via the Website is retained in accordance with EY Global Records Retention policies and procedures.
Your personal data will be retained in compliance with privacy laws and regulations. After the end of the data retention period, your personal data will be deleted.
EY is committed to making sure your personal data is secure. To prevent unauthorized access or disclosure, EY has technical and organizational measures to safeguard and secure your personal data. All EY personnel and third parties EY engages to process your personal data are obliged to respect your data’s confidentiality.
Controlling your personal data
EY will not transfer your personal data to third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law to do so.
You are legally entitled to request details of EY’s personal data about you. To confirm whether your personal data is processed from the Website or to access your personal data collected from the Website, contact your usual Start Smart representative or email your request to firstname.lastname@example.org or email@example.com or firstname.lastname@example.org.
Rectification, erasure, restriction of processing or data portability
You can confirm your personal data is accurate and current. You can request rectification, erasure, restriction of processing or a readily portable copy of your personal data by contacting your usual Start Smart representative or by sending an e-mail to email@example.com or firstname.lastname@example.org or email@example.com.
Our Privacy Statement
Our Privacy Statement provides more information about how we manage and protect the personal information we hold about individuals.
If you are concerned about an alleged breach of privacy law or any other regulation, contact EY’s Global Privacy Officer, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at firstname.lastname@example.org or email@example.com or firstname.lastname@example.org or via your usual Start Smart representative. An EY Privacy Officer will investigate your complaint and provide information about how it will be handled and resolved.
If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country’s data protection authority. You can also refer the matter to a court of competent jurisdiction.