VicSRC collects your personal information where reasonably necessary to conduct one or more of our activities or services.
We will explain the purpose at the time we collect the information or as soon as practicable afterwards.
Reasons for collection include to:
Personal information will not be used for any other purpose without your consent, unless VicSRC is required by law to disclose that information.
VicSRC complies with all relevant privacy legislation. Only authorised VicSRC personnel are provided with access to personal information.
VicSRC will take all reasonable steps to protect against the loss, misuse and/or alteration of the information under its control including through appropriate physical and electronic security strategies.
If you believe the information we hold is inaccurate or out of date, contact VicSRC and we will update the relevant information accordingly.
If you wish to make an enquiry or complaint about your personal information at VicSRC please email [email protected].
Every effort will be made to resolve the issue quickly and effectively.
This website is owned and operated by the Victorian Student Representative Council (VicSRC).
We may collect personal information and/or sensitive information in the course of our activities and functions in managing and operating the Site, namely, when:
When you become a member of the VicSRC an account is created for you and all the activities you engage in through the VicSRC are linked to your account. Below we've detailed the information we collect about you depending on how you use the VicSRC, and how we obtain this information.
We collect your personal information directly from you unless impracticable or unreasonable to do so.
Information we collect includes:
Passive information we collect includes:
We collect sensitive information from you when:
Where applicable, we will request your consent to collect this information when you create a new member account for use of the VicSRC.
Personal information will not be collected by any person who is known by us to be under the age of fifteen (15) years old without guardian consent. Persons under fifteen (15) will require guardian consent before becoming a VicSRC member.
The purposes for which we collect, hold, use and disclose personal information are outlined below.
Purpose: The Site is a child safe organisation. We use the information you provide us with to keep you safe.
Example: For fraud and security monitoring purposes, for example, to detect and prevent cyber-attacks or attempts to commit identity theft.
Purpose: For business purposes
Example: For data analysis to improve the efficiency of our services. For audits to verify that our internal processes are functioning as intended and compliant with legal, regulatory or contractual requirements. For developing new features and services.
Purpose: To communicate with you via emails, notifications or other messages, consistent with any permissions you have communicated to us
Purpose: To share communications from external organisations we believe may be of interest to you.
Example: To send you information from our partner organisations or other organisations that share our purpose and values.
We may share your information with third parties, including law enforcement, public or governmental agencies or private litigants, if we determine that such disclosure is reasonably necessary to comply with the law.
We may also retain, preserve or disclose your information if we determine that disclosure is reasonably necessary or appropriate to prevent any person from harm, to address issues of national security or other issues of public importance, to prevent or detect violations of our Terms of Service or fraud or abuse of staff that operate and manage the VicSRC or members of the VicSRC.
We will endeavour to take all reasonable steps to keep secure any personal information recorded, and to keep this information accurate, up to date, complete and relevant. We implement appropriate technical and organisational measures to help protect the security of your personal data.
If we become aware that there has been unauthorised access to or unauthorised disclosure of personal information, or loss of personal information, that is likely to result in serious harm to any of the individuals whose information is involved, and we are unable to take any remedial action that would make serious harm no longer likely, we will take steps to notify any relevant regulator and affected individuals to the extent that we are required to do so under applicable laws.
We use third party storage and/or hosting providers to assist us in our business functions and activities in operating and managing the Site. We may use these third parties to:
We may disclose your personal information to overseas recipients or third parties where we rely on those recipients to store or host your personal information.
Information you provide us or which is collected by us is stored by and disclosed to third party data storage providers electronically and may be combined or linked to other information we or they hold about you.
Your personal information is not made available to external parties without your consent, save where set out above on the basis that its use or disclosure in those circumstances is directly related to the primary purpose for which we collect it.
We will retain your personal information for as long as needed or permitted in light of the purposes for which it was obtained.
Personal information is deleted when an account is deleted. You have the ability to delete your own account at any time.
You have the right to access, review and correct your personal information that may be recorded on the database for the Site. Information may be reviewed by contacting us via the contact details listed below. Please allow 30 days for this request to be processed.
There may be instances where we are not required to provide you with access to your personal information. For example, if it interferes with the privacy of others, if the information relates to existing or anticipated legal proceedings, or if your request is vexatious, if the information is subject to confidentiality, or another permissible exception applies.
If we refuse your request for correction of or access to your personal information, you will be advised in writing of the grounds for refusal, and notified of available complaint mechanisms.
We are committed to providing a fair and responsive system for handling and resolving complaints. You have the right to complain, and to have your complaint handled efficiently. We will attempt to respond to, and/or action, all complaints within 30 days of lodgment.
In order to process any request for access or correction of personal information, we may need to obtain a minimum level of information from an individual including full name, date of birth and details of the request evidencing the individual's right to access the data.
If you are seeking access to or correction of information on another person's behalf, we will also require written authorisation from that individual. We reserve the right to refuse access to personal information under the grounds permitted by the Privacy Act.
If at any time you wish to lodge a privacy complaint in respect of the handling, use or disclosure of their personal information by us, or make a request for access to or correction of your personal information, you can do so by submitting your complaint in writing, endorsed "Privacy", and addressing it to the contact details listed below.
If we receive a complaint from you about how we have handled your personal information, we will determine what (if any) action we should take to resolve the complaint. We will respond to your complaint within 30 days.
We may occasionally make changes to this policy.
When we make material changes to this policy, we will provide you with notice either via email or displaying a prominent notice on the VicSRC website.
Nina Laitala, VicSRC Chief Executive Officer
0411 679 050
This policy was last updated in May 2019