Approved: 14/01/2025 Last Review:
Introduction
CAEX is obliged and is committed to protecting the personal and health information of members and guests.
In addition, in some situations, the Privacy and Data Protection Act 2014 (Vic), including the
Victorian Information Privacy Principles, and the Health Records Act 2001 (Vic), including the Health Privacy Principles, (“Privacy Laws”) regulate the way in which CAEX handles personal and health information.
This policy provides information about how CAEX may collect, hold, use and disclose your personal and health information and comply, when required, with the requirements of the Privacy Laws.
When used in this policy, “we”, “our” and “us” refer to CAEX Bushwalking Club Inc.
What Personal Information do we Collect?
We collect personal information to carry out our functions properly and efficiently, to provide you with requested services and to facilitate your membership with us, including marketing and promotion services that may be of interest to you.
The personal information collected and held about you will vary depending on the circumstances of collection and may include:
- Your name, address, telephone/contact numbers, car registration and email address.
- Information about your emergency contact person in case of an emergency, or information about your health history and relevant health conditions.
- Information about your dealings with CAEX and use of your membership.
- Details of programs/activities/walks you have participated in.
- Other information provided voluntarily by you, for example in response to surveys or competitions.
If you do not provide us with some or all the information that we request, then this may affect our ability to communicate with you or provide the requested services.
By not providing requested information, you may not be able to participate in programs or activities or apply for volunteer positions with us. If it is impracticable for us to deal with you because you do not provide requested information or consent, we may refuse to do so.
We take all reasonable steps to ensure that the personal information we collect, use and disclose is accurate, complete and up to date. If you find that the personal information we hold about you is inaccurate, incomplete or out of date, please contact us (secretary@caexbushwalkingclub.org.au).
Where it is necessary to prevent serious and imminent harm or to provide emergency care, we will collect health information and advise of the main consequences if the information is not provided. Where practical to do so, we will request your express consent to us collecting such information at the time this information is collected – for example, by requesting that you fill out an emergency information form.
These steps may include advice in person, in writing, over the phone or via documentation provided to you.
If you do not wish for us to collect certain information about you, you need to advise us at or before the point of collection, and we will discuss with you any consequences this may have on our ability to carry out our functions in relation to you.
How do we collect your personal information?
We may collect personal information about you:
- Directly from you, for example when you provide information to us by phone, email, in an application form, risk waiver forms, when you purchase tickets to an event, submit information through or access our website;
- Where the personal information is in relation to a child, from the parent or other responsible person associated with that child;
- From publicly available sources; or
- Where a collection is required or authorised under law or by court or tribunal order.
How do we use your personal information?
CAEX will only use and disclose your personal information in accordance with this Policy and, when applicable, the Privacy Laws.
Our main purposes for collecting, holding, using and disclosing personal information are to:
- Run and administer and record activities and other events relating to bushwalking.
- Request an ambulance or to otherwise seek urgent medical assistance as required in an emergency; and
- Keep you informed of news and information (such as advance notice of events or programs) relating to bushwalking, including by distributing newsletters, publications and other communication via various mediums which you have consented to receive.
In addition, we may use de-identified information to carry out research, to plan events and activities or to prepare submissions to government or a government body. De-identified information is information which has been aggregated or otherwise de-identified so that it cannot be used to identify you or any other individual and does not constitute your personal information.
When do we use or disclose your personal information?
Your personal information may be used and disclosed by CAEX in accordance with this Policy, the Privacy Laws (when applicable), the purposes outlined above or in any of the following circumstances:
- to our insurers for the purposes of settling or commencing a claim;
- to our professional advisers, including our accountants, auditors, and lawyers;
- with your express consent;
- when required or authorised by law;
- to an enforcement body or emergency service provider when reasonably necessary; or
- to lessen or prevent a threat to an individual or public health or safety.
We do not, sell or trade your personal information with third parties unless we have your permission to do so or are required to do so by law. We will only disclose personal information to third parties where such disclosure is necessary to perform our obligations to you, in which case the third party may only use your personal information for the necessary purpose of fulfilling our obligations to you.
How can you access the information we hold about you?
You have the right to access your personal information and to determine exactly what personal information we hold about you.
For security purposes, if you would like to access personal information that we hold about you, we require you to put your request in writing. You must include your name and contact details, the personal information you would like to access, how you would like to receive this information (i.e. by email or post) and whether you authorise another person or organisation to access the personal information on your behalf. If we do not allow you access to any part of the personal information we hold about you, we will tell you why. We will respond to your request within 30 days.
We will not charge you for lodging a request to access your personal information, but we may charge you for our reasonable cost in supplying you with access to this information.
Information storage and protection
We store information in different ways, including in paper and electronic form. When your information is provided to us, the information may be combined or linked with other information held about you.
We do not retain personal information longer than necessary for the purposes outlined above and for compliance with legal requirements, unless otherwise agreed by you. At the end of the retention period, we will take reasonable steps to destroy or de-identify your personal information.
We take steps to protect the information we hold from misuse, loss, unauthorised access, modification or disclosure. The security measures we use include standard confidentiality requirements of our office bearers and standard security measures for system access (documents and website and Facebook public and private groups). In addition, only personal information which is necessary for each specific purpose mentioned above is collected, used and disclosed by us.
Opt-out / Unsubscribe
If you have agreed to receive information about CAEX such as news or marketing material, you can unsubscribe from our communications including, email, SMS or posted offers at any time by contacting us using the details specified in this Privacy Policy, or by following the instructions contained in the electronic communication. It may take up to five working days to give effect to an opt out or an unsubscribe, so for a period you may still receive communications from us after your request is received.
Complaints and contacting us
If you would like to access the personal information we hold about you, or have any questions in relation to this policy or a complaint, please contact:
Privacy Officer: Secretary of CAEX Bushwalking Club Inc.
Email: secretary@caexbushwalkingclub.org.au
We encourage you to contact us if you have any concerns or complaints, if you feel your personal information has been mishandled, or if we have failed to meet your expectations. We take all privacy complaints seriously and will investigate your complaints in a confidential manner. You will be informed of the outcome of the investigation within a reasonable period of time.
Changes to the privacy policy
From time to time, we may need to update this Privacy Policy to reflect any changes in law or our organisation’s practices. We will notify you of any amendments by posting an updated version of this Privacy Policy on our website (https://caexbushwalkingclub.org.au).
If the Privacy Policy changes materially so that your personal information will be used in a manner different from that stated at the time of collection, we will notify you by email, and where necessary we will seek your prior consent. However, you are responsible for ensuring we have a current working email address for you. If the email address you have given us is incorrect or no longer operable, we will try to contact you by phone and failing that, we will post a notice on our private Facebook group.