Privacy Statement

The Personal Data we collect and why we collect it

We collect Personal Data in a clear, honest and transparent way from a range of individuals in a variety of ways. When we collect Personal Data from you, we ensure you understand what Personal Data we are collecting and what we intend to use your Personal Data for.

We may collect your Personal Data when you call or write to us; when you visit one of our sites or offices; when you enquire about our services; when we provide services to you; when you offer or provide services to us; when you browse, visit, make an enquiry, or otherwise interact with our websites; when you enquire as to, or apply, for job with us; and when you work for us, with us, or on our behalf.

In some circumstances, we collect Personal Data about you from a third-party source, such as government bodies, credit agencies, or from publicly available records or sources of information.  
The types of Personal Data we collect may include your name, gender, home or postal address, job title, date of birth, photographic identification, email address, telephone number, mobile phone number, details of business interests, academic qualifications and experience, professional associations and memberships, bank account details (including credit or debit card details), and your service preferences.

From time to time in certain circumstances, sensitive personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or medical conditions, genetic or biometric information, sexual orientation, or criminal convictions and offences may be processed by us if this processing is required to comply with our legal and regulatory obligations and where you have provided this information to us voluntarily or have otherwise consented for us to collect and process it.

We only collect Personal Data for the purpose for which you gave it to us for our legitimate business purposes, or as otherwise as contained in this Privacy Policy.

The basis for processing your Personal Data

We will only collect and process your Personal Data where we have a lawful reason to do so. The lawful basis for which we collect and process your Personal Data, will usually be one of the following:

• you have provided us with your consent;
• to perform a contract that we have in place with you, or because you have asked us to take specific steps before entering into a contract;
• our legitimate business interests, including compliance screening such as credit checks, reference checks or sanctions due diligence; for insurance purposes; to monitor compliance with our policies and standards; and to protect, secure and detect any threats to our premises and systems;
• compliance with our legal and regulatory obligations.

We may also process your Personal Data for purposes related or ancillary to any of the above where it could reasonably be expected that such processing would occur.

Marketing

We will not use your Personal Data for our marketing purposes (such us communicating with you to keep you up to date as to the services we offer, participating in customer surveys, marketing campaigns, market analysis and promotional events), in countries where your consent is required for this purpose, unless you have provided us with such consent.  For all countries, you can choose not to receive marketing communications from us at any time by following the unsubscribe link in marketing communications you receive from us.  Alternatively, you can contact us via the information contained in the Contact Us section of this Privacy Policy.

Sharing of Personal Data

We may share your Personal Data with any individual within the ALS Group who needs to know that information in order for us provide you with the services you have requested and for us to administer our relationship with you, or as otherwise as required for the purposes set out in this Privacy Policy. Individuals within the ALS Group are required to maintain the confidentiality and security of Personal Data and to only process Personal Data in accordance with this Privacy Policy.

We may share your Personal Data with third parties, such as our suppliers and service providers, where we have engaged them to perform services on our behalf; or where we have a lawful reason or legal obligation to do so (e.g. to comply with a court order or a request from one of our regulators).

Where we disclose Personal Data to third parties engaged by us to perform services on our behalf, we will require that the third party undertake to treat the Personal Data as required by this Privacy Policy and in accordance with applicable data protection and privacy laws.

Personal Data of others that you provide to us

If you provide Personal Data to us about another person (e.g. one of your employees, a colleague or associate, someone you do business with, or a family member), you must ensure that you are authorised to disclose that information to us, and that we may collect, process and share that Personal Data as set out in this Privacy Policy without us needing to do anything further.

Keeping Personal Data secure

We implement appropriate industry-standard administrative, technical, organisational and physical safeguards that are intended to appropriately protect your Personal Data against unauthorised or unlawful processing; and against accidental loss, misuse, unlawful destruction or deletion, or unauthorised alteration or disclosure. We will require that our business partners, suppliers, service providers and sub-contractors comply with this Privacy Policy, and all applicable data protection and privacy laws in order to protect and secure any Personal Data that may be shared with them.

Transferring Personal Data

Given we are a global organisation, we may transfer your Personal Data abroad if required for the purpose for which you provided it to us, or as otherwise for the purposes outlined in this Privacy Policy.

By providing us your Personal Data, you agree and consent to the transfer of your Personal Data to a country other than your own. When transferring Personal Data aboard, we put in place adequate safeguards to protect your Personal Data, including making sure that it is managed in accordance with this Privacy Policy and in compliance with the requirements of applicable data protection and privacy laws.  This includes implementing standard contractual clauses approved by the European Union in relation to transfers from the European Economic Area (“EEA”) to non-EEA countries.

Retention of Personal Data

Your Personal Data will be deleted or destroyed when it is no longer required for the purposes for which you gave it to us or you have requested that we delete it, and we are not legally required to retain it.

Respecting rights

Subject to applicable legislative conditions and exceptions, we recognise rights in relation to Personal Data.  This includes rights in relation to:

• requesting information about what Personal Data we process about you and the rationale for such processing;
• obtaining a copy of your Personal Data;
• having any inaccurate or incomplete Personal Data that we hold about you updated or corrected;
• requesting that we delete your Personal Data;
• withdrawing your consent to our processing of your Personal Data;
• objecting to our processing, or restricting our processing of, your Personal Data; and
• having your Personal Data transmitted to another data controller.

We also recognise your rights to make a complaint if you have a concern about our handling of your Personal Data.

If you wish to do any of the above, please contact us via the information contained in the Contact Us section of this Privacy Policy. We will respond to your request within the specific time period required by the relevant data protection and privacy laws (if applicable), or otherwise within a reasonable period of time.

So that we may respond to your request, we may require you to provide us with proof of your identity through the provision of a valid form of identification. This is to ensure that we comply with our obligation to keep Personal Data secure and so as to ensure the prevention of the unauthorised disclosure of Personal Data.

Should you not be satisfied with our handling of your request, you can contact the relevant privacy regulator or supervisory authority to make a compliant.

Cookies

Our websites use cookies to help provide you with the best experience when visiting and interacting with our websites.  Cookies are small text files that are stored on your device when you visit or interact with a website. You can configure your web browser to reject or delete cookies, however this may cause our websites to have limited functionality.

We use cookies to make our websites work as you would expect; to save you having to login every time you visit certain section of one of our websites; to remember your settings during and between visits to our websites; to improve the speed and security of our websites; and to continuously improve our website for you.

Accessing other websites via hyperlink

ALS Group websites may provide access to other websites via hyperlinks that are owned and operated by third parties which are not subject to this Privacy Policy.  As we do not have any control over these websites, before you use these websites, you should review the privacy policy of each of the websites you access via a hyperlink to determine whether that website’s privacy policy is acceptable to you.

Updates to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time so that it reflects any changes to the way we process your Personal Data or to reflect changes in our legal and regulatory obligations.  Any updates to this Privacy Policy will be posted to www.alsglobal.com and on our intranet, with updates taking effect from the time of posting.

Contact us

If you have questions or concerns about our Privacy Policy, please contact us or write to:

The Privacy Officer
ALS Limited 
PO Box 66
Everton Park QLD 4053
Australia

Effective: 12 March 2014
Last updated: 18 July 2018