PRIVACY POLICY

 

Introduction

South Bank Corporation (ABN 95 927 817 538) (“SBC”, “we”, “us”, “our”) is committed to protecting your personal information. Please read this Privacy Statement carefully as it sets out how and why SBC uses your personal information when you access our website, services and/or otherwise engage with us.

If you have any questions or comments about this Privacy Statement, please find our contact details in section 9 “How can you contact us”.

We may change this Privacy Statement from time to time by updating this page. This Privacy Statement does not apply to any third-party websites, to which you may be directed from our website. We do not accept any responsibility or liability for the privacy practices of such third parties and your use of them is at your own risk.

1. About South Bank Corporation

SBC is the development and management authority for the Brisbane South Bank precinct. The precinct includes the Brisbane Convention and Exhibition Centre, the South Bank Plaza, restaurants, beach, carpark and parklands. SBC has day-to-day responsibility for overseeing the precinct’s operations, maintenance, security, events and commercial assets.

2. What personal information do we collect about you and for what purposes

We may collect personal information from you or individuals working for your organisation in various circumstances, including in the use of our website, attendance at one of our events and/or where we otherwise engage with you. The personal information that we may collect and the reasons for using it will depend on the nature of your relationship with us but may include the types of information and purposes set out below:

  • Contact Information – This includes personal information such as your name, title, position, the company you work for, your address, your postal address, email address and phone number. We may also ask about your relationship to another person, for example to establish any conflict of interest that might exist.  We require the above information in order to engage with you for business purposes.
  • Identification and Verification – We may ask for your driver’s licence, passport or other official photographic document to verify your identity, as well as other information relating to your background.  Aside from the data you provide to us directly, we may also find information about you from other sources, such as from tax or regulatory authorities, third-party background screening providers (refer to section 4 for more information on SBC’s use of third parties), and/or from publicly available registers or websites where you have voluntarily made your personal information available (e.g. LinkedIn).  We require this information as part of our business acceptance processes and to comply with our legal obligations.
  • Events – We may collect basic contact information from you when you attend an event at the South Bank precinct. We use this information to identify you for security and safety reasons, and so that we can invite you to future events (see section 3 on marketing). You may wish to inform us of any specific dietary requirements and/or tell us about any disabilities you have so that we can make the reasonable adjustments you require to facilitate your attendance at an event. Such information falls into the category that the privacy law considers to be inherently sensitive as it relates to your health/disability and/or potentially your religion (where you request a kosher food option for example). Providing this type of information is optional, so you do not have to advise it to us if you do not wish to. If you have a food allergy and choose not to disclose it, we cannot be responsible for any harm caused.
  • On-line interactions – As you interact with our website or social media platforms (e.g. Facebook, Instagram), we may automatically collect personal information from your device by using cookies and other similar technologies. Processing such information is necessary for us to improve our website and platforms and provide a more relevant on-line experience to you. This information is not used to develop a personal profile of you.
  • Marketing and personal information gathered through our website – Certain sections of our website invite you to subscribe to receive newsletters or take part in competitions or surveys. If you do so, we will collect some or all of the following information: your first and last name, email address, address and mobile number. We may also collect this information about you when you have physically attended an event hosted by SBC or one of our event sponsors so that we can invite you again in the future. Note that you can opt out of receiving marketing communications at any time. For further information, please see section 8, “What are your rights over your personal information”.
  • Recruitment – SBC will collect and use your personal information when you apply for a job (including a volunteer position) with us. We may receive information about you through a recruitment agency or directly from you. The personal information will include information relating to your education, employment history and other background information such as your right to work in Australia.
  • Security measures – SBC may collect and store personal information about you when you visit the South Bank precinct or if you use the public car park. We collect data using our camera surveillance systems (i.e. CCTVs) to ensure public safety.
  • Carpark – If you book a parking space in the South Bank precinct carpark, our third-party service provider may collect and use your personal information (i.e. name, address, and phone number,) in accordance with its privacy policy). The personal information we collect, including through our automatic number plate recognition cameras, shall be used for the purposes of calculating the cost of car parking.

3. When and how we use your personal information

In general, we need the personal information described above because it is necessary in SBC’s legitimate business activities to provide its services to either engage with you, or to develop and to manage the operations of the South Bank precinct. In addition, it may be necessary for SBC to collect and use personal information to perform a contract with you or with your organisation. For example, your relationship with us may involve the transfer of personal information of employees, customers and/or other third parties. Without this information, we cannot enter into the contract.

In some instances, it is necessary for SBC to collect certain personal information to comply with legal and regulatory requirements. For example, in order to comply with Australian workplace laws, we need to obtain the identity of relevant individuals and conduct certain background checks on them before we onboard a new employee.

4. Who do we share your personal information with

We may share information that you have provided to us as necessary with certain third parties such as service providers acting on our behalf who will use the data to provide the service. These may include insurers, IT service providers, recruiters, accountants, auditors, state government entities, caterers, etc. We will ensure that any third-party service provider that we use commits to an appropriate level of security and confidentiality to protect your personal information.

In certain circumstances, we may have to disclose your personal information for legal or regulatory purposes, such as where a court, the police or other law enforcement agency or regulatory body has asked us for it.

5. Is your personal information transferred overseas

From time-to-time it may be necessary to send your personal information to third parties (as per section 4 “Who do we share your personal information with”). For example, our website is hosted on Microsoft Azure servers in Australia, and data collected by our marketing platform is based in the USA.

Some of the countries where your personal information is transferred have a different standard of data protection than the country in which you are situated. However, we have put in place contractual or other appropriate protections to ensure that your information is safeguarded to the same standards globally.

6. How do we keep your personal information secure

We are committed to ensuring that any personal information that we hold about you is kept securely in accordance with our policies and procedures. These include appropriate physical and technological security measures, such as access controls, regular penetration testing of our systems and careful selection of staff and third-party service providers.

7. How long will we keep your personal information

Your personal information will be retained in line with legal and regulatory retention periods. At the end of any retention period, your personal information will either be securely deleted in its entirety or anonymised so that you can no longer be identified from that information.

8. What are your rights over your personal information

You may have various legal rights in relation to your personal information, as set out in this section.

Such rights may allow you to ask SBC to:

Provide a copy of your personal information (subject to the privacy rights of other people and the information already provided to you in applicable privacy notices); Correct any inaccuracies in your personal information by informing us to make the necessary changes; Modify or withdraw your consent for the collection, use and disclosure of your personal information (see section 3 “When and how do we use your personal information”). You may enquire about the above rights by contacting SBC’s Privacy Officer (see section 9 “How can you contact us”).

9. How can you contact us

If you have any concerns, or requests related to how we collect and handle your personal information, or if you have a complaint or question that hasn’t been covered above, please contact us by emailing privacy@south-bank.net.au 

10. Complaints

If you are concerned your personal information has been mishandled, you can make a complaint to the Queensland Office of the Information Commissioner (OIC), which is an independent government agency and regulator with primary responsibilities for privacy and freedom of information. However, we would appreciate the chance to understand and address any concerns you might have before you contact the OIC.

11. Changes to this Privacy Statement

This Privacy Statement was last updated in June 2024. We may change this Privacy Statement from time to time by updating this page.