Last updated 24 April 2020
Specifically, in Australia, ESA is bound by the Australian Privacy Principles (APPs) in the Privacy Act which regulate how organisations such as ESA may collect, use, disclose and store personal information, and how individuals may access and correct personal information held about them.
"Personal data" is anything that discloses your identity, that is unique to you. For example: a name, an identification number, location data or an online identifier. It also includes "personal information" as defined in subsection 6(1) of the Privacy Act:
When you register on the Website as:
an education user, directly or via Single Sign On*, ESA may collect the following personal data:
Single Sign On enables certain users to gain access to the Website via their jurisdiction or school education network (Identity Provider) without going through the usual registration process and having to log in each time. When first connecting to the Website, a user record will automatically be created for the user. The user record will include the user's name and email address provided from the relevant Identity Provider and information provided in the account details screen, which is optional for the user to complete.
When you use the Website, ESA collects the following information relating to your use of the Website:
Usage statistics or patterns obtained from tracking the level and range of interest in the Website are collected in order to improve the Website. This information may be connected to a user's profile but will be de-identified prior to any use in reports.
ESA may collect your personal data when you:
Sometimes ESA collects your personal data from a third party for example, ESA may collect your personal Data from a relevant jurisdiction or school in order to enable Single Sign On.
Where it is not impractical or unlawful, you may interact with ESA without identifying yourself or using a pseudonym. As a general principle, you provide ESA with your personal data voluntarily and there are no detrimental effects for you if you choose not to consent or to provide personal data. However, there are circumstances in which ESA cannot take action without certain of your personal information. For example:
ESA will only use your personal data for the stated purpose for which it was provided or otherwise in accordance with the law.
Therefore, ESA will use your personal data for the following purposes only ("Permitted Purposes"):
ESA will only communicate with you via email after you have opted in on the Website to receive emails and ESA will provide you the opportunity to opt out anytime if you do not want to receive further communication from ESA.
ESA may share your personal data in the following circumstances:
Specifically ESA may use data from your use of the Website for developing aggregated data and statistics (refer to 4.4 below).
Usage statistics or patterns obtained from tracking the level and range of interest in the Website are collected in order to improve and develop the Website.
Google Inc. uses this information for the purpose of evaluating your use of the Website, compiling reports on Website activity for ESA and providing other services relating to Website activity and internet usage. Google Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google Inc's behalf. Google Inc. will not associate your IP address with any other data held by Google Inc.
ESA takes reasonable steps to:
Personal data may be kept on ESA's personal data technology systems, those of ESA's contractors or in paper files.
Personal data collected by ESA via this Website is stored in Australia; and not disclosed, accessed or transferred to overseas recipients.
If any of the personal data that you have provided to ESA changes, for example if you change your email address or if you wish to cancel any request you have made of ESA, or if you become aware that ESA has any inaccurate personal data about you, please let ESA know using the contact information in paragraph 8 below. ESA will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to it. If you are a Single Sign On user, you:
ESA will delete your personal data when it is no longer reasonably required for the Permitted Purposes or you withdraw your consent (where applicable) and ESA is not legally required or otherwise permitted to continue storing such data.
Subject to certain legal conditions, you have the right to request a copy of the personal data about you which ESA holds, to have any inaccurate personal data corrected and to object to or restrict ESA using your personal data. You may also make a complaint if you have a concern about ESA's handling of your personal data.
If you wish to do any of the above, please contact ESA using the contact information below. ESA may request that you prove your identity by providing ESA with a copy of a valid means of identification in order for ESA to comply with its security obligations and to prevent unauthorised disclosure of data.
ESA will consider any requests or complaints which it receives and provide you with a response in a timely manner. If you are not satisfied with ESA's response, you may take your complaint to the relevant privacy regulator. In Australia, the relevant regulator is the Office of the Australian Information Commissioner.
If you have any questions, comments, concerns or complaints about ESA's privacy practices for this Website, you can contact ESA by: