Background

From 21 December 2001, Paul Hartmann is required by the Privacy Act 1988 (Cth) (the “Privacy Act”) to comply with ten National Privacy Principles ("NPPs") (subject to the other provisions of that Act).  The NPPs regulate the manner in which personal information is handled throughout its life cycle, from collection to use and disclosure, storage, accessibility and disposal.

Personal information is information or an opinion, in any form and whether true or not, about an individual whose identity is apparent or can reasonably be ascertained from the information or opinion. 

Sensitive information

Special provisions apply to the collection of personal information which is sensitive information.  This includes health information and information about a persons' race, ethnic origin, political opinions, membership of political, professional or trade associations, religious or philosophical beliefs, sexual preferences and criminal history. 

Health information is defined in the Privacy Act to relevantly include:

(a) information or an opinion about:

(i) the health or a disability (at any time) of an individual; or

(ii) an individual's expressed wishes about the future provision of health services to him or her; or

(iii) a health service provide, or to be provided, to an individual;

that is also personal information

An example of health information is information contained in a patient's hospital records.

Paul Hartmann will only collect sensitive information if the individual about whom the information relates has consented to the collection of the information or if the collection is otherwise permitted under the Privacy Act.

The type of sensitive information Paul Hartmann may collect can include (but is not limited to) a patient's medical condition.  We collect this type of information to allow us to provide the correct product from our range.

Any health information we receive about patients is collected and held in strict confidence.  Paul Hartmann trains its employees and distributors who handle personal information to respect the confidentiality of customer information and the privacy of individuals.  Paul Hartmann regards breaches of your privacy very seriously and will impose appropriate penalties, including dismissal.  Paul Hartmann has relevant staff members who ensure that Paul Hartmann's management of personal information (including sensitive information) is in accordance with this Policy and the Privacy Act.

Paul Hartmann will comply with all applicable State and Territory privacy laws.

Collection of personal information by Paul Hartmann

To the extent required by the Privacy Act:

• Paul Hartmann will not collect personal information about you unless that information is necessary for one or more of our functions or activities. 
   
• Paul Hartmann will collect personal information only by lawful and fair means and not in an unreasonably intrusive manner.
  
• when Paul Hartmann collects personal information directly from you, we will take reasonable steps at or before the time of collection to ensure that you are aware of certain key matters, such as the purposes for which we are collecting the information, the organisations (or types of organisations) to which we would normally disclose information of that kind, the fact that you are able to access the information and how to contact us (or example, where personal information is collected on a form, we will generally include a written privacy statement on the form which sets out these details);  
  
• Paul Hartmann will collect your personal information directly from you where it is reasonable and practicable to do so.  Where Paul Hartmann collects information about you from a third party, we will still take reasonable steps to ensure that you are made aware of the details set out above.

Use and disclosure of personal information by Paul Hartmann

If Paul Hartmann uses or discloses your personal information for a purpose (the “secondary purpose”) other the main reason for which it was originally collected (the “primary purpose”), to the extent required by the Privacy Act, we will ensure that:

• the secondary purpose is related to the primary purpose of collection (and directly related in the case of sensitive information), and you would reasonably expect that Paul Hartmann would use or disclose your information in that way; or
  
• you have consented to the use or disclosure of your personal information for the secondary purpose; or
  
• the use or disclosure is required or authorised by or under law; or
  
• the use or disclosure is otherwise permitted by the Privacy Act (for example, as a necessary part of an investigation of suspected unlawful activity).

Data quality and security

To the extent required by the Privacy Act, Paul Hartmann will take reasonable steps to:

• make sure that the personal information that we collect, use and disclose is accurate, complete and up to date;
  
• protect the personal information that we hold from misuse and loss and from unauthorised access, modification or disclosure; and
  
• destroy or permanently de-identify personal information that is no longer needed for any purpose that is permitted by the Privacy Act.

Anonymity

Paul Hartmann will generally provide individuals with the option of not identifying themselves when entering transactions when it is lawful and practicable to do so.

Use of Commonwealth government identifiers

Paul Hartmann will not use Commonwealth government identifiers (“Identifiers”) (such as Medicare numbers) as its own identifier of individuals.  We will only use or disclose Identifiers in the circumstances permitted by the Privacy Act.

Transfer of personal information overseas

If Paul Hartmann transfers your personal information outside Australia, we will comply with requirements of the Privacy Act that relate to transborder data flows.

Access and correction of your personal information

Please contact Paul Hartmann if you would like to access or correct the personal information that we hold about you.  Paul Hartmann will generally provide you with access to your personal information if practicable (although a fee may be imposed), and will take reasonable steps to amend any personal information that is incorrect.  In some circumstances, Paul Hartmann may not permit access to your personal information, or may refuse to correct your personal information, in which case we will provide you with reasons for this decision.

Further information

Please contact us if you have any queries about the personal information that Paul Hartmann holds about you or the way we handle that personal information.  Our contact details for privacy queries are set out below.

Paul Hartmann Privacy Contact
Paul Hartmann (02) 8762 7000

Further information about the NPPs and the application of the Privacy Act to the private sector generally can be found at the website of the Office of the Federal Privacy Commissioner, at http://www.privacy.gov.au/.

Complaints

Please contact us the Paul Hartmann Privacy Contact using the above details if you have any concerns or complaints about the manner in which your personal information has been collected or handled by Paul Hartmann.