隱私權

DESTINATION NSW – PRIVACY POLICY

 

新南威爾士州旅遊局（Destination NSW）致力保障您的隱私權。Keeping your data safe and increasing accountability and transparency are important principles to us. This Privacy Policy is being updated as a result of the General Data Protection Regulation (‘the Regulation’) being introduced. This Regulation is designed to protect all European Union citizen data privacy and make all organisations aware of how they deal with and handle privacy. The Regulation comes into effect on 25 May 2018.

 

Destination NSW is the lead government agency for the New South Wales (NSW) tourism and major events sectors. Our role is to market Sydney and NSW as one of the world’s premier tourism and major events destinations; to secure major sporting and cultural events; to work in partnership with Business Events Sydney to win major international conventions and incentive travel reward programs; to develop and deliver initiatives that will drive visitor growth throughout the State; and to achieve the NSW Government’s goal of doubling expenditure within the State’s visitor economy by 2020.

 

Destination NSW is based in Sydney, New South Wales, Australia and has offices in the USA, South Korea, New Zealand, India, Germany, United Kingdom, Singapore and Japan.

 

1.     Privacy Legislative Framework

 

Destination NSW will collect, store, use and disclose Personal Information in accordance with the PPIPA, the Privacy Act and any other relevant laws and codes of practice in operation from time to time including the Regulation.

 

Australian and New South Wales Legislation

When you interact with Destination NSW and use Destination NSW’s websites, mobile websites or mobile applications, your privacy is protected by the Privacy and Personal Information Protection Act 1998 (NSW) (including the Information Privacy Principles (IPPs)) (PPIPA) and Privacy Act 1988 (including the Australian Privacy Principles (APPs)) (Privacy Act).

 

General Data Protection (GDPR) Regulation

The European Union General Data Protection Regulation (the ‘Regulation’) contains new data protection requirements that will apply from 25 May 2018. These will harmonise data protection laws across the European Union and replace existing national data protection rules. The introduction of clear, uniform data protection laws is intended to build legal certainty for businesses and enhance consumer trust in online services.

 

The Regulation applies to the data processing activities of Destination NSW in the European Union as:

1. We have operations in the European Union namely United Kingdom, Germany and France.
2. Offer goods and services or monitor the behaviour of individuals in the European Union – via our websites and representative offices. Destination NSW promotes New South Wales as a tourism destination and also holds roadshows and famils in the European Union.

What is Destination NSW doing to prepare for the Regulation?

a) We have provided more detail around what we do with your data, and how you can have access to your privacy rights.
b) We have provided more information about the purposes for which we use your personal information.

 

2.     What is Personal Information or Personal Data?

 

Personal Information is defined by Australian and New South Wales Legislation and Privacy Principles as namely information or any opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable. 

 

 

Personal Information is also defined by the Regulation in which we provide particulars namely:

• any information relating to an identified or identifiable natural person (Article 4 of the Regulation - a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, cookie ID, ID card number, location data, advertising identifier on phones, IP address, an email address or a telephone number
• any information relating to an individual, whether it relates to his or her private, professional or public life. It can be anything from a home address, a photo, an email address, bank details, posts on social networking websites, or medical information.

 

Examples of data not considered personal data:

• a company registration number
• an email address such as info@company.com 
• anonymised data

 

3.     Why Destination NSW collects Personal Information

 

Destination NSW will only collect Personal Information for a lawful purpose which is reasonably necessary for, or directly related to our function or activities as a NSW Government agency and for obtaining feedback about the effectiveness of our services.

 

Destination NSW will not collect any more information than is necessary for it to fulfill these functions, unless required by law.

 

Destination NSW, in carrying out its functions and activities, collects Personal Information directly from you through its website, for various purposes that relate to the development and promotion of tourism and events in New South Wales. 新南威爾士州旅遊局的職能已列於《新南威爾士州旅遊局法》（2011）：http://www.legislation.nsw.gov.au/acts/2011-21.pdf.

 

The provision of your Personal Information on Destination NSW’s website is voluntary and you can opt out at any time.

 

然而，如果您選擇不提供個人資訊，我們可能無法轉交您要求的資料，或向您提供透過此網站取得的其中一些服務。You can choose to remain anonymous or use a pseudonym.

 

Destination NSW conducts a large part of its operations over the Internet and via email.

As part of its functions, Destination NSW conducts market research surveys, offers access to publications, processes thousands of requests for tour brochures or information, provides avenues for the booking of holidays or facilities, provides opportunities for tourism operators to market and promote their services, distributes industry based publications, conducts many exciting competitions and collects information on the types of holidays or events that you, the consumer, would like to see more of in the future so that we can help the NSW tourism industry grow.

 

4.    Collection of your Personal Information

 

Destination NSW’s collection of Personal Information is performed in an open manner and where consent is obtained. 

 

Destination NSW will ensure that any Personal Information collected is relevant to Destination NSW’s purpose, is accurate, complete and up-to-date.

 

新南威爾士旅遊局將直接向您收集資料，除非這樣做並不切實可行。

 

When is your Personal Information is being collected

Your Personal Information is being collected when:

• you submit an application form with Destination NSW containing Personal Information,
• provide Personal Information via email,
• complete a new supplier form,
• undertake a market research survey, and
• enter into a contract with Destination NSW. 

 

This list is not exhaustive.

 

電子郵件地址

當電子郵件訊息傳送至新南威爾士旅遊局，或使用者訂閱線上郵件名單時，系統將會記錄其電子郵件地址。

 

新南威爾士旅遊局會根據《1998 年新南威爾士州分記錄法案》（State Records Act 1998（NSW））規定的標準和權限，以電子方式儲存這些電子郵件地址。An email address is only used for the purpose for which it is provided and is not added to any unauthorised mailing list or disclosed to other organisations unless you request that this to be done.

 

如果您已訂閱了其中一個新南威爾士旅遊局線上郵件名單，則可選擇取消訂閱，以從名單輕鬆刪除您的電子郵件詳細資料。每個郵件名單會提供有關取消訂閱的明確指示。

 

像素

“Pixels” means the use of use of pixels (1 x 1 pixel images that allow services to tell companies how many people have visited their site). 當您在我們的網站作出特定動作時，系統便會向伺服器傳送要求，以下載附於相關內容的追蹤像素。您將不會看到此程序的過程，但是此舉所收集的資料將有助我們和我們的贊助商為您提供更出色的數位廣告和內容體驗。我們會為收集所得的所有資料去除個人資訊，並且絕不收集或披露任何個人資訊。

 

Cookie

使用網路傳輸資料存在風險，因此您需要自行評估於新南威爾士旅遊局網站提供您個人資訊的風險。

 

本網站包含多個連接至其他機構網頁的連結。Destination NSW is not responsible for the information handling practices or privacy policies of those other organisations. 當然，如果您不欲以電子方式傳輸資料，新南威爾士旅遊局亦可以為您提供傳輸資料的替代方式。

 

所列網站可能會使用 Cookie 來提升使用者的網站使用體驗。Cookie 是一個由託管網站傳回至您電腦硬碟的小型文字檔案。Cookie 會記錄與您對網站使用相關的喜好設定，並提供讓我們在未來識別您身分的其他資料。所列網站上的 Cookie 不會讀取您硬碟上的資料，而且亦不會指示您的電腦執行任何未經授權的動作，或者指示您的電腦透過網路傳送資料至任何其他電腦。

您可以設定瀏覽器，指示其在收到 Cookie 時通知您，以便您決定是否電腦允許接收 Cookie。不過，如果您決定不接受 Cookie，新南威爾士旅遊局的部分網頁可能無法正常顯示，或者您將無法存取特定資料。存取本網站的任何網頁時，我們會針對您存取的每個網頁，自動記錄可識別以下資訊的資料：

a) the IP (Internet Protocol) address of the machine which has accessed it

b) your top-level domain name (for example .com, .gov, .au, .uk etc.)

c) the address of your server

d) the date and time of your visit to the site

e) the pages accessed and documents downloaded

f) the previous site visited

g) the type of browser and operating system you have used.

 

我們會將您每次瀏覽本網站期間所收集的資訊與類似資訊記錄彙整，並以報告形式發布，以便新南威爾士州旅遊局管理其網站服務並識別網站的使用模式。這將有助我們改進新南威爾士州旅遊局的網站，以及網站所提供的服務。

 

新南威爾士州旅遊局不會在未經同意，或不符合 PPIPA 所列規定的情況下，披露或發布可用於識別個別電腦的資訊，或者有可能用於識別地址子分組的資訊。

 

資料配對

“Data matching” means the bringing together of at least two data sets that contain Personal Information, and that come from different sources, and the comparison of those data sets with the intention of producing a match. Destination NSW may from time to time utilise Google’s Customer Match technology (a data matching tool) to provide a service to you whereby offers are geared to your personal preferences.  Accordingly, Destination NSW may share your Personal Information with Google’s Customer Match platform in order to undertake data matching.  In the course of data matching, your Personal Information remains protected through the use of a one-way hashing mechanism that cannot be encrypted.  Personal Information that Destination NSW shares with Google, including email addresses, will be hashed against Google’s database of hashed users, without Google ever seeing the unhashed data.  By continuing to use this site, you consent to Destination NSW sharing your Personal Information with Google for data matching purposes. If you would not like Destination NSW to use your Personal information for data matching, you can request such by contacting DNSW on +61 02 9931 1111. For more information on Google’s Customer Match platform visit: https://support.google.com/adwords/answer/6334160

 

How will your Personal Information be stored?

This data is stored internally, at Destination NSW offices and held securely and accessible by Destination NSW staff only. Information is stored using Microsoft Systems and software.
 

Attendee data is accessible by affiliated suppliers, in connection with the activity they are undertaking.

 

Destination NSW takes all reasonable steps to:

• protect the security and integrity of any Personal Information held, be it stored in electronic or hard copy format.
• Ensure that the quality of Personal Information is as reasonable in the circumstances and that the Personal Information that Destination NSW collects is accurate, up-to-date and complete.
• As are reasonable in the circumstances, ensure that the Personal Information that Destination NSW uses or discloses is, having regard to the purpose of the use or disclosure, accurate, up-to-date, complete and relevant.
• Ensure that you have access to and ability to correct Personal Information.

 

How long will your Personal Information be stored?

Destination NSW will store your information as per the mandatory data retention laws in Australia, or as otherwise required by law. If your personal information is sensitive, the retention time will be as appropriate. Should you provide consent for a longer retention period, we will hold your data in line with your consent.

Once it is no longer necessary to retain the information, we will dispose of it in a secure manner.

 

How it will be stored 5.     Processing and Use of Personal Information within Destination NSW

 

The Regulation will directly affect the processing of personal data of European Union citizens resident in the European Union, including those in the United Kingdom.

 

The processing of any personal data belonging to European Union citizens or others resident in the European Union will be subject to the Regulation no matter where the data is stored or processed.

 

新南威爾士旅遊局將僅會使用、傳送或處理個人資訊，以達到收集資料的主要目的，或者用於您同意的其他個人資訊使用方式。This includes processing for:

• the performance of a contract.
• compliance with a legal obligation.
• protect the vital interests of the data subject or of another natural person.
• the performance of a task carried out in the public interest or in the exercise of official authority vested in Destination NSW.
• the purposes of the legitimate interests pursued by Destination NSW or by a third party unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, in particular if the data subject is a child.

 

Examples of data processing:

• storing IP addresses or MAC addresses
• posting/putting a photo of a person on a website
• sending promotional emails
• access to/consultation of a contacts database containing personal data

 

 

Destination NSW will need to comply with certain principles as follows:

 

Principle
Process the data in a manner that is lawful, fair and transparent.
Use the data for legitimate purposes.
Limit the use only to what is necessary.
Process the data in a way that maintains its accuracy.
Store the data for no longer than necessary.
Process the data in a secure fashion.

 

6.    Disclosure of Personal Information to third parties

 

除非法律有所規定，否則新南威爾士旅遊局不會在未經您允許的情況下，將您的個人資訊披露予任何人士。

 

7.     Exceptions

 

The circumstances in which Destination NSW will collect, use and disclose more extensive information than stated above in the following circumstances:

a) unauthorised attempts to access files which are not publically available

b) unauthorised tampering or interference with files on the listed websites

c) unauthorised attempts to index the contents of the listed websites

d) attempts to intercept messages of other users of the listed websites

e) communications which are defamatory, abusive, vilify individuals or groups or which give rise to a suspicion that an offence is being committed

f) attempts to otherwise compromise the security of the web server, breach the laws of the State of New South Wales or Commonwealth of Australia, or interfere with the use of the listed websites by other users.

 

新南威爾士旅遊局保留在對所列網站的使用涉嫌正在或曾經犯罪時，向相關當局披露相關資料之權利。進行調查期間，新南威爾士旅遊局將向行使逮捕令以審查我們記錄的任何執法機構提供資料的存取權。

 

新南威爾士旅遊局可能會因未經授權使用資料或上述任何情況所導致的任何損失或損壞而提起訴訟。

在獲得合法授權，或任何法案、法定機構或外國機構有所要求的情況下，新南威爾士旅遊局亦可能會披露相關資料。

 

Destination NSW does not have any responsibility for privacy policies or practices of third party sites linked to from the listed websites.

 

8.    Access, accuracy and amendments – Your Rights

 

新南威爾士旅遊局會採取所有合理步驟，確保其收集的個人資訊為準確、完整和最新版本。根據 PPIPA 的相關規定和要求，您可以存取由我們持有，且屬於您的任何個人資訊，唯適用法例有所規定的情況不在此限。If you would like to access or update your Personal Information, or if you would like to know more about the Personal Information that we may hold on you please e-mail us at info@dnsw.com.au.

 

如欲作出有關隱私權方面的投訴，請聯絡：

The Privacy Officer

Email: info@dnsw.com.au
電話：+61 02 9931 1111
地址：GPO Box 7050, Sydney NSW 2001

 

The Privacy Commissioner: http://www.ipc.nsw.gov.au/

 

Under the Regulation, you have certain rights including:

• Right of Access
• Right of Erasure
• Right to Rectification
• Right to Object
• Rights in relation to automated decision making and profiling

 

If you wish to exercise any of these rights, please contact the following:

The Privacy Officer
Email: info@dnsw.com.au
電話：+61 02 9931 1111
地址：GPO Box 7050, Sydney NSW 2001

 

9. Conclusion and Other

 

Destination NSW provides this privacy management plan in compliance with the PPIPA (Privacy Management Plan).  This Privacy Management Plan sets out how Destination NSW complies with the PPIPA.  

 

由於線上通訊隱私權原則會不斷發展，本政策可能會因新發展或不時出現的問題而有所修改或擴充。經修改後的政策內容將會發布至本網站，並將從發布當刻開始生效。