Privacy Policy

Individuals have the right to know what information an organisation holds about them, to correct that information if it is wrong, and to expect that this information will not be disclosed to others.

In accordance with relevant legislation, ASTERIA Services Inc. is required to comply with the National Privacy Principles, Information Privacy Principles and Health Privacy Principles.

ASTERIA Services Inc. takes its privacy obligations seriously and will seek to take all reasonable steps in order to comply with privacy legislation so that the privacy of the personal and health information that we hold is protected.

Collection

ASTERIA Services Inc. collects personal and/or health information from both individuals and third parties. Whenever such information is collected, it will always be for one or more of our functions or purposes; it will only be collected by lawful and fair means; it will not be collected in an unreasonably intrusive way; and will only be collected in accordance with any other requirement under the relevant privacy principle/s.

The types of personal and/or health information that ASTERIA Services Inc. may collect, and the purpose of collection, are generally related to the recruitment and selection process. (On occasions, some personal information may be collected separately for business related marketing). On any occasion of personal and/or health information being collected, it will only be for the primary purpose which will be identified in the collection statement and for which reasonable steps will be taken to provide such information to the individual.

Use and disclosure

ASTERIA Services Inc. will only use and disclose personal and/or health information for the primary purpose for which it was collected (or, for a secondary purpose where it is related to the primary purpose and when the requirements as detailed in the privacy principles for the use or disclosure of that personal and/or health information can be met for a secondary purpose). Generally, this will mean:

The individual will have a reasonable expectation that ASTERIA Services Inc. may use and/or disclose such information for the secondary purpose; or
This individual, or if unable, their authorised or legal representative, has consented; or
Such use and/or disclosure is required, authorised or permitted under law, or for lawful action, or for the prevention of unlawful activity; or
The use and/or disclosure is for statistical purposes; or
The use and/or disclosure is necessary to lessen or prevent a serious and imminent threat to the life, health, safety or welfare of an individual or the public

ASTERIA Services Inc. will ensure that personal and/or health information will only be used or disclosed for a secondary purpose when it can be demonstrated that there is a relationship with the primary purpose.

Data quality

ASTERIA Services Inc. will take all reasonable steps to ensure the personal and health information that it collects, uses, holds and discloses is accurate, complete, up-to-date and relevant. This will be done by verifying the accuracy, completeness and relevance of personal and/or health information when it is collected, and maintaining the accuracy, currency, completeness and relevance of the personal and health information that is held.

Data security and data retention

ASTERIA Services Inc. will take reasonable steps to ensure the personal and health information that we hold is protected from misuse and loss, and from unauthorised access, modification or disclosure.

We will also take reasonable steps to ensure that personal and/or health information that is held which is no longer required, including under any contractual or legal requirement, is destroyed or de-identified in a secure manner.

Openness

ASTERIA Services Inc. will be open in how it manages the personal and health information that it collects. It will do so by having in place a publicly available statement setting out how personal and health information is handled, and through the establishment of this privacy policy which will be made available to an individual, if requested.

Access and correction

Upon request, individuals will be provided with access to their personal and/or health information unless one of the exceptions which requires or allows access to be refused, as set out in the respective privacy principles, is exercised. Such exceptions apply generally as follows:

Providing access would pose a serious threat to the life or health of any individual
Providing access would have an unreasonable impact on the privacy of another individual
For personal information, the request for access is frivolous or vexatious
For health information, the request is unreasonable and repeated, with access to the same information having previously been provided
There are considerations with regard to legal proceedings which are underway, being investigated or anticipated
Providing access would be unlawful

Complaint resolution

If an individual or their authorised or legal representative have a complaint regarding ASTERIA Services Inc.’s privacy practices or wish to make a complaint about how their personal and/or health information has been managed, they need to contact the organisation’s key contact, in the first instance. Any complaints received will be handled promptly, fairly and confidentially.