Individuals have the right to know what information an organisation holds about them, to correct that information if it is wrong, and to expect that this information will not be disclosed to others.
In accordance with relevant legislation, ASTERIA Services Inc. is required to comply with the National Privacy Principles, Information Privacy Principles and Health Privacy Principles.
ASTERIA Services Inc. takes its privacy obligations seriously and will seek to take all reasonable steps in order to comply with privacy legislation so that the privacy of the personal and health information that we hold is protected.
ASTERIA Services Inc. collects personal and/or health information from both individuals and third parties. Whenever such information is collected, it will always be for one or more of our functions or purposes; it will only be collected by lawful and fair means; it will not be collected in an unreasonably intrusive way; and will only be collected in accordance with any other requirement under the relevant privacy principle/s.
The types of personal and/or health information that ASTERIA Services Inc. may collect, and the purpose of collection, are generally related to the recruitment and selection process. (On occasions, some personal information may be collected separately for business related marketing). On any occasion of personal and/or health information being collected, it will only be for the primary purpose which will be identified in the collection statement and for which reasonable steps will be taken to provide such information to the individual.
ASTERIA Services Inc. will only use and disclose personal and/or health information for the primary purpose for which it was collected (or, for a secondary purpose where it is related to the primary purpose and when the requirements as detailed in the privacy principles for the use or disclosure of that personal and/or health information can be met for a secondary purpose). Generally, this will mean:
ASTERIA Services Inc. will ensure that personal and/or health information will only be used or disclosed for a secondary purpose when it can be demonstrated that there is a relationship with the primary purpose.
ASTERIA Services Inc. will take all reasonable steps to ensure the personal and health information that it collects, uses, holds and discloses is accurate, complete, up-to-date and relevant. This will be done by verifying the accuracy, completeness and relevance of personal and/or health information when it is collected, and maintaining the accuracy, currency, completeness and relevance of the personal and health information that is held.
ASTERIA Services Inc. will take reasonable steps to ensure the personal and health information that we hold is protected from misuse and loss, and from unauthorised access, modification or disclosure.
We will also take reasonable steps to ensure that personal and/or health information that is held which is no longer required, including under any contractual or legal requirement, is destroyed or de-identified in a secure manner.
Upon request, individuals will be provided with access to their personal and/or health information unless one of the exceptions which requires or allows access to be refused, as set out in the respective privacy principles, is exercised. Such exceptions apply generally as follows:
If an individual or their authorised or legal representative have a complaint regarding ASTERIA Services Inc.’s privacy practices or wish to make a complaint about how their personal and/or health information has been managed, they need to contact the organisation’s key contact, in the first instance. Any complaints received will be handled promptly, fairly and confidentially.