policy
The CASS Foundation Limited Privacy Policy
Personal Information
As part of the services we provide as a philanthropic organisation, we collect and maintain personal information which may include your name, current and previous addresses, your occupation, employment and qualifications, your date of birth, your past, present and anticipated areas of work, your past, current and future education status, bank account details for payment of grant funds and financial, commercial and intellectual property information. As a matter of policy we will collect, store and disclose your personal information in accordance with the provisions of the APP and other relevant legislation. The information we collect we consider is reasonably necessary for one or more of our functions and activities. Due to the nature of our functions and activities, it is generally not practicable for us to deal with individuals who have not identified themselves or who use a pseudonym.
How we collect information
We collect personal information in a number of ways, including:
- directly from you when you provide information in application forms for funding or in response to requests by us for information;
- from third parties, such as your employers, collaborators, trade organisations, education institutions, representatives or referees you or your organisation have provided;
- from publicly available sources of information;
- when legally required to do so.
Generally, you will be aware we have collected your personal information or you have authorised us to collect personal information from third parties. If you are not aware that we have collected information from third parties, we will take reasonable steps to notify you of the collection of the personal information and the circumstances in which it has been collected.
How we use personal information
Your personal information may be used to:
- consider eligibility for funding, grants, awards or scholarships;
- assess applications for funding, grants, awards or scholarships;
- assess participation in projects or ventures;
- administer, monitor and evaluation projects, grants, awards or scholarships which we have agreed to fund or in which we participate;
- research and develop our services and projects.
How personal information is held and stored
If we receive unsolicited personal information, as soon as reasonably possible, we determine if we could have collected the personal information under the APP if we had solicited the information. If we consider we could have collected the personal information, we will retain it as if we had collected it under the APP.
If we consider we could not have collected the personal information under the APP, we will (if it is lawful and reasonable to do so) destroy the information or ensure the information is de-identified.
When we disclose your personal information
- For the purposes set out above, we may disclose your personal information to:
- our directors, officers and staff;
- your employers, sponsors, referees or educational institutions in which you are or propose to be enrolled;
- referees nominated in applications;
- outsourced service providers who manage the services we provide;
- your representatives (e.g. your authorised representatives or legal advisers;
- credit reporting and fraud-checking agencies;
- our professional advisers, including our auditors, lawyers and financial advisers;
- inclusion in our website or in our publications and promotional materials;
- inclusion in our own research or reports;
- other persons or organisations engaged in philanthropy;
- any person or entity lawfully entitled to obtain the information.
Your consent to the above disclosures is taken to have been given when you submit an application for funding or provide us with updates.
We will not sell or trade your personal information to any third party for marketing purposes.
Disclosure to overseas recipients
Personal information collected by us is stored by us and stored by our IT Services providers. Arrangements with our providers require that the personal information we collect be stored on servers in Australia only and for our providers to comply with the APP with respect to that personal information.
Other personal information collected by our online grantmaking process is stored by the online provider in the cloud and may be in turn stored on servers in the USA and elsewhere. Whilst we reasonably believe that the storers of that personal information are subject to laws which effectively uphold the principles for fair handling of the information that are substantially similar to the APP, we cannot guarantee that is the case in all circumstances. Accordingly by making application or providing information on our online grantmaking process, you are deemed to consent to the transfer of information overseas.
Data quality
We take reasonable steps to ensure that the personal information we collect, issue or disclose is accurate, complete, up to date, relevant to the purpose for which it was collected and not misleading. The personal information you submit at the time of an application for funding is assumed to be accurate, relevant, complete, up to date and relevant to the purpose for which it was collected and not misleading. If at any time you believe this personal information is no longer accurate, relevant, complete, up to date, or is misleading, you may request us to correct the information and inform any third parties to whom the information has been disclosed of the correction. There are circumstances under which we may refuse to correct personal information, but if we do so, we will inform you of the reasons and the mechanisms available to you to complain about the refusal.
Data security
We have taken reasonable steps to protect your personal information from misuse, interference or loss and from unauthorised access, modification or disclosure.
We hold your personal information in electronic records, data storage systems and paper based files and other records. These records are located on site at the CASS premises. Electronic records are also stored off site on our service provider's servers.
We will take reasonable steps to destroy or permanently de-identify any information that is no longer needed for any purpose for which we may use or disclose the information unless we are lawfully requested to retain the information.
We may outsource the management of our website and computer network to external contractors. We have entered into agreements with these parties to protect your information in accordance with the APP.
Your right to access your personal information
You have a right to access your personal information held by us. There are circumstances where we may refuse to give you access to some of your personal information. For example, we are not required to provide you with access where a request:
- is frivolous or vexatious;
- concerns information relating to an existing or anticipated legal proceedings between CASS and yourself;
- requires access that would be unlawful;
- would be likely to prejudice the prevention, investigation and prosecution of any criminal offence or seriously improper conduct.
If we refuse to give you access, we will give you written notice of the reasons for the refusal and the mechanisms available to you to complain about the refusal.
Complaints
If you have a complaint about a possible breach of privacy in the way that personal information has been collected, used, stored or disclosed, you may contact our Privacy Officer.
Phone
+61 3 8650 5900
Letter
Privacy Officer at
The CASS Foundation Limited
Level 2, 111 Collins Street
Melbourne, VIC, 3000
Phone
+61 3 8650 5900
Letter
Privacy Officer at
The CASS Foundation Limited
Level 2, 111 Collins Street
Melbourne, VIC, 3000
This Statement about our Privacy Policy is current as at 22 June 2021. We may make changes to this Statement at any time.
The CASS Foundation Limited Whistleblower Policy
A copy of the Whistleblower Policy will be provided upon request.
