Privacy Statement

Last revised: September 2023

Introduction

Welcome to the GRAVITY Challenge (Challenge). This Privacy Statement explains what personal information we may gather about you and how we may use and share your personal information in relation to the Challenge. This Privacy Statement also sets out your rights in relation to your personal information and tells you who you can contact if you have questions.

To whom does this Privacy Statement apply and what does it cover?

This Privacy Statement applies to the Australian Partnership of Deloitte Touche Tohmatsu (also referred to as “Deloitte”, “we”, “us”, and “our”), an entity within the Deloitte Network, and which is the entity that will control your personal information. As used in this Privacy Statement, the “Deloitte Network” refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (DTTL), its network of member firms, affiliates and their related entities. DTTL and each of its member firms are legally separate and independent entities. Please see https://www2.deloitte.com/au/en/pages/about-deloitte/articles/about-deloitte.html for a more detailed description of DTTL and its member firms.

In order to administer the Challenge and provide a seamless collaboration experience, Deloitte is using Squarespace to create a space where participants can share ideas, communicate with Challenge Providers and upload their Challenge Submissions (Platform).

Your personal information will be protected and handled with consideration for its confidentiality and we will only disclose it as set out in the “To whom will we disclose your personal information?” section below.

In this Privacy Statement, we refer to handling, collecting, protecting and storing your personal information as "processing".

What personal information do we collect?

When you register for the Challenge, you will need to provide some basic personal information including your name, email address, phone number, country and business name.  

We do not require, or intend to receive or process, any personal information about you that may be considered special category (or “sensitive”) personal information to administer the Challenge. Special category personal information is considered to include information about your health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person or data concerning a natural person’s sex life or sexual orientation. You should not provide or upload any special category personal information, but if you choose to provide such special category personal information to us (for example, as part of your blurb in your profile) we will interpret this action as your consent in order for us to process it for the purposes described in this Privacy Statement.

How do we collect personal information?

Deloitte may collect personal information about you in different ways:

  • You may provide it directly to us through various communication methods (including email) or through your use of Squarespace for the purposes of entering the Challenge; and/or

  • We may observe or infer it from the information you provide to us and/or the way you interact with us.

This personal information can be received in any manner, including in-person discussions, telephone conversations, and electronic or other written communications.

Where another party (for example your Team Leader or other Challenge Supporters) provides your personal information to us, they shall be responsible for complying with their obligations under the relevant privacy laws and regulations. If you believe that the third party has not provided you with details of the personal information that it holds about you and/or has not obtained your authority to provide us with that personal information for processing as described in this Privacy Statement, then please contact the relevant third party directly.

How do we use your personal information?

Deloitte processes personal information about you to communicate with you and to facilitate your participation in the Challenge.

Where you provide your consent, Deloitte and Challenge Supporters may also use your information to contact you to discuss opportunities outside of the Challenge or in relation to future events that we think you might be interested in.

We may also use your personal information in limited circumstances for the purposes of, or in connection with:

  • Compliance with applicable legal, regulatory or professional requirements; and/or

  • Protecting our rights and/or property.

On what basis do we process personal information about you?

This Privacy Statement sets out the grounds upon which we rely in order to process your personal information.

We may use your personal information for the purposes outlined above because:

(a)  We have a legitimate interest in processing your personal information, which may be to:

  • Facilitate your participation in the Challenge in accordance with the GRAVITY Challenge – Participant Terms and Conditions that you have agreed to; or

  • Protect our business interests; or

(b)  We are subject to legal, regulatory or professional obligations.

To whom will we disclose your personal information?

Any personal information you provide will be available to the other participants in the Challenge for the purpose of sharing ideas.

In connection with one or more of the purposes outlined in this Privacy Statement, we may disclose your personal information to:

  • Challenge Supporters (listed on the Gravity Website: http://gravitychallenge.space/);

  • Other members of the Deloitte Organisation who participate in the Challenge;

  • Competent authorities, including courts and authorities regulating us or another member of the Deloitte Network, in each case to comply with legal, regulatory or professional obligations or requests; and

  • Platform provider, vendors and administrative support, infrastructure and other service providers handling your information on our behalf, including Squarespace for the purpose of administering the platform; in each case, such vendors and service providers will be contractually bound by confidentiality and privacy obligations consistent with the obligations in this Privacy Statement.

We may also publish your name and photo via various publicly available channels, including our website or our online social media pages, in accordance with the GRAVITY Challenge – Participant Terms and Conditions.

Deloitte does not sell or lease your personal information to others.

Please note that some of the recipients of your personal information referred to above may sometimes be located in other countries, in particular USA and Ireland (where the Platform is hosted), the UK, Canada, India, USA, Japan, Germany, France, Luxemburg, Austria, Poland, Hungary, Romania or Czech Republic. Where those countries do not have data protection rules similar to those in effect in your area of residence, appropriate safeguards will be in place to protect your personal information.

For further details about the transfers described above and the adequate safeguards used by Deloitte with respect to such transfers, please contact us using the details below.

How do we protect your information?

We use a range of physical, operational and technological security measures to protect this information. These measures include:

  • Staff education and training to ensure our staff are aware their privacy obligations when handling your personal information

  • Administrative and technical controls to restrict access to personal information to only those people who need access

  • Technological security measures, including fire walls, encryption and anti-virus software

  • Physical security measures, such as staff security passes to access Deloitte premises, laptop cable locks and the use of privacy screens where appropriate.

We will retain your personal information for the duration of the Challenge. If you consent to be contacted in relation to future events, we will also retain your information for up to two years.

What are your rights in relation to your personal information?

You have various rights in relation to your personal information. In particular, you have a right to:

  • Obtain confirmation that we are processing your personal information and request a copy of the personal information we hold about you

  • Ask that we update the personal information we hold about you, or correct such information that you think is inaccurate or incomplete

  • Depending on the jurisdiction in which you are located, you may also have the right to:

  • Ask that we delete personal information that we hold about you, or restrict the way in which we use your personal information;

  • Withdraw consent to our processing of your personal information (to the extent our processing is based on your consent);

  • Ask us to stop or start sending you marketing messages at any time;

  • Obtain and/or move your personal information to another service provider; and

  • Object to our processing of your personal information.

However, we may still retain a copy of the relevant information for as long as necessary to comply with applicable laws or professional standards, or as long as the period in which litigation or investigations might arise in respect of our services.

To exercise any of your rights or raise any questions that you have about our use of your personal information, please contact the Deloitte Australia Privacy Officer at privacy@deloitte.com.au.

How can you access your personal information, or seek to have it corrected?

You may access your personal information, or seek to have that information corrected if you believe that it is incorrect, at any time.

To request access, or to correct your personal information, please contact the Deloitte Australia Privacy Officer at privacy@deloitte.com.au. The privacy team will then get in contact with you (either by phone or via email) and will work with you to provide you with access to your information or to determine whether it requires correction. 

Who can you contact if you have further questions or if you wish to make a complaint?

Who should you contact?

If you have any questions or concerns regarding your privacy, or if you would like to make a complaint, please contact the Deloitte Australia Privacy Officer at:

Privacy Officer
Deloitte Touche Tohmatsu
50 Bridge Street
Sydney NSW 2000
privacy@deloitte.com.au

If you believe that the Privacy Officer has not adequately handled your query or issue, you may complain to the Complaints Officer whose contact details are as follows:

Complaints Officer
Deloitte Touche Tohmatsu
50 Bridge Street
Sydney NSW 2000
complaints@deloitte.com.au

How do we handle complaints that we receive?

We take all the privacy complaints we receive seriously.

We will acknowledge the receipt of a complaint immediately and will work with you to resolve it. If you would like more information about our process for handling complaints, please see our complaints handling policy.

What if you are not satisfied with how we have handled your complaint?

If you believe that Deloitte Australia has not adequately handled your privacy complaint, you may complain to the Office of the Australian Information Commissioner (OAIC) whose contact details are as follows:

Office of the Australian Information Commissioner
GPO Box 5218
Sydney NSW 2001
1300 363 992
enquiries@oaic.gov.au

If you are based in the United Kingdom or the European Economic Area then you can also complain to your local data protection authority.

 

Where can I find out more about my privacy rights?

For further information about privacy and the protection of privacy, visit the Office of the Australian Information Commissioner’s website at www.oaic.gov.au.

What is our process for making changes to this Privacy Statement?

We may modify or amend this Privacy Statement from time to time.

To let you know when we make changes to this Statement, we will amend the revision date at the top of this page. The new modified or amended Privacy Statement will apply from that revision date. Therefore, we encourage you to periodically review this Statement to be informed about how we are protecting your information.