(a) NTU may collect, use, disclose, store and otherwise process your personal information and the kinds of personal information NTU collects;
(b) you may seek access to, or the correction of your personal information; and
2. Collecting your personal information
2.1 We collect personal information through a number of mediums and such information includes personal information that you provide to us or that we gather.
2.2 The following sets out the kinds of personal information we collect and hold, and how we collect it.
(b) Investing with us: We collect personal information from existing and prospective investors to support the shareholder transaction and related communication. This may include financial holdings information and shareholder status, and may occur through our external service providers such as those who manage our share register and our investor communication.
(c) Doing business with us: We collect information from clients, suppliers, investors and other external parties for the purpose of business transactions. This includes entering into and fulfilling contracts, supplying goods or services and for communication purposes. This information is generally only business contact related information.
(d) Working for us: We collect personal information when you submit a job application, commence employment with us either directly or through an external provider. Such information varies, but may include information regarding your identity, contact details, right to work, employment history and training and qualifications, and may include sensitive information such as whether you have a disability we need to accommodate or results of any background checks. We generally only collect sensitive information if it is reasonably necessary to do so.
(e) Visiting our work sites: We collect personal information from visitors for safety and security purposes. This may include basic contact information and images collected through closed circuit television (CCTV).
(f) Other sources: We may also collect your personal information from indirect sources such, as publicly available data sources and information service providers.
3. Using your personal information
3.1 We will only use personal information for the primary purpose(s) for which it was collected and for any other purpose that you consent to, including to:
(a) notify you of our ASX announcements, company presentations, projects and other news relating to us;
(b) respond to your enquiries;
(c) provide you with goods or services;
(e) keep a record of our dealings with you;
(f) form or maintain business relationships;
(g) carry out our business and related processes;
(h) verify your personal information, consider your job application, conduct background checks, contact you about any available job position;
(i) ensure your safety and security and that of others (e.g. by the use of CCTV); and
(j) comply with our legal obligations.
3.2 We may also use your personal information for a secondary purpose that is related to a purpose for which we collected it, provided you would reasonably expect us to do so.
3.3 If we offer you products and services under paragraph 3.1(d), we may do so by various means including by mail, telephone, email, SMS or other electronic means and we may disclose your personal information to companies outside the NTU Group who assist us to market products and services to you.
4. Disclosing your personal information
4.1 We may disclose personal information:
(a) where necessary, authorised or required by law or a regulator;
(b) with your prior consent or when your consent can be reasonably inferred from the circumstances;
(c) to entities within the NTU Group;
(d) to protect our rights, property or the safety of our employees;
(e) to our contractors, suppliers (including technology suppliers) and business partners in connection with the operation of our business; and
(f) to carry out background checks for the purposes of reviewing your job application.
5. Overseas disclosures
5.1 You expressly consent to the disclosure of your personal information to overseas recipients, including to other entities within NTU Group and to their customers, contractors, suppliers (including technology suppliers) and business partners located overseas. Such overseas disclosures may be to the following countries: America, Germany, United Kingdom, Canada, France, China.
5.2 We take reasonable endeavours to ensure that third party recipients of your personal information located overseas comply with the Australian Privacy Principles. However, you acknowledge that:
(a) these third parties may not be bound by the Australian Privacy Principles; and
(b) we cannot control the acts or omissions of third parties.
As such we cannot guarantee that those third party recipients will handle your personal information in compliance with the Australian Privacy Principles and will not be required to comply with Australian Privacy Principle 8.1.
6. Storing your personal information
6.1 To ensure the privacy of personal information, we will take reasonable steps to:
(a) embed privacy protections into the design of information handling practices to protect personal information from unauthorised access, modification, deletion and disclosure;
(b) ensure that the personal information stored is accurate and up-to-date; and
(c) where personal information is no longer required by law or for the primary purpose it was obtained, destroy or de-identify it.
6.2 If we believe that there has been a data breach that impacts your personal information and creates a likely risk of serious harm, we will notify you and the Office of the Australian Information Commissioner as soon as practicable and keep in close contact with you about the nature of the breach, the steps we are taking and what you can do to reduce the impacts to your privacy.
7. Your rights
7.1 If you:
(a) wish to seek access to, or correct any of your personal information that we hold;
(b) have a question, concern or complaint regarding the way in which personal information is handled; or
7.2 If we refuse to provide access to, or allow correction of your personal information, we will notify you in writing setting out a written explanation of the reasons for the refusal (unless it is unreasonable to expect us to do so). In the event you are dissatisfied with the outcome of your request or complaint, you may contact the Office of the Australian Information Commissioner:
Post GPO Box 5218
Sydney NSW 2001
Phone 1300 363 992
Last updated: 7 September 2020