Privacy Policy

4.4.3.2 How CEA Uses Personal Data
CEA will only use personal data in a manner that is appropriate, as set out in the above table, and
according to the reasons it was collected. For example, CEA may use personal information to:

• Reply to enquiries sent to CEA;
• Send communications by email relating to CEA’s services which may be of interest to
  members receiving the communication.

4.4.3.3 When CEA Shares Personal Data
CEA will only pass on personal data to third parties when CEA:

• Holds explicit consent to pass data to a named third party
• Is using a third party purely for the purposes of processing data on a members or clients
  behalf and CEA have in place a data processing agreement with that third party that fulfils
  CEA’s legal obligations in relation to the use of third party data processors or
• Is required by law to share the personal data.

4.4.3.4 How Long CEA Keeps Personal Data
CEA takes the principles of data minimisation and removal seriously and has processes in place to
only ask for minimum amounts of data as needed for the associated purpose and to delete data
promptly once it is no longer required.

Where data is collected on the basis of consent, CEA will periodically seek renewal of that consent
generally on a three year cycle.

4.4.3.5 Rights Concerning Personal Data
Individuals have a range of rights concerning their personal data, including:

• A right to revoke consent at any time where data is being processed or held based on their
  consent. For example, this may include selecting ‘unsubscribe’ links at the bottom of
  marketing emails.
• A right of access to their personal information.
• A right to ask for rectification and/or deletion of their personal information held.
• A right to lodge a complaint with the Office of the Information Commissioner (Australian Government) if they believe their rights have been infringed.

A full summary of legal rights concerning personal data may be found on the Office of the Australian
Information Commissioner website at www.oaic.gov.au.

Please contact CEA If you would like to access the rights listed above, or any other legal rights you
have over your data under current legislation.

Please note that relying on some of these rights, such as the right to deleting your data, may make it
impossible for CEA to continue to deliver some member services to you. However, where possible
CEA will always try to allow maximum access to your rights while continuing to deliver as many
member services as possible.

4.4.3.6 Cookies and Usage Tracking
A cookie is a small file of letters and numbers that is downloaded on a computer/device when visiting
a website. Cookies are used by many websites and can do a number of things, e.g. remembering
individual preferences, recording what an individual has put in a ‘shopping basket’ and/or counting
the number of people looking at a website.

Where cookies are used to collect personal data, CEA will list these purposes in the above table
provided in this policy, along with other personal data that CEA collects. However, CEA also uses
some cookies that do not collect personal information but that do help CEA to collect anonymous
information about how people use CEA’s website. CEA uses Google Analytics for this purpose, Google
Analytics generates statistical and other information about website usage by means of cookies, which
are stored on the users’ computers. The information collected by Google Analytics about usage of
CEA’s website is not personally identifiable. The data is collected anonymously, stored by Google and
used by CEA to create reports about website usage. Google’s privacy policy is available at
http://www.google.com/privacypolicy.html.

4.4.16 Review
This Policy will be subject to periodic review and may be amended or updated when required. Where
any amendment meaningfully reduces any rights under this policy, CEA will notify individuals affected
by the change.