Privacy Statement
1. DEFINITIONS, PURPOSE & SCOPE
This is the Privacy Policy of HAMB Systems Limited (ABN 44 053 315 772) (“HAMBS”, “we”, “us” or “our”).
In this Privacy Policy:
The purpose of this document is to outline our policy in relation to privacy and to provide some information relating to how we collect, store, use and disclose personal information, and the rights of individuals to gain access to personal information held about them by HAMBS.
The Policy does not apply to employee records HAMBS maintains in relation to its employees.
2. HAMBS' PRIVACY COMMITMENT
HAMBS is committed to the protection of personal information in accordance with Privacy Laws.
We will use our best endeavours to comply with the provisions of this Privacy Policy with respect to the privacy of any personal information collected by us or which is submitted to us in any form by you or by any other person.
By accessing and using our Site or by submitting information to us or by providing information to third parties which is then submitted to us or by providing your consent to a third party permitting disclosure of your personal information to us, you thereby consent to our collection, use and disclosure of that information in accordance with this Privacy Policy.
You may elect not to submit personal information to us but this may mean that we are unable to provide you with information, products or services.
3. COLLECTION OF INFORMATION
HAMBS only collects personal information which is necessary in connection with its business purposes. The purposes for which HAMBS collects personal and sensitive information include:
HAMBS may also collect and store personal information (including sensitive information) about applicants who apply for employment with HAMBS for a maximum period of 12 months.
The specific types of personal information collected, stored, used and disclosed by HAMBS varies according to the purpose for its collection. However, in general this information typically includes:
Given the nature of its business systems, HAMBS collects most of the personal information it requires directly from individual health fund providers, under contracts for the provision of HAMBS' services to those health fund providers. As such, HAMBS may also be required to observe privacy obligations by the health fund providers to which it contracts its services. From time to time HAMBS may also collect personal information about an individual from other third party sources such as government agencies and health service providers including hospitals, doctors and other medical and related professionals.
HAMBS collects personal information about individuals from heath fund providers on the basis that the health fund providers to which HAMBS has contracted its services have made appropriate privacy-related disclosures to the individual and obtained their consent to the disclosure of their personal information to, and its collection by, HAMBS.
Where a third party, person or entity provides HAMBS with personal information about another individual, that third party must ensure that the other individual is aware of:
It is important that HAMBS collects all the necessary information it requires about an individual in order to provide relevant services. If it is unable to collect all the information it requires, HAMBS may be unable to properly and effectively provide its services, or it may not be able to supply its services at all.
It is not practicable for information submitted electronically to be provided to us anonymously or using a pseudonym. If you do not wish to provide any required personal information then you should not proceed with the completion of the relevant process.
We may use a third party to provide hosting or other services and as a result your submitted information may be collected and stored using physical infrastructure and software owned or licensed by third parties. In these circumstances (a) we will retain logical control of the submitted information; (b) the third party will not be permitted to access, use or disclose the submitted information except to the limited extent necessary to provide the services (e.g. creating data back-ups or performing maintenance services).
Internet User Information
HAMBS may collect information such as IP addresses and domain names via the use of website cookies. Cookies do not identify an individual personally, but may link to a stored record about them. These cookies allow HAMBS to retain a personal record so that we can service the individual more effectively.
When you visit our Site, our servers may record a range of information relating to your access and use of the Site (collectively called “clickstream data”). We may examine clickstream data to determine the traffic through the server as well as access levels to specific pages. No attempt will be made to identify you or your browsing activities from clickstream data except in the circumstances specified below.
If we or any authority suspect that unauthorised access or use of the Site has occurred or may occur or be attempted, we may gather, use and disclose more extensive information than indicated above regarding access or attempted access to the Site for the purposes of prevention, detection, investigation or prosecution.
Our website may contain links to other websites. HAMBS is not responsible for the privacy practices of these other websites.
4. USE AND DISCLOSURE OF INFORMATION
HAMBS may use and disclose an individual's personal information for the primary purpose for which the information was collected (see Collection of Information), as well as other reasonably expected secondary purposes, where the individual has consented, and otherwise in accordance with Privacy Laws, including:
HAMBS will only transfer personal information outside of Australia in accordance with applicable requirements of Privacy Laws including:
HAMBS is required to collect, store and in some cases disclose certain information, from time to time, in accordance with Australian health industry legislation.
We will not sell submitted information to third parties and, except to the extent necessary for the operation of our business or as authorised by you or as required by law, we will not use or disclose submitted information for any other purpose.
The restrictions on our use and disclosure of submitted information do not apply if we de-identify the submitted information (i.e. remove the information that allows any person to be identified).
Data Quality, Storage and Security
HAMBS strives to ensure that all personal information held in its records is accurate, completely up-to-date and secure.
Personal information held in electronic form on database systems are retained within Australia at facilities under contract to HAMBS. All electronic information is protected by password security and other industry standard data protection and encryption measures.
Access to personal information is restricted in accordance with HAMBS's procedures to those personnel whose job functions require access to such information. Certain administrative functions may from time to time be contracted out to third parties, and in these cases appropriate security measures are implemented to ensure the security and integrity of all personal information.
Some hard copy information is stored in secure office facilities, including locked filing cabinets at HAMBS' premises.
Data Breaches
We will take reasonable steps to implement and maintain security precautions and to protect personal information from misuse, interference, loss and unauthorised access, modification and disclosure. However, we are unable to guarantee that unauthorised access to submitted information will not occur, either during transmission of that information or after we receive that information.
If a data breach occurs or is suspected to have occurred, we will address that data breach in accordance with our then applicable Data Breach Response Plan and the requirements of the Privacy Laws. If we assess that a data breach is a notifiable data breach, we will comply with any applicable notification obligations.
You will promptly comply with any request for information, assistance or a decision that we may reasonably require in connection with a data breach or suspected data breach.
Where personal information is no longer required
If we no longer require your personal information, we will take reasonable steps to permanently destroy or de-identify that information. You acknowledge that our back-up procedures may make it impractical to locate and destroy or de-identify copies of your personal information which are stored off-line or in a form which does not readily permit location and modification of data and you consent to our continued retention of submitted information in these circumstances.
Government Identifiers
Although the nature of HAMBS's business services require it to collect, store, use and disclose certain identifiers created or issued by the Commonwealth Government (such as Medicare numbers and pension numbers), HAMBS's business systems are configured so that these identifiers are not used as a means of identifying the individual.
Access and Correction
Individuals may obtain access to the information held about them by HAMBS by written request to HAMBS's Privacy Officer as detailed below.
In accordance with the APPs, HAMBS may deny access to requests for access to information in certain circumstances, including where:
HAMBS will correct any personal information which it becomes aware is inaccurate, incomplete or out of date.
HAMBS is entitled to charge an administrative fee for providing an individual with access to information held on HAMBS's systems. HAMBS may also require certain administrative procedures be followed in order to substantiate an individual's request for access. The relevant administrative process and any fees will be advised when a request is made.
Point of Contact
To request access to your personal information held in HAMBS's records, to make a privacy related complaint, to obtain more information about HAMBS's Policy or to enquire about privacy matters generally, please contact The Privacy Officer as follows:
The Privacy Officer
c/o Risk and Compliance Manager
HAMB Systems Limited
Level 4, 169 Pirie Street
ADELAIDE SA 5000
Facsimile: 08 8334 0344
Email: admin@hambs.com.au
5. REVIEW
HAMBS may review and update this Policy from time to time to reflect changes in the law or HAMBS’s business practices and procedures, as well as the community’s changing privacy expectations. Changes to this Policy will not be notified to individuals, but the latest version of this Policy will be posted on HAMBS’s website at www.hambs.com.au, and is available from the HAMBS Privacy Officer at any time.
HAMBS
Level 4, 169 Pirie Street
Adelaide, South Australia
5000
General Phone: (08) 8334 0300
Support Phone: (08) 8334 0399
Facsimile: (08) 8334 0344
General enquiries: admin@hambs.com.au
Support enquiries: support@hambs.com.au
Hospital eligibility: eligibility@hambs.com.au
Michels Warren
Level 1, 96 Melbourne Street
North Adelaide, South Australia
5006
Email: pmartin@micwar.com.au
Phone: (08) 8267 6888
1. DEFINITIONS, PURPOSE & SCOPE
This is the Privacy Policy of HAMB Systems Limited (ABN 44 053 315 772) (“HAMBS”, “we”, “us” or “our”).
In this Privacy Policy:
The purpose of this document is to outline our policy in relation to privacy and to provide some information relating to how we collect, store, use and disclose personal information, and the rights of individuals to gain access to personal information held about them by HAMBS.
The Policy does not apply to employee records HAMBS maintains in relation to its employees.
2. HAMBS' PRIVACY COMMITMENT
HAMBS is committed to the protection of personal information in accordance with Privacy Laws.
We will use our best endeavours to comply with the provisions of this Privacy Policy with respect to the privacy of any personal information collected by us or which is submitted to us in any form by you or by any other person.
By accessing and using our Site or by submitting information to us or by providing information to third parties which is then submitted to us or by providing your consent to a third party permitting disclosure of your personal information to us, you thereby consent to our collection, use and disclosure of that information in accordance with this Privacy Policy.
You may elect not to submit personal information to us but this may mean that we are unable to provide you with information, products or services.
3. COLLECTION OF INFORMATION
HAMBS only collects personal information which is necessary in connection with its business purposes. The purposes for which HAMBS collects personal and sensitive information include:
HAMBS may also collect and store personal information (including sensitive information) about applicants who apply for employment with HAMBS for a maximum period of 12 months.
The specific types of personal information collected, stored, used and disclosed by HAMBS varies according to the purpose for its collection. However, in general this information typically includes:
Given the nature of its business systems, HAMBS collects most of the personal information it requires directly from individual health fund providers, under contracts for the provision of HAMBS' services to those health fund providers. As such, HAMBS may also be required to observe privacy obligations by the health fund providers to which it contracts its services. From time to time HAMBS may also collect personal information about an individual from other third party sources such as government agencies and health service providers including hospitals, doctors and other medical and related professionals.
HAMBS collects personal information about individuals from heath fund providers on the basis that the health fund providers to which HAMBS has contracted its services have made appropriate privacy-related disclosures to the individual and obtained their consent to the disclosure of their personal information to, and its collection by, HAMBS.
Where a third party, person or entity provides HAMBS with personal information about another individual, that third party must ensure that the other individual is aware of:
It is important that HAMBS collects all the necessary information it requires about an individual in order to provide relevant services. If it is unable to collect all the information it requires, HAMBS may be unable to properly and effectively provide its services, or it may not be able to supply its services at all.
It is not practicable for information submitted electronically to be provided to us anonymously or using a pseudonym. If you do not wish to provide any required personal information then you should not proceed with the completion of the relevant process.
We may use a third party to provide hosting or other services and as a result your submitted information may be collected and stored using physical infrastructure and software owned or licensed by third parties. In these circumstances (a) we will retain logical control of the submitted information; (b) the third party will not be permitted to access, use or disclose the submitted information except to the limited extent necessary to provide the services (e.g. creating data back-ups or performing maintenance services).
Internet User Information
HAMBS may collect information such as IP addresses and domain names via the use of website cookies. Cookies do not identify an individual personally, but may link to a stored record about them. These cookies allow HAMBS to retain a personal record so that we can service the individual more effectively.
When you visit our Site, our servers may record a range of information relating to your access and use of the Site (collectively called “clickstream data”). We may examine clickstream data to determine the traffic through the server as well as access levels to specific pages. No attempt will be made to identify you or your browsing activities from clickstream data except in the circumstances specified below.
If we or any authority suspect that unauthorised access or use of the Site has occurred or may occur or be attempted, we may gather, use and disclose more extensive information than indicated above regarding access or attempted access to the Site for the purposes of prevention, detection, investigation or prosecution.
Our website may contain links to other websites. HAMBS is not responsible for the privacy practices of these other websites.
4. USE AND DISCLOSURE OF INFORMATION
HAMBS may use and disclose an individual's personal information for the primary purpose for which the information was collected (see Collection of Information), as well as other reasonably expected secondary purposes, where the individual has consented, and otherwise in accordance with Privacy Laws, including:
HAMBS will only transfer personal information outside of Australia in accordance with applicable requirements of Privacy Laws including:
HAMBS is required to collect, store and in some cases disclose certain information, from time to time, in accordance with Australian health industry legislation.
We will not sell submitted information to third parties and, except to the extent necessary for the operation of our business or as authorised by you or as required by law, we will not use or disclose submitted information for any other purpose.
The restrictions on our use and disclosure of submitted information do not apply if we de-identify the submitted information (i.e. remove the information that allows any person to be identified).
Data Quality, Storage and Security
HAMBS strives to ensure that all personal information held in its records is accurate, completely up-to-date and secure.
Personal information held in electronic form on database systems are retained within Australia at facilities under contract to HAMBS. All electronic information is protected by password security and other industry standard data protection and encryption measures.
Access to personal information is restricted in accordance with HAMBS's procedures to those personnel whose job functions require access to such information. Certain administrative functions may from time to time be contracted out to third parties, and in these cases appropriate security measures are implemented to ensure the security and integrity of all personal information.
Some hard copy information is stored in secure office facilities, including locked filing cabinets at HAMBS' premises.
Data Breaches
We will take reasonable steps to implement and maintain security precautions and to protect personal information from misuse, interference, loss and unauthorised access, modification and disclosure. However, we are unable to guarantee that unauthorised access to submitted information will not occur, either during transmission of that information or after we receive that information.
If a data breach occurs or is suspected to have occurred, we will address that data breach in accordance with our then applicable Data Breach Response Plan and the requirements of the Privacy Laws. If we assess that a data breach is a notifiable data breach, we will comply with any applicable notification obligations.
You will promptly comply with any request for information, assistance or a decision that we may reasonably require in connection with a data breach or suspected data breach.
Where personal information is no longer required
If we no longer require your personal information, we will take reasonable steps to permanently destroy or de-identify that information. You acknowledge that our back-up procedures may make it impractical to locate and destroy or de-identify copies of your personal information which are stored off-line or in a form which does not readily permit location and modification of data and you consent to our continued retention of submitted information in these circumstances.
Government Identifiers
Although the nature of HAMBS's business services require it to collect, store, use and disclose certain identifiers created or issued by the Commonwealth Government (such as Medicare numbers and pension numbers), HAMBS's business systems are configured so that these identifiers are not used as a means of identifying the individual.
Access and Correction
Individuals may obtain access to the information held about them by HAMBS by written request to HAMBS's Privacy Officer as detailed below.
In accordance with the APPs, HAMBS may deny access to requests for access to information in certain circumstances, including where:
HAMBS will correct any personal information which it becomes aware is inaccurate, incomplete or out of date.
HAMBS is entitled to charge an administrative fee for providing an individual with access to information held on HAMBS's systems. HAMBS may also require certain administrative procedures be followed in order to substantiate an individual's request for access. The relevant administrative process and any fees will be advised when a request is made.
Point of Contact
To request access to your personal information held in HAMBS's records, to make a privacy related complaint, to obtain more information about HAMBS's Policy or to enquire about privacy matters generally, please contact The Privacy Officer as follows:
The Privacy Officer
c/o Risk and Compliance Manager
HAMB Systems Limited
Level 4, 169 Pirie Street
ADELAIDE SA 5000
Facsimile: 08 8334 0344
Email: admin@hambs.com.au
5. REVIEW
HAMBS may review and update this Policy from time to time to reflect changes in the law or HAMBS’s business practices and procedures, as well as the community’s changing privacy expectations. Changes to this Policy will not be notified to individuals, but the latest version of this Policy will be posted on HAMBS’s website at www.hambs.com.au, and is available from the HAMBS Privacy Officer at any time.
1. DEFINITIONS, PURPOSE & SCOPE
This is the Privacy Policy of HAMB Systems Limited (ABN 44 053 315 772) (“HAMBS”, “we”, “us” or “our”).
In this Privacy Policy:
The purpose of this document is to outline our policy in relation to privacy and to provide some information relating to how we collect, store, use and disclose personal information, and the rights of individuals to gain access to personal information held about them by HAMBS.
The Policy does not apply to employee records HAMBS maintains in relation to its employees.
2. HAMBS' PRIVACY COMMITMENT
HAMBS is committed to the protection of personal information in accordance with Privacy Laws.
We will use our best endeavours to comply with the provisions of this Privacy Policy with respect to the privacy of any personal information collected by us or which is submitted to us in any form by you or by any other person.
By accessing and using our Site or by submitting information to us or by providing information to third parties which is then submitted to us or by providing your consent to a third party permitting disclosure of your personal information to us, you thereby consent to our collection, use and disclosure of that information in accordance with this Privacy Policy.
You may elect not to submit personal information to us but this may mean that we are unable to provide you with information, products or services.
3. COLLECTION OF INFORMATION
HAMBS only collects personal information which is necessary in connection with its business purposes. The purposes for which HAMBS collects personal and sensitive information include:
HAMBS may also collect and store personal information (including sensitive information) about applicants who apply for employment with HAMBS for a maximum period of 12 months.
The specific types of personal information collected, stored, used and disclosed by HAMBS varies according to the purpose for its collection. However, in general this information typically includes:
Given the nature of its business systems, HAMBS collects most of the personal information it requires directly from individual health fund providers, under contracts for the provision of HAMBS' services to those health fund providers. As such, HAMBS may also be required to observe privacy obligations by the health fund providers to which it contracts its services. From time to time HAMBS may also collect personal information about an individual from other third party sources such as government agencies and health service providers including hospitals, doctors and other medical and related professionals.
HAMBS collects personal information about individuals from heath fund providers on the basis that the health fund providers to which HAMBS has contracted its services have made appropriate privacy-related disclosures to the individual and obtained their consent to the disclosure of their personal information to, and its collection by, HAMBS.
Where a third party, person or entity provides HAMBS with personal information about another individual, that third party must ensure that the other individual is aware of:
It is important that HAMBS collects all the necessary information it requires about an individual in order to provide relevant services. If it is unable to collect all the information it requires, HAMBS may be unable to properly and effectively provide its services, or it may not be able to supply its services at all.
It is not practicable for information submitted electronically to be provided to us anonymously or using a pseudonym. If you do not wish to provide any required personal information then you should not proceed with the completion of the relevant process.
We may use a third party to provide hosting or other services and as a result your submitted information may be collected and stored using physical infrastructure and software owned or licensed by third parties. In these circumstances (a) we will retain logical control of the submitted information; (b) the third party will not be permitted to access, use or disclose the submitted information except to the limited extent necessary to provide the services (e.g. creating data back-ups or performing maintenance services).
Internet User Information
HAMBS may collect information such as IP addresses and domain names via the use of website cookies. Cookies do not identify an individual personally, but may link to a stored record about them. These cookies allow HAMBS to retain a personal record so that we can service the individual more effectively.
When you visit our Site, our servers may record a range of information relating to your access and use of the Site (collectively called “clickstream data”). We may examine clickstream data to determine the traffic through the server as well as access levels to specific pages. No attempt will be made to identify you or your browsing activities from clickstream data except in the circumstances specified below.
If we or any authority suspect that unauthorised access or use of the Site has occurred or may occur or be attempted, we may gather, use and disclose more extensive information than indicated above regarding access or attempted access to the Site for the purposes of prevention, detection, investigation or prosecution.
Our website may contain links to other websites. HAMBS is not responsible for the privacy practices of these other websites.
4. USE AND DISCLOSURE OF INFORMATION
HAMBS may use and disclose an individual's personal information for the primary purpose for which the information was collected (see Collection of Information), as well as other reasonably expected secondary purposes, where the individual has consented, and otherwise in accordance with Privacy Laws, including:
HAMBS will only transfer personal information outside of Australia in accordance with applicable requirements of Privacy Laws including:
HAMBS is required to collect, store and in some cases disclose certain information, from time to time, in accordance with Australian health industry legislation.
We will not sell submitted information to third parties and, except to the extent necessary for the operation of our business or as authorised by you or as required by law, we will not use or disclose submitted information for any other purpose.
The restrictions on our use and disclosure of submitted information do not apply if we de-identify the submitted information (i.e. remove the information that allows any person to be identified).
Data Quality, Storage and Security
HAMBS strives to ensure that all personal information held in its records is accurate, completely up-to-date and secure.
Personal information held in electronic form on database systems are retained within Australia at facilities under contract to HAMBS. All electronic information is protected by password security and other industry standard data protection and encryption measures.
Access to personal information is restricted in accordance with HAMBS's procedures to those personnel whose job functions require access to such information. Certain administrative functions may from time to time be contracted out to third parties, and in these cases appropriate security measures are implemented to ensure the security and integrity of all personal information.
Some hard copy information is stored in secure office facilities, including locked filing cabinets at HAMBS' premises.
Data Breaches
We will take reasonable steps to implement and maintain security precautions and to protect personal information from misuse, interference, loss and unauthorised access, modification and disclosure. However, we are unable to guarantee that unauthorised access to submitted information will not occur, either during transmission of that information or after we receive that information.
If a data breach occurs or is suspected to have occurred, we will address that data breach in accordance with our then applicable Data Breach Response Plan and the requirements of the Privacy Laws. If we assess that a data breach is a notifiable data breach, we will comply with any applicable notification obligations.
You will promptly comply with any request for information, assistance or a decision that we may reasonably require in connection with a data breach or suspected data breach.
Where personal information is no longer required
If we no longer require your personal information, we will take reasonable steps to permanently destroy or de-identify that information. You acknowledge that our back-up procedures may make it impractical to locate and destroy or de-identify copies of your personal information which are stored off-line or in a form which does not readily permit location and modification of data and you consent to our continued retention of submitted information in these circumstances.
Government Identifiers
Although the nature of HAMBS's business services require it to collect, store, use and disclose certain identifiers created or issued by the Commonwealth Government (such as Medicare numbers and pension numbers), HAMBS's business systems are configured so that these identifiers are not used as a means of identifying the individual.
Access and Correction
Individuals may obtain access to the information held about them by HAMBS by written request to HAMBS's Privacy Officer as detailed below.
In accordance with the APPs, HAMBS may deny access to requests for access to information in certain circumstances, including where:
HAMBS will correct any personal information which it becomes aware is inaccurate, incomplete or out of date.
HAMBS is entitled to charge an administrative fee for providing an individual with access to information held on HAMBS's systems. HAMBS may also require certain administrative procedures be followed in order to substantiate an individual's request for access. The relevant administrative process and any fees will be advised when a request is made.
Point of Contact
To request access to your personal information held in HAMBS's records, to make a privacy related complaint, to obtain more information about HAMBS's Policy or to enquire about privacy matters generally, please contact The Privacy Officer as follows:
The Privacy Officer
c/o Risk and Compliance Manager
HAMB Systems Limited
Level 4, 169 Pirie Street
ADELAIDE SA 5000
Facsimile: 08 8334 0344
Email: admin@hambs.com.au
5. REVIEW
HAMBS may review and update this Policy from time to time to reflect changes in the law or HAMBS’s business practices and procedures, as well as the community’s changing privacy expectations. Changes to this Policy will not be notified to individuals, but the latest version of this Policy will be posted on HAMBS’s website at www.hambs.com.au, and is available from the HAMBS Privacy Officer at any time.
Privacy Statement
1. DEFINITIONS, PURPOSE & SCOPE
This is the Privacy Policy of HAMB Systems Limited (ABN 44 053 315 772) (“HAMBS”, “we”, “us” or “our”).
In this Privacy Policy:
The purpose of this document is to outline our policy in relation to privacy and to provide some information relating to how we collect, store, use and disclose personal information, and the rights of individuals to gain access to personal information held about them by HAMBS.
The Policy does not apply to employee records HAMBS maintains in relation to its employees.
2. HAMBS' PRIVACY COMMITMENT
HAMBS is committed to the protection of personal information in accordance with Privacy Laws.
We will use our best endeavours to comply with the provisions of this Privacy Policy with respect to the privacy of any personal information collected by us or which is submitted to us in any form by you or by any other person.
By accessing and using our Site or by submitting information to us or by providing information to third parties which is then submitted to us or by providing your consent to a third party permitting disclosure of your personal information to us, you thereby consent to our collection, use and disclosure of that information in accordance with this Privacy Policy.
You may elect not to submit personal information to us but this may mean that we are unable to provide you with information, products or services.
3. COLLECTION OF INFORMATION
HAMBS only collects personal information which is necessary in connection with its business purposes. The purposes for which HAMBS collects personal and sensitive information include:
HAMBS may also collect and store personal information (including sensitive information) about applicants who apply for employment with HAMBS for a maximum period of 12 months.
The specific types of personal information collected, stored, used and disclosed by HAMBS varies according to the purpose for its collection. However, in general this information typically includes:
Given the nature of its business systems, HAMBS collects most of the personal information it requires directly from individual health fund providers, under contracts for the provision of HAMBS' services to those health fund providers. As such, HAMBS may also be required to observe privacy obligations by the health fund providers to which it contracts its services. From time to time HAMBS may also collect personal information about an individual from other third party sources such as government agencies and health service providers including hospitals, doctors and other medical and related professionals.
HAMBS collects personal information about individuals from heath fund providers on the basis that the health fund providers to which HAMBS has contracted its services have made appropriate privacy-related disclosures to the individual and obtained their consent to the disclosure of their personal information to, and its collection by, HAMBS.
Where a third party, person or entity provides HAMBS with personal information about another individual, that third party must ensure that the other individual is aware of:
It is important that HAMBS collects all the necessary information it requires about an individual in order to provide relevant services. If it is unable to collect all the information it requires, HAMBS may be unable to properly and effectively provide its services, or it may not be able to supply its services at all.
It is not practicable for information submitted electronically to be provided to us anonymously or using a pseudonym. If you do not wish to provide any required personal information then you should not proceed with the completion of the relevant process.
We may use a third party to provide hosting or other services and as a result your submitted information may be collected and stored using physical infrastructure and software owned or licensed by third parties. In these circumstances (a) we will retain logical control of the submitted information; (b) the third party will not be permitted to access, use or disclose the submitted information except to the limited extent necessary to provide the services (e.g. creating data back-ups or performing maintenance services).
Internet User Information
HAMBS may collect information such as IP addresses and domain names via the use of website cookies. Cookies do not identify an individual personally, but may link to a stored record about them. These cookies allow HAMBS to retain a personal record so that we can service the individual more effectively.
When you visit our Site, our servers may record a range of information relating to your access and use of the Site (collectively called “clickstream data”). We may examine clickstream data to determine the traffic through the server as well as access levels to specific pages. No attempt will be made to identify you or your browsing activities from clickstream data except in the circumstances specified below.
If we or any authority suspect that unauthorised access or use of the Site has occurred or may occur or be attempted, we may gather, use and disclose more extensive information than indicated above regarding access or attempted access to the Site for the purposes of prevention, detection, investigation or prosecution.
Our website may contain links to other websites. HAMBS is not responsible for the privacy practices of these other websites.
4. USE AND DISCLOSURE OF INFORMATION
HAMBS may use and disclose an individual's personal information for the primary purpose for which the information was collected (see Collection of Information), as well as other reasonably expected secondary purposes, where the individual has consented, and otherwise in accordance with Privacy Laws, including:
HAMBS will only transfer personal information outside of Australia in accordance with applicable requirements of Privacy Laws including:
HAMBS is required to collect, store and in some cases disclose certain information, from time to time, in accordance with Australian health industry legislation.
We will not sell submitted information to third parties and, except to the extent necessary for the operation of our business or as authorised by you or as required by law, we will not use or disclose submitted information for any other purpose.
The restrictions on our use and disclosure of submitted information do not apply if we de-identify the submitted information (i.e. remove the information that allows any person to be identified).
Data Quality, Storage and Security
HAMBS strives to ensure that all personal information held in its records is accurate, completely up-to-date and secure.
Personal information held in electronic form on database systems are retained within Australia at facilities under contract to HAMBS. All electronic information is protected by password security and other industry standard data protection and encryption measures.
Access to personal information is restricted in accordance with HAMBS's procedures to those personnel whose job functions require access to such information. Certain administrative functions may from time to time be contracted out to third parties, and in these cases appropriate security measures are implemented to ensure the security and integrity of all personal information.
Some hard copy information is stored in secure office facilities, including locked filing cabinets at HAMBS' premises.
Data Breaches
We will take reasonable steps to implement and maintain security precautions and to protect personal information from misuse, interference, loss and unauthorised access, modification and disclosure. However, we are unable to guarantee that unauthorised access to submitted information will not occur, either during transmission of that information or after we receive that information.
If a data breach occurs or is suspected to have occurred, we will address that data breach in accordance with our then applicable Data Breach Response Plan and the requirements of the Privacy Laws. If we assess that a data breach is a notifiable data breach, we will comply with any applicable notification obligations.
You will promptly comply with any request for information, assistance or a decision that we may reasonably require in connection with a data breach or suspected data breach.
Where personal information is no longer required
If we no longer require your personal information, we will take reasonable steps to permanently destroy or de-identify that information. You acknowledge that our back-up procedures may make it impractical to locate and destroy or de-identify copies of your personal information which are stored off-line or in a form which does not readily permit location and modification of data and you consent to our continued retention of submitted information in these circumstances.
Government Identifiers
Although the nature of HAMBS's business services require it to collect, store, use and disclose certain identifiers created or issued by the Commonwealth Government (such as Medicare numbers and pension numbers), HAMBS's business systems are configured so that these identifiers are not used as a means of identifying the individual.
Access and Correction
Individuals may obtain access to the information held about them by HAMBS by written request to HAMBS's Privacy Officer as detailed below.
In accordance with the APPs, HAMBS may deny access to requests for access to information in certain circumstances, including where:
HAMBS will correct any personal information which it becomes aware is inaccurate, incomplete or out of date.
HAMBS is entitled to charge an administrative fee for providing an individual with access to information held on HAMBS's systems. HAMBS may also require certain administrative procedures be followed in order to substantiate an individual's request for access. The relevant administrative process and any fees will be advised when a request is made.
Point of Contact
To request access to your personal information held in HAMBS's records, to make a privacy related complaint, to obtain more information about HAMBS's Policy or to enquire about privacy matters generally, please contact The Privacy Officer as follows:
The Privacy Officer
c/o Risk and Compliance Manager
HAMB Systems Limited
Level 4, 169 Pirie Street
ADELAIDE SA 5000
Facsimile: 08 8334 0344
Email: admin@hambs.com.au
5. REVIEW
HAMBS may review and update this Policy from time to time to reflect changes in the law or HAMBS’s business practices and procedures, as well as the community’s changing privacy expectations. Changes to this Policy will not be notified to individuals, but the latest version of this Policy will be posted on HAMBS’s website at www.hambs.com.au, and is available from the HAMBS Privacy Officer at any time.