ACER and your personal information
This is our Privacy Policy which sets out under the Australian Privacy Act 1988:
- What personal information The Australian Council for Educational Research Ltd (collectively, ACER, we, our or us) collect about you;
- how we collect your personal information, how we hold it, how we use it and who we disclose it to;
- what information we may collect from you when you use our website or an ACER product or service; and
- how you may access and seek correction of your personal information or complain about a breach of your privacy.
Where the General Data Protection Regulation 2016/679 (implemented within the United Kingdom by its Data Protection Act 2018) (GDPR) is applicable to any personal information collected by us the following notice https://www.acer.org/gb/privacy-policy sets out our obligations and your rights.
This Privacy Policy may be amended from time to time if our practices change.
On our website, you may find links to other websites not operated by us. This Privacy Policy does not apply to them – always check the Privacy Policy of any other website you enter.
You can navigate separate sections of this Privacy Policy through the links below.
1. What kinds of personal information do we collect and how?
2. What is our approach to collecting personal information about children?
3. When do we collect your personal information?
4. Why do we collect the information and how do we use or disclose it?
5. Can you choose to remain anonymous?
6. How can you request not to receive direct marketing?
7. Who do we disclose your personal information to?
8. Do we disclose your information overseas?
9. How do we hold your personal information and keep it secure?
10. How can you seek access to, and correction of your information?
11. How can you seek further information or complain about a breach of your privacy?
What kinds of personal information do we collect and how?
The personal information we collect depends on your relationship with us – whether you are a client, a candidate or a prospective employee – and the product or service we are delivering. It may include:
- your contact details, photograph and personal preferences (such as name, address, email address, phone number and dietary requirements);
- your website registration and login information;
- your payment details (such as credit card details);
- your employment history and qualifications;
- government-related identifiers and information (such as student number, working with children details and police checks); and
- your testimonials, feedback and complaints.
Sometimes we may also collect sensitive information about you. This may happen, for example, through surveys we conduct or when you sit tests, and may include your race and religious beliefs and your health information (such as whether you have any disability or medical condition and require special testing accommodations). We will only collect sensitive information from you or about you with your consent unless otherwise required or authorised by law.
By supplying sensitive information about yourself or on behalf of your child, you will be taken to have given your consent to our collection of that information. When we obtain such information from a third party (such as through a school or institution at which you or your child studies), we will usually enlist that third party to obtain consent from you if that is required.
What is our approach to collecting personal information about children?
We collect information about children who, for example, sit assessments at schools to whom we provide our services, participate in our surveys or participate in other research projects. Whether a child has the capacity to make his or her own privacy decisions is assessed by us on a case by case basis, having regard to factors such as their age and circumstances. In general, a person over 15 years will have the capacity to make his or her own privacy decisions.
For children who are under 15 years old, or who otherwise do not have capacity to make these decisions for themselves, or where we cannot make an assessment of their capacity, ACER will refer or deal with requests for access, consent and notices in relation to personal information to the parent and/or guardian or relevant school or institution. We will treat consent given by a parent and/or guardian as consent given on behalf of the child, and notices to the relevant school or other institution or parent and/or guardian will act as notice given to the child.
When do we collect your personal information?
We may collect your personal information when you contact us, purchase or use our products or services (including when you sit a test or participate in a survey or other research), register with us online, participate in our online discussion boards or enter our competitions, contribute to one of our social media pages (such as Twitter, LinkedIn, Vimeo and Facebook), attend an ACER event, apply for a job with us, provide services to us or make a donation through the ACER Foundation.
Given the nature of our products and services, we often collect personal information about you from third parties, such as the school or educational institution that you (or your child) attends. We may also collect information through secure web based application systems if you do certain assessments, and from other third parties where you have agreed with them that your information may be disclosed.
Why do we collect the information and how do we use or disclose it?
We collect, hold, use and disclose your personal information:
- to deliver our educational research and learning products and services (including our consultancy services and professional development programs, such as testing, assessments and training);
- to publish educational material;
- to conduct our retail activities (including through our website);
- to operate and manage the ACER Foundation and ACER Cunningham Library;
- to develop and enhance our products and services;
- to conduct research and plan and develop our product strategies;
- to provide and operate our competitions, events and promotions;
- to market and promote our products and services; and
- to comply with our legal obligations.
Can you choose to remain anonymous?
You may elect not to identify yourself or you may use a pseudonym in your dealings with us, except where it is impracticable for us to deal with you on this basis (for example, we will need to identify you in order to provide most of our products and services). You can always choose not to give us your information or remain anonymous, but if you do we may not be able to provide you (or our client) with the products and services that you (or they) have asked for.
How can you request not to receive direct marketing?
You may ask us at any time to stop sending you direct marketing information or to stop being contacted by or on our behalf, in a particular way or at all. You can do this by calling us on +61 3 9277 5555 or by contacting us via our website.
Who do we disclose your personal information to?
We may disclose your personal information (including, in certain limited circumstances, your sensitive information):
- to schools, educational institutions, psychologists, HR practitioners and other third parties who have contracted with us for the provision of our products and services. For example, if you are a candidate for an ACER scholarship test, we will supply your test results to those schools to which you have applied for a scholarship;
- to entities who assist us in providing and administering our products and services and our events and promotions (including hosting, data storage, payment systems, printing and scanning providers and debt collectors, and which includes those sub-processors listed at https://www.acer.org/privacy#sub-processors);
- to companies that promote and market, or conduct research to help us improve and target, our products and services;
- to social media sites on which we have a presence;
- where we are required to do so by law, or to government agencies, or individuals appointed by government, responsible for investigating and resolving disputes or complaints concerning our products or services.
When you enter into a competition we are running or participate in a sponsored event, we may seek, as a condition of entry, consent to pass your information to a promoter or sponsor of the competition or event. If we do this, we will notify you at the time of entering into the competition or event with us.
Do we disclose your information overseas?
We may disclose your personal information:
- to our related bodies corporate located overseas (including in India and the UK) to assist us in delivering our products and services; and
- to overseas educational institutions (including schools and universities) and other organisations or bodies (including government agencies) who are our clients and to whom we need to provide your personal information in order to deliver our products and services.
How do we hold your personal information and keep it secure?
We hold your personal information in a combination of electronic and hard copy files. We may store your personal information with one or more third party data storage providers.
We may combine personal information we receive about you with other information we hold about you. This includes information received from third parties. Where reasonably practicable, we will de-identify personal information we collect from studies we carry out as part of our research activities.
We take all reasonable steps to ensure that the personal information we hold is protected from misuse, interference and loss, and unauthorised access, modification or disclosure by the use of various methods, including password protection and secure storage. Where we store your personal information with a third party data storage provider, we require them to keep it secure and only use or disclose it for the purpose for which it was provided.
Please contact us immediately if you become aware or have reason to believe there has been any unauthorised use of your personal information that we hold.
How can you seek access to, and correction of your information?
You may request access to your personal information by writing to us or contacting us at any time at the details below. We will need to verify your identity before we can give you access. We will promptly acknowledge receipt, and we will endeavour to deal with and respond to your request within a reasonable time (usually within two weeks).
In certain circumstances, we are permitted by law to refuse access to your personal information (such as where providing access would have an unreasonable impact upon the privacy of other individuals, or would reveal our test scoring processes or other commercially sensitive information).
In such cases, we will give you a written explanation for our decision (including, where applicable, an alternative means of access to the information, such as supervised inspection), and how you can complain if you are not satisfied with our decision.
You will not be charged for making a request for your personal information. However, we may charge a fee to provide your information to cover administrative costs (including for supervised inspection). We will inform you of any fee at the time your request is made.
If you think that any personal information we hold about you is inaccurate, incomplete, out-of-date or irrelevant, you may ask us to correct it. We will take reasonable steps to correct it unless we disagree with your reasons. If we refuse to correct your personal information we will give you a written explanation why.
How can you seek further information or complain about a breach of your privacy?
If you have any questions about this Privacy Policy or consider that we have breached your privacy, you can contact us at:
The Manager Legal and Corporate Services
The Australian Council for Educational Research Limited
19 Prospect Hill Road
Camberwell Victoria 3124
Australia
Email: david.noga@acer.edu.au
Telephone: +61 3 9277 5555
We will investigate any complaint, and notify you of our decision in relation to the complaint, as soon as practicable after it is received.
If we are unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Australian Information Commissioner:
GPO Box 5218
Sydney NSW 2001
Tel: 1300 363 992
Sub-Processor list
ACER uses the following third parties (sub-processors) in connection with the operation of the Online Assessment and Reporting Systems platform (OARS). These sub-processors may process personal information that ACER collects in connection with the operation of OARS.
Sub-processor | Location of data processing | Purpose of data processing |
---|---|---|
Amazon Web Services Australia Pty Ltd | Australia | Data storage |
Zendesk Pty Ltd | Australia | Customer support services |
Mongodb Australia Pty Ltd | Australia | Cloud-based database supporting various integrated data services |
Stripe Payments Australia Pty Ltd | United States of America | Payment processing services |
Vantage Learning (USA) LLC | United States of America | Assessment software |
Turnitin LLC | Australia | Plagiarism detection software |
PAR Inc | United States of America | NEO Personality Inventory test |
Psychometrics Canada Ltd | Canada | Work Personality Index tests |
Google LLC | United States of America | Google Analytics to monitor website traffic data and website performance |