The Auto Recyclers Association of Australia Limited (ARAA) manages private information in accordance with the Privacy Act 1988.

In particular, the Association’s privacy policy implements the thirteen Australian Privacy Principles (APPs) set out in the Privacy Act, which specify how organisations should collect, use, keep, secure and disclose personal information.

The principles also give individuals a right to know what information an organisation holds about them and a right to correct that information if it is wrong, and how to make a complaint in the event of a breach.

Overview of personal information collected by ARAA

For the most part, personal information collected by ARAA falls under two categories:

information concerning staff and directors, as required in the normal course of human resource management; and
information concerning automotive recyclers, motor vehicle wreckers, motor vehicle exporters, second-hand parts sellers, scrap metal traders, service providers and people with whom ARAA has dealings (typically contact details for individuals and, in some instances, bank account details for electronic payments).

Australian Privacy Principle 1 — Open and transparent management of personal information
ARAA will take such steps as are reasonable in the circumstances to implement practices, procedures and systems relating to ARAA’ functions or activities that will ensure its compliance with the APPs and will enable ARAA to deal with inquiries or complaints from individuals about ARAA’s compliance with the APPs. In this respect, ARAA will maintain this privacy policy and keep it up to date. Copies are available free of charge upon request.

Australian Privacy Principle 2 — Anonymity
Wherever it is lawful and practicable, individuals will have the option of not identifying themselves when entering transactions with ARAA.

Australian Privacy Principle 3 – Collection
ARAA will only collect personal information by lawful or fair means, such as when an individual knowingly provides that information to ARAA, and will not collect personal information for inclusion in a record or in a generally available publication unless the information is collected for a lawful purpose that is reasonably necessary for, or directly related to, the function of ARAA.
ARAA will not collect sensitive information except with consent from the individual or in circumstances permitted by the APPs.

Australian Privacy Principle 4 — Dealing with unsolicited personal information
If ARAA receives personal information that it did not solicit, it will, within a reasonable period after receiving the information, determine whether or not it could have lawfully collected the information under Principle 3 and if it could not, then it will, as soon as practicable but only if it is lawful and reasonable to do so, destroy the information or ensure that the information is de-identified.

Australian Privacy Principle 5 — Notification of the collection of personal information
At the time ARAA collects personal information (or as soon as practicable thereafter), ARAA will take steps as are reasonable in the circumstances to notify the individual of the matters set out in this policy or otherwise ensure they are aware of such matters.

Australian Privacy Principle 6 — Use and disclosure
When in possession or control of a record that contains personal information, ARAA will only use and disclose the information for the purpose for which the information was collected.
When in possession or control of a record that contains personal information that was obtained for a particular purpose, ARAA will not use or disclose the information for any other purpose unless:

the individual concerned has consented;
ARAA believes on reasonable grounds that use of the information for that other purpose is necessary to event or lessen a serious and imminent threat to the life or health of the individual concerned or of another person;
use of the information for that other purpose is required by law;
use of the information for that other purpose is reasonably necessary for the enforcement of the law, or for the protection of public revenue (if this right is exercised, ARAA will include in the record containing that information a note of that use); or
the purpose for which the information is used is directly related to the purpose for which the information was obtained and the individual would reasonably expect the organisation to use or disclose the information for the secondary purpose.

Australian Privacy Principle 7 — Direct marketing
ARAA may use or disclose personal information for the purposes of direct marketing, including via electronic communications and telephone. By providing personal information directly to ARAA, individuals consent to this. ARAA will provide a simple means by which an individual can request not to receive direct marketing.

Australian Privacy Principle 8 — Cross-border disclosure of personal information
ARAA will only transfer personal information about an individual to someone (other than ARAA or the individual) who is in a foreign country if that person agrees to treat the information in compliance with the Australian Privacy Principles.

Australian Privacy Principle 9 — Adoption, use or disclosure of government related identifiers
ARAA will not adopt as its own identifier of an individual, a government related identifier of the individual.

Australian Privacy Principle 10 — Quality of personal information
When ARAA has possession or control of a record that contains personal information, it will not use that information without taking steps as are reasonable in the circumstances to ensure the information is accurate, up to date and complete.

Australian Privacy Principle 11 — Data security
When ARAA has possession or control of a record that contains personal information, it will take reasonable steps in the circumstances to ensure the following: The record is protected by security safeguards against loss; against unauthorised access, use, modification or disclosure; and against other misuses. It will destroy or permanently de-identify personal information if it is no longer needed for any purpose for which the information may be used or disclosed under Principle 3.

Australian Privacy Principle 12 — Access
If ARAA holds personal information about an individual, it will provide the individual with access to the information on request by the individual, except to the extent of exceptions detailed in the APPs. ARAA will provide reasons for denial of access to personal information.

Australian Privacy Principle 13 — Correction
If ARAA holds personal information about an individual and the individual requests that the information be corrected, ARAA will take reasonable steps to correct the information so that it is accurate, complete and up-to-date.
ARAA will provide reasons for any refusal to correct personal information.