This Privacy Notice is intended to describe the practices EY follows in relation to the Just Like You (JLY) Program and its website www.justlikeyou.org.au (the “Website”) with respect to the privacy of all individuals whose personal data is processed and stored because of their use of the Website or participation in the program. Just Like You is a disability awareness and inclusion program managed by EY on behalf of Variety – The Children’s Charity (NSW/ACT) (“Variety”) delivered to young people in schools across NSW and the ACT (the “Program”).
2. Who manages the website?
“EY” refers to one or more of the member firms of Ernst & Young Global Limited (“EYG”), each of which is a separate legal entity and can act as a data controller in its own right. The entity that is acting as data controller by collecting, processing, and storing your personal data in connection with the Program (including via the Website) is Ernst & Young. The information you provide is being collected by EY, as a service provider to Variety.
The personal data you provide on the Website may be shared by Ernst & Young with one or more member firms of EYG (see “Who can access your information” section below).
The Website is hosted on servers in Australia.
3. Why do we need your information?
We may collect personal information from you when you submit an enquiry or expression of interest through the Website, participate in the JLY program, or when we have other business dealings with you in connection with the Program.
The ways in which we may collect this information may be via the Website, program booking forms, program evaluation surveys, email correspondence or in-person as part of the program delivery program at your school or workplace.
Your personal data processed in connection with the Program may be used as follows:
- To respond to your enquiry or expression of interest in the program;
- To contact you in order to book the program;
- To provide you with Program resources; or
- To contact you to invite you to events or for other direct marketing purposes.
EY relies on the following basis to legitimize the processing of your personal data: You have given consent to the processing of your personal data for one or more specific purposes.
The provision of your personal data to EY is optional. However, if you do not provide all or part of your personal data, we may be unable to carry out the purposes for processing.
4. What type of personal data is processed?
EY may process the following categories of personal data in connection with the Program (including through the Website): First name, last name, job title, email and telephone number.
This data is sourced from you directly unless it is unreasonable or impracticable to do so.
5. Sensitive Personal Data
Sensitive personal data reveals your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning sex life or sexual orientation. EY does not intentionally collect any sensitive personal data from you via the Website or otherwise in connection with the Program. EY’s intention is not to process such information.
6. Who can access your information?
Your personal data is accessed by the following persons/teams: The Program team, including facilitators or programs and administrative staff, and Variety.
From time to time, EY may also share your personal data with other third parties who may be providing, offering, sponsoring or otherwise assisting in the conduct of the Program you are participating in, or expressed your interest to participate in.
The access rights detailed above involves transferring personal data in various jurisdictions (including jurisdictions outside the European Union) in which EY operates (EY office locations are listed at www.ey.com/ourlocations). EY will process your personal data provided in connection with the Program (including via the Website) in accordance with applicable law and professional regulations in your jurisdiction. Transfers of personal data within the EY network are governed by EY’s Binding Corporate Rules (www.ey.com/bcr).
7. Data retention
All information collected via the Website is retained in accordance with EY Global Records Retention policies and procedures.
Your personal data will be retained in compliance with privacy laws and regulations. After the end of the data retention period, your personal data will be deleted.
EY is committed to making sure your personal data is secure. To prevent unauthorized access or disclosure, EY has technical and organizational measures to safeguard and secure your personal data. All EY personnel and third parties EY engages to process your personal data are obliged to respect your data’s confidentiality.
9. Controlling your personal data
EY will not transfer your personal data to third parties (other than any external parties referred to in section 6 above) unless we have your permission or are required by law to do so.
You are legally entitled to request details of EY’s personal data about you. To confirm whether your personal data is processed by or to access your personal data collected in connection with the Program, contact your usual JLY representative or email your request to email@example.com or firstname.lastname@example.org.
10. Rectification, erasure, restriction of processing or data portability
You can confirm your personal data is accurate and current. You can request rectification, erasure, restriction of processing or a readily portable copy of your personal data by contacting your usual JLY representative or by sending an e-mail to email@example.com or firstname.lastname@example.org.
If you are concerned about an alleged breach of privacy law or any other regulation, contact EY’s Global Privacy Officer, Office of the General Counsel, 6 More London Place, London, SE1 2DA, United Kingdom or via email at email@example.com or firstname.lastname@example.org or via your usual JLY representative. An EY Privacy Officer will investigate your complaint and provide information about how it will be handled and resolved. If you are not satisfied with how EY resolved your complaint, you have the right to complain to your country’s data protection authority. You can also refer the matter to a court of competent jurisdiction.
13. Contact us
If you have additional questions or concerns, contact your usual Just Like You representative or email email@example.com or firstname.lastname@example.org.
Date last revised: December 2021