South Bank Corporation (ABN 95 927 817 538) (“SBC”, “we”, “us”, “our”) is committed to protecting your personal information. Please read this Privacy Statement carefully as it sets out how and why SBC uses your personal information when you access our website, services and/or otherwise engage with us.
If you have any questions or comments about this Privacy Statement, please find our contact details in section 9 “How can you contact us”.
We may change this Privacy Statement from time to time by updating this page. This Privacy Statement does not apply to any third-party websites, to which you may be directed from our website. We do not accept any responsibility or liability for the privacy practices of such third parties and your use of them is at your own risk.
SBC is the development and management authority for the Brisbane South Bank precinct. The precinct includes the South Bank Plaza, restaurants, beach, carpark, parklands and Brisbane Convention and Exhibition Centre. SBC has day-to-day responsibility for overseeing the precinct’s operations, maintenance, security, events and commercial assets.
We may collect personal information from you or individuals working for your organisation in various circumstances, including in the use of our website, attendance at one of our events and/or where we otherwise engage with you. The personal information that we may collect and the reasons for using it will depend on the nature of your relationship with us but may include the types of information and purposes set out below:
In general, we need the personal information described above because it is necessary in SBC’s legitimate business activities to provide its services to either engage with you, or to develop and to manage the operations of the South Bank precinct. In addition, it may be necessary for SBC to collect and use personal information to perform a contract with you or with your organisation. For example, your relationship with us may involve the transfer of personal information of employees, customers and/or other third parties. Without this information, we cannot enter into the contract.
In some instances, it is necessary for SBC to collect certain personal information to comply with legal and regulatory requirements. For example, in order to comply with Australian workplace laws, we need to obtain the identity of relevant individuals and conduct certain background checks on them before we onboard a new employee.
We may share information that you have provided to us as necessary with certain third parties such as service providers acting on our behalf who will use the data to provide the service. These may include insurers, IT service providers, recruiters, accountants, auditors, state government entities, caterers, etc. We will ensure that any third-party service provider that we use commits to an appropriate level of security and confidentiality to protect your personal information.
In certain circumstances, we may have to disclose your personal information for legal or regulatory purposes, such as where a court, the police or other law enforcement agency or regulatory body has asked us for it.
From time-to-time it may be necessary to send your personal information to third parties (as per section 4 “Who do we share your personal information with”). For example, our website is hosted on Microsoft Azure servers in Australia, and data collected by our marketing platform is based in the USA.
Some of the countries where your personal information is transferred have a different standard of data protection than the country in which you are situated. However, we have put in place contractual or other appropriate protections to ensure that your information is safeguarded to the same standards globally.
We are committed to ensuring that any personal information that we hold about you is kept securely in accordance with our policies and procedures. These include appropriate physical and technological security measures, such as access controls, regular penetration testing of our systems and careful selection of staff and third-party service providers.
Your personal information will be retained in line with legal and regulatory retention periods. At the end of any retention period, your personal information will either be securely deleted in its entirety or anonymised so that you can no longer be identified from that information.
You may have various legal rights in relation to your personal information, as set out in this section.
Such rights may allow you to ask SBC to:
Provide a copy of your personal information (subject to the privacy rights of other people and the information already provided to you in applicable privacy notices);
Correct any inaccuracies in your personal information by informing us to make the necessary changes;
Modify or withdraw your consent for the collection, use and disclosure of your personal information (see section 3 “When and how do we use your personal information”).
You may enquire about the above rights by contacting SBC’s Privacy Officer (see section 9 “How can you contact us”).
If you have any concerns, or requests related to how we collect and handle your personal information, or if you have a complaint or question that hasn’t been covered above, please contact us by emailing privacy@south-bank.net.au
If you are concerned your personal information has been mishandled, you can make a complaint to the Queensland Office of the Information Commissioner (OIC), which is an independent government agency and regulator with primary responsibilities for privacy and freedom of information. However, we would appreciate the chance to understand and address any concerns you might have before you contact the OIC.
This Privacy Statement was last updated in June 2024. We may change this Privacy Statement from time to time by updating this page.