LUNA PARK MELBOURNE
1. Purpose of Policy and Information About Luna Park Melbourne
Luna Park Melbourne Pty Ltd (referred to in this document as “Luna Park””, “we”, “our”, or “us”) believes that the values of honesty and integrity in relation to our dealings with our customers also extend to the collection, storage and use of personal information. This Policy summarises Luna Park’s approach to meeting this commitment. Please read this Policy carefully to learn how we collect, use and otherwise process information relating to individuals (“personal information”), and your rights and choices regarding our processing of your personal information.
This Policy and all personal information collected and dealt with by Luna Park is subject to the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles contained in Schedule 1 of the Privacy Act, as amended from time to time.
If you provide us with personal and/or sensitive information of a third party individual, for example other people attending Luna Park with you, you will be responsible for informing the individual of the existence of this Policy and obtaining their consent for their personal and/or sensitive information to be provided to Luna Park for the purposes indicated in this Policy, or as otherwise indicated at the time of collection.
2. What Personal Information Do We Collect?
We collect various types of personal information, including:
- Contact Details: Name, address, phone number and email address.
- Transaction Details: Booking history and payment information (processed securely and not retained).
- Technical Data: IP addresses, browser type, cookies and usage data.
- Survey Responses: Feedback from surveys on your experience.
- Social Media: Publicly shared photos and posts referring to Luna Park.
- Visitor Information: Name, email address, phone number, company name, and time and date of arrival if you visit our offices.
We may also collect sensitive information (as defined in the Privacy Act) about you. We will only collect your sensitive information with your consent and where information is reasonably necessary for one or more of our services.
We will only use and disclose your sensitive information for the primary purpose for which it was collected, or a purpose that is directly related to this primary purpose and is reasonably expected. You consent to the use and disclosure on this basis. We will not otherwise collect, use or disclose sensitive information about you unless required to do so by law.
3. When Do We Collect Your Personal information?
In the course of regular business activity, and in order to use the website and/or our services, Luna Park will from time to time collect, require and otherwise deal with your personal and/or sensitive information.
If you do not want any of your personal and/or sensitive information collected, you can stop using the website and/or our services at any time (subject to applicable contracts). However, in this case, we may not be able to provide our services to you.
Luna Park collects personal and/or sensitive information from individuals in numerous ways, including for example when an individual:
- Visits our venue.
- Browse our website.
- Engages with our social media profiles.
- Subscribes to our databases
- Downloads our mobile apps.
- Contact us with a query or issue.
- Completes a survey.
- Carries out transactions through our site.
- Visits our offices.
Luna Park does not generally take steps to:
- Verify personal and/or sensitive information about any individual disclosed to it; or
- Seek additional personal and/or sensitive information about any individual on the basis of information disclosed to it,
Except in circumstances where it is reasonably necessary for us to do so or as may be required by law.
4. How Do We Use Personal Information?
Any personal information we collect will be used for the purpose for which it was given to us, for purposes which are directly related to those purposes, for purposes which you have otherwise consented to, or for other purposes in accordance with the Privacy Act, law or this Privacy Policy.
Without limitation, we may use your personal information to:
- Ensure content from our site is presented effectively.
- Match your purchase or booking details to prevent fraudulent activity or identity theft.
- Provide you with information, products or services you request, or which we feel you may be interested in.
- Carry out our contractual obligations.
- Allow you to participate in interactive features of our service.
- Notify you about changes to our service.
- Inform you of updates to our Terms and Conditions and Privacy Policy.
- Processing applications for employment.
- Set up, administer and maintain a customer/business relationship.
5. What Legal Basis Do We Have for Processing Your Personal information?
Our Privacy Policy applies to your personal information regardless of how we collect it. By submitting information to us and/or accessing and using our website or social media platforms, you consent to us using and disclosing your personal information in the ways described in this Privacy Policy. The legal bases for processing your personal information include:
- Consent: When you have given consent for us to process your personal information.
- Contractual Necessity: When processing is necessary for the performance of a contract or transaction with you.
- Legal Obligation: When processing is necessary for compliance with a legal obligation.
- Legitimate Interests: When processing is necessary for our legitimate interests, provided it does not override your interests or fundamental rights and freedoms.
6. Who Do We Share Your Personal information With?
We may disclose your personal information in a variety of circumstances, including to:
- Contractors, agents and suppliers we engage to provide products and/or perform services for us.
- Commercial partners with whom we have agreed information sharing arrangements.
- Credit card providers, payment processers, credit reporting and fraud checking agencies.
- Our professional advisors, such as lawyers and accountants.
- Service providers who help manage our IT and back-office systems.
- Our website development agency.
- Law enforcement bodies.
- Third party sponsors or co-sponsors of promotions on our website. Only information collecting during a promotion may be disclosed to these parties.
- A purchaser of all or part of Luna Park’s business.
- Any other person for any other purposes that would be reasonably expected (including if required by law).
When third parties perform services on our behalf, we take reasonable steps to ensure the third party will protect your personal information in accordance with Australian Privacy laws and in a manner consistent with this Privacy Policy.
7. How Do We Secure Personal information?
Luna Park takes reasonable steps to maintain the security of your personal information and to prevent the misuse, interference, loss, modification and unauthorised access to or disclosure of your personal information. We have implemented a variety of electronic and physical security measures to safeguard the privacy of your personal information. These measures include:
- Information stored on secured networks accessible only by those with special access rights.
- Websites use a secure server so that credit card details provided when purchasing tickets or paying for goods are transmitted via Secure Socket Layer (SSL) technology.
- Industry-standard encryption technologies are used when transferring or receiving sensitive information.
- Hardcopy documents stored in secured areas accessible only by those with special access rights.
- PCI Compliance for Eftpos terminals at retail outlets.
- Regular penetration testing of our IT networks.
- Periodic data reconciliation on point-of-sale systems to ensure no unencrypted credit card details are stored.
While we strive to protect your personal information, we cannot guarantee its complete security. No data transmission over the Internet can be guaranteed to be 100% secure. If you have an online account with us, you should keep your login details private and secure. We will not be responsible for any loss or harm that you may suffer as a result of a leak of your personal information unless we have breached this Privacy Policy or Australian Privacy Laws.
8. How Long Do We Keep Your Personal Information For?
We will retain your personal information for as long as is reasonably necessary for the specific purposes. In particular, where there has been no interaction from a consumer (eg. a purchase, email, newsletter sign up, etc.), a record will be archived after one (1) year and deleted after three (3) years. Where we are required to meet legal, regulatory, tax or accounting requirements, we will retain your personal information for longer periods of time, but only where permitted to do so. We maintain a Data Retention Policy, which we apply to records in our care. Where your personal information is no longer required and we do not have a legal requirement to retain it, we will ensure it is either securely deleted or stored.
9. Your Rights in Relation to Personal Information
Should you have any concerns regarding the information we hold in respect of you, then please contact us so that we can rectify any issues. You have the right to:
- Request a copy of your personal information.
- Request inaccurate personal information is corrected.
- Opt-out of receiving communications from us.
You have the right to access the personal information that we hold about you. If the information we hold about you is incorrect, we will modify the information as soon as is practicable. Your personal information may not be stored at Luna Park. We will comply with any reasonable request for access to your personal information as soon as it is possible to do so. In the event that we will incur a significant cost due to compliance with such a request, we may seek payment of these costs before the request is granted. Should we feel it necessary to refuse a request for access to personal information held by us about you, you will be informed of the reasons for that refusal. When contacting us, we may require evidence of your identity. We aim to deal with your request within thirty (30) days. We may need to explain to you the repercussions of deleting your data from our records and its effect on current purchases, bookings, or annual passes. People with any further questions regarding this should contact the Office of the Australian Information Commissioner (www.oaic.gov.au).
10. Use of Automated Decision-Making and Profiling
Automated Decision Making refers to a decision which is taken through the automated processing of your personal information alone – this means processing using, for example, a software code or an algorithm, which does not involve any human intervention. We do not carry out any automated decision-making. However, we do carry out profiling using automated processing to tailor marketing materials for a specific customer. Where we have permissions to send consumer marketing updates, we may use profiling to ensure that marketing materials are tailored to your preferences and to what we think you will be interested in.
11. Use of Cookies and Other Technologies
A cookie is a small data file that contains information about your visit to our website. Your computer provides this information during your first visit to our web server. The server records this information in a text file and stores this file on your hard drive. When you visit our website again, the server looks for the cookie and structures itself based on the information provided. Most browsers are initially set up to accept cookies. We use cookies to help us improve our service to visitors to our website and to ensure that our website is easy to navigate and useful. If you do not wish cookies to be used, you can reset your browser to refuse all cookies or to warn you before accepting cookies. If you have set your browser to warn you before accepting cookies, you will receive a warning message with each cookie.
12. Linking to Other Websites/Third-Party Content
Our websites use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies to help the website analyse how users use the website. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States of America. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can view Google’s Privacy Policy by visiting their website at www.google.com.
Our website may contain links to other Internet websites. These links are provided solely for your convenience. If you submit personal information to or via any linked site, the Privacy Policy applying to that information will be outside our control. You should, therefore, check the Privacy Policy of the linked site before submitting information to or via that site.
13. Complaints and How to Contact Us?
If you have any enquiries about this Policy or wish to make a complaint about a matter relating to privacy, please contact us using the details below. We will investigate and consider any complaint received by us, and a response will be provided to the complainant as soon as practicable. If you are not satisfied with the way in which we handle your inquiry or complaint in regard to your personal information, if applicable, you may contact the Office of the Australian Information Commissioner (“OAIC”). Contact details for the OAIC can be found at www.oaic.gov.au.
If you would like further information regarding this Policy, please contact us via any of the following means:
- Telephone: (03) 9525 5033
- Email: [email protected]
- Address: Company Secretary, Luna Park Melbourne, 18 Lower Esplanade, St Kilda, VIC 3182