Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable whether the information or opinion is true or not, and whether the information or opinion is recorded in a material form or not. Some examples of personal information include name, email address, mailing address, telephone number and payment card information. Personal information may also include ‘sensitive information’ about an individual.

Sensitive information means personal information relating to a person’s racial or ethnic origins, political origins, religion, education, occupation, trade union or other professional or trade association membership, sexual orientation, sexual practices, criminal record, and information about a person’s health or biometrics, or a person’s biometric templates. In general, we do not collect sensitive information from our customers.

We collect your personal information directly from you unless it would be impracticable or unreasonable to do so.  You may refuse to provide us with some or all of your personal information, however, this may limit the ways in which we can interact with you, and we may be unable to do business with you.

We collect personal information from our customers,members, donors, supporters, business contacts, and other individuals with whom we deal. We only collect personal information by lawful and fair means. We will collect your personal information through our interactions with you, such as where you purchase a ticket to a performance, where we communicate by telephone, mail, email, or when you enter your personal information on our website. In some cases, where it would be unreasonable or impracticable to obtain your personal information directly from you, we will seek to obtain it from a publicly available source, or a third party.

We collect, hold, use and disclose your personal information for the following purposes:

• to interact with you;
• to carry out transactions with you, such as to process payments and donations received by you;
• to assess your eligibility to access any of our programs;
• to maintain our business records;
• to seek donations or sponsorship;
• to provide advertising and marketing communications that may be of interest to you, including information about promotions, competitions, products and events. You may opt out of receiving marketing communications from us at any time by using the unsubscribe facility included in our messages, replying “STOP” to SMS messages (where applicable), adjusting your preferences (if available), or contacting our Privacy Officer. We may still send you non‑marketing communications that are necessary to provide you with our goods or services (such as ticket confirmations or important service notices);
• to make our products, services, website and social media sites better;
• if you are one of our contractors or service providers, or an employee of one of our contractors or service providers, to engage with you under the relevant agreement;
• if you apply to join our team, to assess your application for employment;
• to enforce our rights, including undertaking legal proceedings;
• any purpose disclosed to you and to which you have consented to;
• any purpose that you would otherwise reasonably expect, and otherwise to run our business.

We may disclose your personal information to third parties,such as related organisations, service providers, professional advisers,government and related authorities, as well as your own agents and representatives. In doing so, we may disclosure your personal information to entities outside of Australia. This may include service providers that operate or store data in other countries, such as cloud hosting providers, ticketing and customer relationship management platforms, email distribution services, analytics providers and professional advisers. Those overseas recipients are likely to be located in the United States of America, although this may vary from time to time depending on the service providers we use. If we disclose personal or sensitive information to an overseas recipient, we will take reasonable steps to ensure they comply with the Australian Privacy Principles.

We will not sell, share or rent any of your personal information to third parties, except as specified in this privacy policy, or for a purpose that you would reasonably expect, that is required or permitted by law, or for which you have provided consent. We may disclose your personal information to third parties, such as:

• our contractors and service providers on a confidential basis, but they are only able to use that information to help us manage our business;
• our related companies, member organisations and other business partners;
• government, regulatory and law enforcement authorities; and
• your agents and representatives.

We hold most of our personal information on a secure database. The database provider may occasionally need to access any database to provide its service to us.

We hold your personal information in both paper-based and electronic files. Electronic information is stored on secure servers that are protected in controlled facilities. In some cases, these facilities may be overseas. We seek to ensure that personal information that we hold is protected from misuse, interference and loss caused by unauthorized access, modification or disclosure. Our employees and agents are obliged to treat any personal information held by us confidentially.

When we do not need your personal information anymore, we will securely destroy it, unless there is a legal reason why we need to continue to hold that personal information.

A cookie is a piece of data that enables us to track and target your preferences. We may use cookies to enable us to identify you as are turn user and personalise and enhance your experience and use of our site. Most browsers are initially set up to accept cookies. You can reset your browser to refuse all cookies or to warn you before accepting cookies. If you have set your browser to warn you before accepting cookies, you will receive the warning message with each cookie. If you reject our cookies, you may still use our site, but you may be limited in the use of some of the features. We use cookies to help us improve our service to you when you access our site and to ensure that our site remains easy to use and navigate. We may also use IP addresses to analyse trends, administer our sites, track traffic patterns, and gather demographic information for aggregate use, which we may share with our partners and advertisers.

Services that our website may use include Google Analytics,which transmits website traffic data to Google servers. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand traffic and usage on our website. By using our website, you consent to Google processing your data in the manner described in Google's Privacy Policy (a copy of which can be found here https://policies.google.com/privacy).

Google may pass on cookies to its partners and other third parties to achieve its purposes. For more information on how Google uses the information collected from cookies, and how you can opt out of this feature please see Google’s Privacy Policy.

We are continually exploring and adopting new technologies to enhance the way we support and deliver services to our customers. One of the ways we do this is by using artificial intelligence to enhance our products, services and operations to improve your experience with us. Improving our operations with artificial intelligence may include analysing data. This information is generally aggregated or de-identified when we analyse it, which means the information isn’t personal information.

When you interact with us, payments are made through our payment gateway provider(s).

You will be providing payment card credit details directly to our payment gateway provider(s) which operate secure servers to process payment details, encrypting your payment card information and authorising payment.

Personal information which you supply to our payment gateway provider(s) is not within our control and is subject to their privacy policies and terms of use.

None of your payment card details are permanently stored with us.

Individuals can request access to the personal information we hold about them by contacting our privacy officer using the details listed below. There is no fee for requesting access to personal information but we may choose to charge a reasonable fee to provide access to that information.

We will normally permit an individual to access their personal information, however if for some reason we do not we will explain why we have made that decision. We will normally respond to all requests within 30days.

If an individual wishes to update the information we hold about them they can do so by contacting our privacy officer on the details listed below. There is no fee for requesting correction of personal information but we may choose to charge a reasonable fee to correct that information. We will normally respond to all requests within 30 days.

If you have any questions, concerns or complaints about the way in which we have handled your personal information, or if you believe that we have not complied with our obligations under the Privacy Act, you may contact our privacy officer on the details below. We will investigate all complaints and provide a response within 30 days, however, we may indicate in that response that additional time is required to complete the investigation, in which case we will specify a timeframe for further communication.

Our privacy officer’s contact details are:

Phone: 03 6232 4416
Email: nadebauma@tso.com.au

Alternatively, you can write to us at:

GPO Box 1450
HOBART TAS 7001
Attention: Privacy Officer

If you have a complaint regarding how we have dealt with your personal information that we cannot work with you to resolve, you may lodge a complaint with the Office of the Australian Information Commissioner by calling 1300 363 992 or sending an email to enquiries@oaic.gov.au.

Our website may monitor the behaviour of users throughout the world. As we are based in Australia we are primarily bound by the Privacy Act and the Australian Privacy Principles, and we will manage your personal information pursuant to these laws. In addition, as we may process personal information of data subjects inside the European Economic Area (EEA) we are also bound by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

The purpose of the following data protection information is to provide residents of the EEA and the United Kingdom with an understandable, transparent and concise explanation of how we intend to process your personal data in accordance with Articles 13 and 14 of the GDPR. However, should you require further explanations relating to our data protection or wish to exercise any of your rights, please do not hesitate to contact our Privacy Officer.

We recognise the below rights which you enjoy under the applicable data protection law with respect to your personal data:

Every user is entitled to the following:

• The right to access: You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.
• The right to rectification: You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete the information you believe is incomplete.
• The right to erasure: You have the right to request that Our Company erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to Our Company’s processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to lodge a complaint with a data protection supervisory authority: Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

If you are located in the EEA or United Kingdom, we will obtain your prior consent before using non-essential cookies or similar technologies, and you may withdraw that consent at any time.

Individuals located in different jurisdictions may have additional rights under applicable privacy laws. We will handle personal information in accordance with those laws to the extent they apply to our activities.

We keep our privacy policy on our website, so it is easy for you to access.

We try not to change our privacy policy too often, but sometimes we need to, for example, if the law changes or if we change the way we collect or use your information. When we change our privacy policy, we will put the updated version on our website straight away. We will also put a notice on our website when we make significant updates, so you will know this has happened.