1. Privacy policy purpose

1.1. Overview

This privacy policy:

• contains the NFSA Privacy Policy as a standalone policy for publication
• may contain extensions of the NFSA Privacy policy concerning specific personal information (for example the website privacy statement; the video-on demand privacy policy; privacy collection notices) for publication.
• sets out how the NFSA will comply with the Privacy Act 1988 (Privacy Act), the Australian Privacy Principles (APPs) and other relevant instruments in its management of personal information. 

View our:

• website privacy statement
• video on-demand privacy policy
• privacy collection notices.

Visit the Federal Register of Legislation website to view the Privacy Act.

1.2. Privacy contact officer

The NFSA Privacy Contact Officer for privacy enquiries, applications to access or correct personal information and complaints is identified in the NFSA Privacy Policy as the Director, Procurement and Legal.

2. Introduction

2.1. Purpose

This Privacy Policy outlines how the NFSA handles 'personal information' and 'sensitive information' in accordance with its obligations as an APP entity under the APPs in the Privacy Act.

Some terms defined in legislation are identified using single quotation marks (' ').

2.2. Scope

This privacy policy applies to the personal information we handle in accordance with our organisational functions and activities.

It does not apply to the personal information that is contained in the national collection of programs and related material (i.e. names and other identifiable information that appears in our audiovisual collection).

2.3. Personal information and sensitive information definitions

'Personal information' means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

• whether the information or opinion is true or not
• whether the information or opinion is recorded in a material form or not.

'Sensitive information' includes:

• 'personal information' that is information or an opinion about an individual's racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices or criminal record
• health or genetic information about an individual
• genetic information about an individual that is not otherwise health information
• biometric information that is to be used for the purpose of automated biometric verification or biometric identification
• biometric templates.

3. Personal information handling practices

3.1. Why we collection personal information

The NFSA collects personal information to perform our functions and powers under the National Film and Sound Archive of Australia Act 2008 (NFSA Act). This includes to:

• develop, preserve, maintain, promote and provide access to a national collection of programs and related material
• support and promote the collection by others of programs and related material in Australia
• support, promote or engage in the preservation and maintenance of programs and related material that are not in the national collection
• support, promote or engage in the provision of access to programs and related material that are not in the national collection
• support and promote greater understanding and awareness in Australia of programs
• undertake any other function conferred on it by any other law of the Commonwealth.

Visit the Federal Register of Legislation website to view the NFSA Act.

We also collect personal information to conduct activities that are necessary or related to our functions and powers, such as:

• accept gifts, devises, bequests and assignments
• act as trustee of money, programs or other property vested in the NFSA on trust
• act on behalf of the Commonwealth or an authority of the Commonwealth in the administration of a trust relating to programs or to matters connected with programs
• do anything incidental to our functions.

3.2. The kinds of personal information we collect and hold

The kinds of personal information the NFSA collects and holds depends on the relevant activity being undertaken. We collect personal information in the following contexts:

• from the public undertaking visits and experiences provided onsite at the NFSA in Canberra, including tour organisers and education groups
• from consumers and the general public 
• from website visitors including NFSA Player
• from donors and lenders to the collection
• from partners in the Galleries, Libraries, Archives and Museums (GLAM) sector
• from commercial and non-commercial partners and industry groups
• from volunteers and job applicants.

3.3. How we collect personal information

The NFSA collects personal information by lawful and fair means. We collect personal information directly from you, for instance when you register to an event, or when you request access to our collection.

In certain circumstances we may collect information about you from publicly available sources or from third parties such as organisations that partner with us, when you register for a screening or event with them.

The NFSA may also infer information about you through your interactions with our services.

The primary ways we collect personal information are set out in our privacy collection notices and outlined here.

Attending an in-person event or screening

The NFSA organises events and screenings at our Canberra Acton site.

We collect personal information from individuals booking tickets, for themselves or on behalf of someone else.

The personal information we collect includes email address, password, financial information, and dietary requirements where relevant.

Onsite tours and school programs

The NFSA provides programs for schools and tour groups.

The personal information we collect relates to the person booking the tour and includes contact details, company, school and on the day coordinator details, and in some cases consent for photographs.

Requesting access to the collection

You can request access to the NFSA collection.

Personal information collected includes your name and contact details and your organisation, role and industry where relevant.

Making a donation to the collection

You can make a donation to the collection through a website form.

Personal information collected includes contact details, ownership, copyright, and whether the donation relates to Aboriginal or Torres Strait Islander people.

Making a financial donation

You can make a financial donation to the collection through our website form.

Personal information collected includes names and contact details, and payment information.

Purchase from our collection

You can purchase from our collection on behalf of your organisation or industry.

Personal information collected includes your name and contact details and your organisation, role and industry where relevant.

Responding to a survey and feedback

You can respond to surveys and feedback requests from the NFSA.

Personal information collected includes name and contact details, demographic information, views, experiences and responses.

Marketing, newsletter and analytics

We conduct marketing activities when you opt in to receive our newsletters, engage with us through social media, respond to surveys, or otherwise interact with us in a way that indicates your interest.

The personal information we collect includes name and contact details, age, interests and records of communication with the NFSA and staff.

Using the NFSA Player

You can pay for content on our NFSA player website. The personal information we collect relates to the person who pays for the content and includes email address, password, financial information.

See the video on-demand privacy policy.

Volunteering and recruitment

When you respond to a volunteering or employment opportunity with us, we collect personal information included name and contact details, resume or CV, work history, and qualifications and references.

Making a general enquiry

When you contact us for a general enquiry, we may collect personal information such as name and contact details, as well as the information voluntarily provided to us in your enquiry.

3.4. Collection of sensitive information

The NFSA may collect accessibility information and dietary information as part of organising events and facilitating site visitation, which constitutes health information.

We only collect this information with your consent to provide you with the required assistance for your visit.

The NFSA does not directly collect any other sensitive information from you.

However, some sensitive information such as your ethnicity or your sexual orientation can be inferred from your interactions with our services – for example, if you attend particular events or engage with particular kinds of content in our catalogue.

3.5. How we hold personal information

The NFSA holds personal information about you in our corporate systems, Customer Relationship Management (CRM) system, media and asset management systems, and ticketing system.

Our third-party providers host your data in Australia.

Our CRM allows us to link personal information about you that is collected through different touchpoints, such as event purchases, donations, online form submissions, and website visitation.

4. Use and disclosure of personal information

4.1 General use and disclosure

The NFSA uses and discloses personal information collected only for the primary purposes for which it was collected, as described here and in our privacy collection notices.

Our functions and activities include:

• providing you with NFSA services such as on-site events, tours and programs
• providing access to the national collection
• providing access to digital content and NFSA Player
• processing online ticketing to events
• answering general enquiries
• handling your account and newsletter subscription, and allowing for authentication where applicable
• donor liaison, sponsorship and fundraising activities
• recruiting and managing staff and volunteers
• corresponding and engaging with you through newsletters and social media
• marketing activities including optimising our digital products, audience tracking and analytics to drive engagement with our offerings
• performing analytics to improve our visitor and online experiences, including personalisation
• recording user feedback on services and activities including surveys and evaluation
• establishing ownership of intellectual property rights
• archival research and interpretation
• managing applications for grants, fellowships and scholarships. including internships and 'in-residence' programs
• managing footage from closed circuit cameras in our Acton site.

Based on information we have collected about you, we may provide you with content relating to our functions and activities, or event suggestions.

If you wish to opt out:

• use the link in the communications we send to you
• contact our Privacy Contact Officer at privacy@nfsa.gov.au.

The NFSA shares personal information with third-party providers such as our ticketing platform, digital platform, survey providers and analytics providers.

We conduct security and privacy assessments on all of our third-party providers that collect personal information to ensure their compliance with the Privacy Act.

The NFSA may disclose personal information to event partners and organisers. On rare occasions, we may need to disclose your personal information when it is required or authorised by law or a court or tribunal order. 

The NFSA will only use or disclose your personal information for one of the above purposes or with your consent.

4.2. Disclosure of personal information to overseas recipients

When you communicate with us through social media, such as Facebook and Instagram, the social media provider and its partners may collect and hold your personal information overseas.

5. Data quality

The NFSA takes reasonable steps to ensure the quality of the personal information we collect and disclose is accurate, up-to-date and complete.

This includes:

• View implementing system tools to detect errors and duplicates
• allowing you to access and correct your own personal details in our corporate systems
• where practicable, validating data before use and respecting all opt-out requests.

6. Security

The NFSA protects the personal information we hold and will promptly deal with any accidental or unauthorised use or disclosure of personal information.

We take the following steps to protect personal information:

• The NFSA manages its online services and IT systems in accordance with the Australian Government Protective Security Policy Framework and the Australian Government Information Security Manual.
• Third-party providers who handle personal information about the NFSA’s staff, users or other individuals are ordinarily bound contractually to comply with the Privacy Act and may themselves have statutory obligations as APP entities.

Additionally, staff, contractors and third-party providers are required to comply with the Privacy Act to fulfil their obligations under the:

• Public Service Act 1999
• Public Service Regulations 1999
• Australian Public Service (APS) Values
• APS Code of Conduct
• Commonwealth Supplier Code of Conduct.

7. Website privacy statement

The NFSA has a separate privacy statement explaining the privacy aspects of visiting its websites, web analytics, cookies and email. 

View the our website privacy statement.

8. Your right to access and correct personal information

You have the right to request access to or correction of your personal information that the NFSA holds about you.

Email our Privacy Contact Officer at privacy@nfsa.gov.au.

This right of access is subject to the relevant exemptions in the Freedom of Information Act 1982 (FOI Act) and any Act of the Commonwealth.

The NFSA will respond to your request within 30 days after the receipt of the request, to grant the request or to give written reasons for any refusal to grant access to or correction of the information.

Visit the Federal Register of Legislation website to view the FOI Act.

Where you have purchased tickets or created an account with us, you can access and update your details within the relevant platform, subject to available platform functionality at that time.

9. Complaints

You can complain about the way the NFSA collects or handles your personal information.

Email our Privacy Contact Officer at privacy@nfsa.gov.au.

If the NFSA receives a complaint about how your personal information has been collected or handled, we will determine the actions to be taken in relation to your complaint.

The NFSA will respond to your complaint or suggestion within 30 days of receipt.

The NFSA is committed to quick and fair resolution of any complaints and will ensure the complaint is taken seriously.

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint about the NFSA's personal information handling practices to the Office of the Australian Information Commissioner (OAIC).

Visit the OAIC website.

10. Privacy policy updates

In accordance with APP 1 this privacy policy will be reviewed every 12 months to ensure that it is up to date.

11. Contact the Privacy Contact Officer

You may contact our Privacy Contact Officer to:

• obtain access to your personal information that we may hold
• make a complaint about a breach of your privacy
• query how your personal information is collected, used or disclosed
• request a free copy of this privacy policy
• ask questions about this privacy policy.

The NFSA Privacy Contact Officer may be contacted by:

• calling 1800 067 274 toll fee in Australia or 02 6248 2000
• emailing privacy@nfsa.gov.au
• writing to Privacy Contact Officer (Director, Procurement and Legal), National Film and Sound Archive of Australia, GPO Box 2002, Canberra ACT 2601.