This privacy policy relates to the website for the Public Health Communication Centre (PHCC), which is hosted by the Public Health Department at Otago University, Wellington campus.
The policy operates alongside and subject to any other privacy statements or policies that may apply to specific supplies of information made to the PHCC through its website. For example, the University of Otago privacy provisions also apply.
Collection and use of personal information
The PHCC collects the following personal information from you when you subscribe to our publications:
- Your name
- Your contact information
- Information regarding your areas of interest (optional)
We collect your personal information in order to send you the latest public health commentary and analysis directly to your inbox.
PHCC will take all reasonable steps to ensure that personal information is accurate, up to date, complete, relevant and not misleading, before using or disclosing it.
Disposal of personal information
Storage of personal information is managed in accordance with the policies and procedures of the University of Otago Cyber Security Framework.
We will be building a database of subscribers and will retain your personal information until such time as you unsubscribe from our mailing list.
Security of personal information
Personal information will be stored on University of Otago files and databases and PHCC will take all reasonable steps to keep personal information safe and secure, and to ensure that it is protected against loss or unauthorised access, modification, use or disclosure. In some instances, personal information may be transferred, and held, by service providers in New Zealand and overseas (including, for example, where it is stored using a cloud-based service). Where this occurs, PHCC will do everything reasonably within its power to ensure that the service provider also has reasonable security measures in place to protect personal information.
PHCC will not transfer personal information to a foreign person or entity (including an overseas-based service provider) unless:
- it reasonably believes that the foreign person or entity has obligations to protect personal information in a way that is comparable to the protections afforded by the Privacy Act 2020; or
- the user authorises the disclosure of their personal information after being expressly informed by PHCC that the foreign person or entity may not be required to protect their personal information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020; or
- it is not reasonably practicable in the circumstances for PHCC to comply with (a) and (b), and it believes on reasonable grounds that disclosure of the personal information is necessary as permitted under the Privacy Act 2020.
Disclosure of personal information
Staff members and other personnel within PHCC will have access to your personal information outlined above.
Your personal information will not be disclosed to third parties without your consent unless the use is within the scope of the purposes for which the information was collected. PHCC staff may share information where required for their administrative and programme-related functions.
Other than stated above, we do not sell, trade, or otherwise transfer to outside parties your personal information.
Your Rights
PHCC will make personal information held about users available to them upon request and in accordance with the Privacy Act 2020. The Privacy Act 2020 describes the conditions under which some personal information may be withheld.
Users have the right to request correction of personal information held in accordance with the provisions of the Privacy Act 2020. If you would like to do this, please email phcc@otago.ac.nz.
If you are concerned your privacy has been breached by PHCC through its website, you may make a complaint to phcc@otago.ac.nz. You also have the right to make a complaint to the Office of the Privacy Commissioner. You can contact the Office of the Privacy Commissioner at www.privacy.org.nz.
PHCC will notify you as soon as practicable if there is a privacy breach in relation to your personal information that PHCC reasonably believes has caused or is likely to cause you serious harm, unless one of the exceptions under the Privacy Act 2020 applies. The University will also notify the Privacy Commissioner as soon as practicable if there is such a breach.