Privacy commitment statement and overview
Privacy is important to us. We know it’s important to you. We will only ask for information from you when it is required to provide a service to you, such as more relevant suggestions for your trip planning, or helps us improve our products and your experience.
Tourism Tasmania (referred to as “we”) is committed to protecting your privacy, keeping your information safe, and ensuring your information is stored securely. Tourism Tasmania is committed to maintaining our obligations under relevant privacy legislation we are bound by, including the Personal Information Protection Act 2004 (Tas) and the Australian Privacy Act 1988 (Cth).
This statement applies to your interactions with Tourism Tasmania across the Discover Tasmania website, app and e-newsletters (eDMs). It also extends to paid advertisements which are served through third party providers and publisher networks.
Related statements include our social media terms of use related to the Tasmania Instagram, Facebook, TikTok, X and Youtube accounts, and our cookie policy.
Our Privacy Statement is reviewed regularly, and we will endeavour to inform you of any substantive changes. We may occasionally make changes without notice in instances where it’s required by law or the changes are minor.
What is personal information?
Personal Information refers to any information that identifies or can be used to identify a natural person, either directly or indirectly, including declared data (e.g., account details), referred data (e.g., location tracking), inferred data (e.g., user behaviour analytics), and automated data (e.g., preferences generated through machine learning algorithms).
How do we collect personal information, and how do we use it?
We collect information to help us provide helpful and useful digital experiences, and to track and analyse the performance of our digital products and advertisements.
We will only use your information for the purpose for which it was collected, with appropriate consent and as otherwise required, permitted or authorised by Australian law.
If you sign up to receive e-newsletters from us, we will send you personalised e-newsletters with tips on what to do in Tasmania, including upcoming events and festivals, special offers and more useful content. To do this, we will need you to provide your email address, your preferred name and your location. Marketing tracking technologies will be enabled to track the open rates and click through rates on the e-newsletter content, allowing us to keep improving our content based on performance. You can unsubscribe at any time.
If you create an account with us, you will be able to access Favourites and Trips across numerous devices, customise Trip names, days and start locations as well as share and collaborate on these with family and/or friends. To do this, we will need your email address or social login.
Once you provide an email address, we assign a unique ID to it. This is anonymised, for your protection. You can delete your account at any time in the ‘Settings’ area of your profile.
If you submit an enquiry via the form on our website, the Tourism Tasmania team will respond to you to resolve your enquiry.
On our mobile app, we can provide you with real-time notifications and experience suggestions based on your location, if you enable location-based messages in your profile.
By using this website, our cookie policy applies.
We do not share this data with third parties for advertising purposes, we only use it to provide you with a more relevant and useful digital experience on the Discover Tasmania website, app and/or e-newsletters and for statistical purposes.
The app will request you to allow marketing tracking technologies through initial installation which you can disable at any time in your device Settings.
No attempt will be made to identify users or their browsing activities except in the unlikely event of an investigation, where a law enforcement agency (or other government agency) exercises a legal authority to inspect Internet Service Provider (ISP) logs (for example by warrant, subpoena or notice to produce).
How do we store and protect your personal information?
As custodians of your personal information, we use a range of technical, security and access controls and a range of internal processes to help us protect your information from unauthorised access, misuse and unintentional disclosure.
We will destroy any personal information where it is no longer required (except where it is required to be kept in accordance with the Archives Act 1983).
Note that our websites do not provide facilities for the secure transmission of information across the internet. You should be aware that there are inherent risks across the internet.
Your information may also be held in externally hosted applications. Some of these locations are located outside of Tasmania, and others may also be hosted outside of Australia.
When we transfer personal information to third parties or outside of Tasmania, we will ensure that secure arrangements exist to protect the information. We will only transfer information outside of Tasmania after taking reasonable steps to satisfy ourselves that the organisation that hosts or keeps your information for us is required to maintain the same privacy safeguards that we maintain.
Who do we disclose information to?
We may disclose your information, only to the extent necessary for:
- Our contracted service providers such digital and advertising agencies;
- Third parties who are contracted to administer work on our behalf;
- Information technology and data storage providers;
- Research and statistical analysis providers;
- Third party program evaluators;
In each case, we may disclose personal information to a service provider and the service provider may in turn provide us with personal information collected from you in the course of providing the relevant products or services.
We may also report aggregate statistics to government departments that we work with, and to our other partners for information purposes.
How can you access or delete the information we hold about you?
Under the Australian Privacy Act, you have the right to seek access to the records of personal information that Tourism Tasmania holds about you. You also have the right to ask us to alter your personal information if you think the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.
Depending on your citizenship, different regulations apply. We respect your right to control and delete your data.
Individuals may exercise their data subject rights under applicable laws, including the EU GDPR, UK DPA, and Singapore PDPA.
Based on your jurisdiction, you may have the right:
- To access your data; to correct or rectify your data;
- To delete your data subject to applicable law;
- To have your data processed only in accordance with applicable law;
- To have copies of your data to be moved to another controller;
- To object to our processing your data otherwise than in accordance with the law; and
- To withdraw any consent to our processing your data at any time.
Please contact us to exercise your rights via a written request setting out what information you wish to access, delete or correct, your name and a mailing/email address to:
Data Protection Officer
Tourism Tasmania
GPO Box 399
Hobart TAS 7001
dpo@tourism.tas.gov.au
For any requests, we may require you to verify your identity. We will respond to your request within 30 days.
How can you make a complaint?
If you feel we have not acted in accordance with our Privacy Statements, you may wish to make complaint in writing to:
Reception
Tourism Tasmania
GPO Box 399
Hobart TAS 7001
We will investigate any matter that is brought to our attention in a reasonable time and notify the complainant of a decision in writing, generally within 30 days of when the complaint was received.
Tasmanian Ombudsman
If you are not satisfied with the response from us, a complaint can be made to the Tasmanian Ombudsman.
Tasmanian Ombudsman
GPO Box 960
Hobart TAS 7001
1800 001 170
ombudsman@ombudsman.tas.gov.au
www.ombudsman.tas.gov.au
EU GDPR
If you are a data subject in the European Economic Area (“EEA”) and the complaint relates to the handling of personal data by us, the complainant may also make a complaint to an appropriate supervisory authority (within the meaning of the GDPR) of an EEA country.
Refer to the contact details of supervisory authorities in the European Union.
United Kingdom
If you are a data subject in the United Kingdom and your complaint relates to the handling of personal data by us, you may also lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority.
Refer to the ICO’s website for contact details and guidance on how to make a complaint.
Singapore
If you are a Singaporean citizen or resident, you can submit a hard copy of your complaint to:
Attn: Officer-in-charge, Consumer Services & Investigation
Personal Data Protection Commission
10 Pasir Panjang Road
#03-01 Mapletree Business City
Singapore 117438
or submit an online complaint.