PRIVACY STATEMENT: AUSTRALIA ADDENDUM

This Australia Addendum ( Australia Addendum ) supplements the Alpha ESS Privacy Statement ( Privacy Statement ) to the extent that the Privacy Act 1988 (Cth) ( Privacy Act ) applies in relation to the processing of personal data in Australia by the Alpha ESS Group. In case of any inconsistences between this Australia Addendum and the rest of the Privacy Statement, in relation to the processing of personal data in Australia, this Australia Addendum prevails.

1.PERSONAL DATA UNDER THE AUSTRALIAN PRIVACY ACT

In this Australia Addendum and in the Privacy Statement, as it relates to the processing of personal data in Australia, “personal data” has the same meaning as “personal information” as defined in the Australian Privacy Act.

“Sensitive information” is a type of “personal information” and has the same meaning as defined in the Australian Privacy Act.

The concept of a "Data Controller" does not exist under the Australian Privacy Act.

2.DO WE SHARE YOUR PERSONAL DATA OVERSEAS?

We generally collect and store your personal data in Australia. However, we may share your personal data with our service providers and related bodies corporate located overseas, including in New Zealand, China and Singapore.

We only ever share your personal data outside of Australia where we are permitted to do so under applicable personal data protection laws. Generally this means we will take reasonable steps to ensure your personal data is treated securely and in accordance with applicable personal data protection laws, or with your consent.

3.HOW CAN YOU ACCESS OR SEEK CORRECTION TO YOUR PERSONAL DATA?

You are entitled to request access to any of your personal data that we collect. To make such a request, please contact the Privacy Officer on the contact details set out at Section 5 of this Australia Addendum.

We will take reasonable steps to ensure that the personal data that we collect, use or disclose is accurate, complete and up-to-date. You can help us to do this by letting us know if you notice errors or discrepancies in the personal data we hold about you and informing us of any change in your personal data (for example, if your email address changes or if you move and change address).

If you consider any personal data that we have about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, you are also entitled to request correction of the personal data (again, please contact our Privacy Officer). After receiving a request from you, we will take reasonable steps to correct your personal data.

We may decline your request to access or correct your personal data in certain circumstances in accordance with the personal data protection laws. If we do refuse your request, we will provide you with a reason for our decision. In addition, in the case we refuse your request for correction, we will include a statement about your request with the personal data we store.

4.HOW CAN YOU MAKE AN ENQUIRY OR COMPLAINT ABOUT THE HANDLING OF YOUR PERSONAL DATA?

If you have any questions or concerns about this Australia Addendum or how we have handled your personal data, you may contact the Data Protection Officer at europe@alpha-ess.de.

Please also contact the Data Protection Officer if you have a complaint about privacy. If you make a complaint about privacy, the following will occur:

No.	Step
	The Privacy Officer will first consider your complaint to determine whether there are simple or immediate steps which can be taken to resolve the complaint. We will generally respond to your complaint within a week.
	If your complaint requires more detailed consideration or investigation: we will acknowledge receipt of your complaint within a week and endeavour to complete our investigation into your complaint promptly; and we may ask you to provide further information about your complaint and the outcome you are seeking.
	We will then typically gather relevant facts, locate and review relevant documents and speak with the individuals involved.
	In most cases, we will respond to your complaint within 30 business days from when we receive your complaint. If the matter is more complex or our investigation may take longer, we will let you know.

If you are not satisfied with our response to a complaint, or you consider that we may have breached the Australian Privacy Act (including the Australian Privacy Principles), you are entitled to make a complaint to the Office of the Australian Information Commissioner (the Australian privacy regulator).

The Office of the Australian Information Commissioner can be contacted by telephone on 1300 363 992, or you can fill out this form to make a complaint about our handling of your personal data. Full contact details for the Office of the Australian Information Commissioner can be found online at www.oaic.gov.au .