Each member of the Cornerstone Group of Companies from time to time, including Cornerstone Properties Pty Ltd (ABN 53 084 212 831), Cornerstone Property Services (ABN 28 160 767 519), Cornerstone Parking Pty Ltd (ABN 52 143 564 836) and certain of their respective associated bodies corporate (as those terms are defined in the Corporations Act 2001 (Cth)) from time to time (referred to as “Cornerstone”, “we”, “us” or “our”) and each of the agents who act on our behalf are committed to protecting your privacy and complying with our obligations under the Privacy Act 1988 (Cth) and Australian Privacy Principles (collectively, “Australian Privacy Law”), in respect of the collection, storage, use and disclosure of personal information.
We collect and use personal information about you for the primary purpose of providing you access to and use of our channels, products and services, managing our relationship with you, or other purposes for which you would reasonably expect us to use that information. Examples of why we may collect your personal information include:
We may also use information we collect about you to obtain further details from available sources via our trusted data service providers, where it may help us to improve our communications and customer service to you and to deliver an enhanced, personalised experience.
Additionally, analytics may be conducted on personal information provided directly by you, as well as third party sources and third-party social-networking sites (including but not limited to Facebook, Instagram, LinkedIn and/or Twitter) for the purpose of marketing, preferred customer products/ services and to better understand your needs in order to deliver improved services and an enhanced experience before, during and after your visit to our properties and we may share information we collect about you with our affiliates, agents and business partners for this purpose.
We may collect the following types of personal information:
Examples of personal information which may be collected and how that information may be used
We may collect your personal information when you are visiting our properties. This may include:
We may collect the following types of personal information from you during negotiations for, and during the term of, the lease/licence for premises, kiosks and other activities at its properties:
We may use this information to:
When entering one of our properties, the personal information and images of tenants and their staff may be collected. This information may be used by us in connection with the management and security of our properties and may be provided to law enforcement and government bodies, insurers, and other third parties from time to time.
Where tenants or their employees sign up to use or access our products, services or channels, we may also collect information for the purposes of maintaining our relationship with you and to provide services offered through that channel.
If you, or a company you work for, supplies goods or services to us, we may collect personal information about you in connection with the provision of those goods or services, either directly from you or from that company. This information may include your name, date of birth, contact information, emergency contacts, and any other information you provide, or is provided on your behalf, as part of our induction and compliance processes, such as licences to use certain equipment on our premises.
If you are seeking employment with us, we may collection personal information about you in connection with your employment. This information may include your name, date of birth, contact information, and any other information you provide, or provided on your behalf, as part of our induction and compliance processes.
When you use, access or become a registered user of https://www.cpltd.com.au/ or any associated site or other site operated or maintained by us from time to time (website(s)), including when you use services offered by a website, we may ask for information including:
The website is an Australian-based website, and it is not intended to provide services to EU residents, and its terms may not be fully consistent with the General Data Protection Regulation. If you are an EU resident and you choose to use the Website then you do so at your own risk, and subject to the terms and conditionals applicable to our website.
We may also collect the following information from you when you access our website or use services offered by our website:
We may collect, use or hold this information for the following purposes:
When you log on to Wi-Fi services or download any mobile apps made available in connection with our properties, use mobile applications developed by us or third party applications utilising our infrastructure, you may be required to provide certain personal information, including your contact details, to access the service.
We collect this information (and may use or hold this information) for the following purposes:
In addition to the purposes set out above, this information may be used by us in connection with the management and security of our properties generally and to obtain feedback about your experiences at a property.
We may use anonymised data for the purposes set out above and to inform our promotional and marketing strategies, as well as for research and profiling purposes. This research may be compiled and analysed on an aggregate basis, and we may share this aggregate data with our affiliates, agents and business partners. We may also disclose aggregated information in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.
Personal information may be collected directly by us, our agents or by our trusted business partners acting on our behalf. This can include:
Information may also be collected by us on behalf of other people as set out in notices given to individuals, or consents given by individuals, at or prior to the time the personal information is collected.
We will only collect personal information by lawful and fair means.
If it is reasonable and practical to do so, we will collect personal information directly from the individual. We may also collect personal information from other companies that are able to disclose it to us, if it’s not practical to collect it from you.
When you visit our websites, the server may attach a ‘cookie’ to your computer or other device’s memory. A cookie assists us to store information on how visitors to our website use it and the pages that may be of most interest.
We may provide the information we gather from cookies to third parties for the above purposes and for other purposes connected with our websites. If cookie information is linked with personal information we hold about you as set out above, this cookie information becomes personal information and will be treated in the same manner as the personal information to which it has been linked.
If you reside in the European Union or EFTA States, you shall have the right not to be subject to a decision based solely on automated processing, which produces legal effects concerning you, or similarly significantly affects you, as long as the decision is not necessary for entering into, or the performance of, a contract between us, or is not authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is not based on your explicit consent. If you wish to exercise your rights please contact us.
We will take all reasonable steps to protect personal information held from misuse or loss and from unauthorised access, modification or disclosure. This includes restricting access to hardcopy and electronic records via physical and logical security methods.
Personal information may be held securely on our electronic databases (which may be on a database maintained by a cloud hosting service provider or other third party database storage), or otherwise in hard copy form in secure storage facilities. Your personal information may be transmitted over the Internet once it has been stored in a database and may also be transferred to recipients in foreign countries other than Australia, and may be stored on servers, using databases or via cloud technology in a number of countries other than Australia (including regions such as the United States of America, the European Union and Asia), where doing so is part of Cornerstone’s ordinary business practices relating to the storage of data and where permitted by law.
Where personal information is held with a third party, we will ensure that appropriate technical and organisational measures are in place to protect the security of that information and to ensure that it is managed in accordance with Australian Privacy Law.
Cornerstone maintains responsibility for your information at all times. As such, we ensure by all reasonable means, any third parties we use are subject to controls which protect your information from unauthorised use and disclosure and limit access and limit their use or disclosure of your personal information to the agreed purpose only.
We will keep your personal information for only as long as is reasonably necessary to achieve the purpose for which we collected it. Where we no longer require the personal information for a permitted purpose, we will take reasonable steps to destroy or de-identify it.
Whilst we will use all reasonable endeavours to keep your personal information in a secure environment, this security cannot be guaranteed due to the nature of the Internet. If you reasonably believe that there has been unauthorised use or disclosure of your personal information please contact us via the details below.
At the point of collection, and when dealing with us, you may have the opportunity to remain anonymous where it is reasonable and practical to do so. It must still be practicable for us to perform the required services. Some exceptions do apply where it is a legal requirement for our business to deal with accurately identified individuals.
We will only disclose the personal information we have about you in limited specific circumstances, such as:
To the extent permitted by law, we may also disclose information about you to:
By accessing and using our channels and services, you consent to the use and disclosure of your personal information by and to our business partners for the purpose of allowing them to directly market products and services.
We aim to use your personal information to send advertising that is customised or more relevant to your interests, characteristics or general location. This doesn’t necessarily mean you’ll get more advertising. It just means that the advertising that you see will hopefully be more relevant to you. For example, we may use your contact details to provide you with information about promotions at our properties or those of our tenants.
You may request to not receive such material by following the unsubscribe instructions that will be contained on any such material. Upon request, we will arrange for your details to be removed from our databases as soon as reasonably practicable. You agree and acknowledge that even if you opt out of receiving marketing material, we may still send you essential information that we are required to send you relating to the services we provide.
If we receive personal information about you that we did not ask for either directly from you, from someone on your behalf, or through someone on our behalf, and we determine that we could have collected this information from you had we asked for it, we will take reasonable steps to notify you, as soon as practicable, that we have collected your personal information. If we could not have collected this personal information from you (or if you do not agree to us collecting information in this way), we will lawfully de-identify or destroy that personal information.
We will take all reasonable steps to ensure that personal information held by us is accurate, complete and up to date. If you wish to access your information, or you believe that any of your personal information is inaccurate, please contact the Cornerstone Privacy Officer via the contact details below. We will respond to you and take all reasonable steps to correct it within a reasonable timeframe.
Attention: Privacy Officer
Address: Level 10, 300 Ann Street, Brisbane Qld 4000
Telephone: 07 3034 0511
If you believe we have breached our privacy obligations or your privacy rights in any way, please contact the Privacy Officer. We will respond to your complaint as soon as possible, and within a reasonable timeframe. If you think we have not resolved a complaint satisfactorily, we will provide you with information about the further steps you can take.
You can also contact the Officer of the Australian Information Commissioner using the following details:
Address: GPO Box 5218, Sydney NSW 2001
Phone: 1300 363 992
Online Enquiries: oaic.gov.au