The Food & Wine Institute of Western Australia or FWIWA, a business registered and operating in Western Australia ("We" or “Us”) are committed to protecting and respecting your privacy. For the purpose of this Policy, FWIWA is the data controller and where applicable, the data processor of your information.
This Policy together with any other documents referred to on it sets out the basis of:
What personal data we collect and why
What we do with your personal data
How we secure your personal data
How you can change or delete your personal data
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
‘Site’ - means the public area of fwiwa.org
‘Service’ - means the restricted area of fwiwa.org accessible via registration where applicable.
‘User’ - means a person who uses our Site or has registered to use any of our online Services.
‘Personal Data’ - means any information that can personally identify an individual.
What Information We Collect
The legal basis in which we process information we collect is in order for us to provide the Service outlined in our Terms and Conditions and is in our legitimate interests which are further explained in ‘How We Use The Information Collected’ section of this Policy.
We may collect and process various forms of information when you use our Site or Service:
‘User-Provided’ Information - When you use our Site or Service, you may provide Personal Data and we as a result, may collect this. Personal data is any form of information that can identify an individual for example, name, email address, mailing address, and credit card or other billing information. Examples of when this information may be provided include, but are not limited to, when you register to our site, subscribe to our services, complete surveys you have consented to and when you have contacted us.
‘Automatically Collected’ Information - If you use our Site or Service we may automatically collect information about your computer, including, where available, your IP address, operating system and browser type. We achieve this by using cookies and other forms of technology. All of the information that is automatically collected is statistical data about our Users browsing actions and patterns. Some of this information is stored for security purposes so we can alert you of any suspicious activity on your account.
‘User Collected’ Information - We may collect personal data to ensure full functionality of the features provided depending on how you, the User, use our Service. For example, we may store names, mailing addresses and contact numbers (amongst other information) of your customers so you can can fulfil any orders that are placed through our Service. For this purpose, the hosts Create Internet Ltd is the data processor. Each User is responsible for providing notice to their customers or users detailing what Personal Data may be stored and processed through our Service, and the reasons for doing so.
How We Use The Information Collected
We use the information that we collect in a variety of ways during the provision of our services and operation of our business, including the following:
To ensure that all the features we provide are available, functional and maintained as per the specifications advertised
To carry out our obligations arising from any contracts entered between you and us
To carry out any business essential administrative processes
To allow you to participate in interactive features of our Service, when you choose to do so
To enhance the Service we provide by developing new features, and improving functionality of existing features
To enable our team and hosts to provide support to Users when requested or required to do so
Investigate any issues that arise from using our Service
To notify you of any changes to our Service
To provide any information you have requested or that we feel may be of genuine interest to you. These include updates about the services we offer, promotions and general business information which may or may not be connected to third parties we work with. You have the right to opt-out of receiving any promotional information as detailed below under ‘Your Rights’ of this policy.
We use the following cookies:
Strictly Necessary cookies - These are cookies that are required for the operation of our Site. They include, for example, cookies that enable you to log into secure areas of our Site, use a shopping cart or make use of e-billing services in e-commerce shops.
Analytical / Performance cookies - They allow us to recognise and count the number of visitors and to see how visitors move around our Site when they are using it. These cookies enable us to monitor the performance of your site (page loading speeds, etc) to ensure that everything is functioning correctly. This also helps us to improve the way our Site works, for example, by ensuring that Users are finding what they are looking for easily.
Functionality cookies - These are used to recognise you when you return to our Site. This enables us to personalise our content for you. For example, greet you by name and remember your preferences within the application.
Targeting cookies - These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
You can find out more information about cookies by visiting https://cookiesandyou.com.
We, and our hosts, use Google Analytics to measure traffic to our Site and understand how Users move around and use our Service. We, and they, use this information to enhance the Site and Service we provide to ensure that Users get the best experience possible. The hosts also use Google Analytics to monitor aggregate information of your website which helps to monitor the performance of features they offer within their Service to ensure full functionality. The information gathered also enables them to improve these features in the future. All of the information collected from Google Analytics is aggregate and will not be disclosed with any other third parties.
How We Store The Information We Collect
When your information is submitted to us and our hosts, we use it to ensure that appropriate security measures are in place to ensure your information is protected. These safeguards are implemented to ensure that personal data in our possession is not subject to any unlawful forms of processing which include accidental loss, unauthorised access or disclosure. Our Site and hosting Service have Secure Socket Layer (SSL) encryption present amongst other general security measures such as firewalls and password protection to certain areas of our Service. Our hosts employees are trained to ensure that all administrative processes are followed to ensure that your data is handled and processed accordingly. These measures are regularly reviewed to ensure that your personal data is being stored in the most secure way possible.
The data we collect from you may be processed, transferred and stored using various services integral to our business operations and that of the hosting company Create. These services may be based in locations outside of the European Economic Area (EEA) and only the essential and necessary data will be provided to them for them to fulfill their purpose. Data may also be processed by a member of staff operating outside of the EEA who works for the hosts. Such staff may be engaged in, amongst other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data to us, you agree to this transfer, storing or processing.
Our Hosts, Create, have ensured that all services they use to transfer, store and/or process data, in or outside EEA, have been verified to ensure that they are compliant with the European Union’s General Data Protection Regulation (GDPR) and any other respective legal framework that applies to that particular service.
Further to this, we will continually monitor said services to ensure compliance is still being achieved at any given time and the data they hold is stored in a safe and satisfactory manner using the most up to date security measures. We will, to the best of our knowledge, not process, store or transfer any data to any service that does not comply with the GDPR or have adequate security measures in place to protect your personal data.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Disclosure Of Information
We will only disclose your information to any third-parties as detailed in this Policy and under the following circumstances:
In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If FWIWA and its hosts or substantially all of their assets are acquired by a third party, in which case personal data held by each about its customers will be one of the transferred assets.
To the hosts domain name registries, in order to register domains on your behalf.
To facilitate payment (for example, Worldpay).
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce our Terms and Conditions and other agreements; or to protect the rights, property, or safety of FWIWA, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
In order for them to provide you with information about goods and services which may be of interest to you.
If you do not want us to use your data in this way, or to pass your details on to third parties for marketing purposes, you can do so by contacting us. For more information, please see the ‘Your Rights’ section of this Policy.
We do not disclose any personally-identifiable information about individuals to our advertisers, but we may provide them with aggregate information about our Users. We may also use such aggregate information to help advertisers reach the kind of audience they want to target. Our hosts may make use of the Personal Data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience.
Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Protecting the privacy of children is particularly important in data protection. As stated in our Terms and Conditions, anyone under the age of 18 is not eligible to use our Service. We do not knowingly collect any Personal Data of anyone younger than 18 unless parental consent has been obtained prior to using our Service. If you are under the age of 18 and we have not been provided clear parental consent, then please do not use or access our Service at any time.
If we become aware of any personal data that has been gathered on a child who is under the age of 18 without parental consent, we will take the appropriate action to ensure it is removed from our system.
If you, as a parent or guardian, discover that your child (under the age of 18) is using our Service without your consent, please notify our hosts at [email protected] and they will take the relevant action to ensure the Personal Data of the child is erased.
Access To Information & Your Rights
We are committed to protecting and respecting your privacy within your account. Under the GDPR, as a User of our Service, you have several rights in relation to your personal data which include:
The right of access - you have the right to know exactly what information we and our hosts hold about you and how we process it.
The right of rectification - you have the right to have your personal data rectified if it is incorrect or incomplete.
The right to be forgotten - You have the right to have your personal data removed or deleted without a specific reason for doing so. This is also known as ‘the right to erasure’.
The right to restrict processing - an individual's right to block or suppress processing of their personal data. You have the right to block your personal data from being processed.
The right to data portability - you have the right to request the personal data we hold about you for your own use.
As a User, you can access, change and delete certain types of data that is held about you within your account. For more information on what personal information you can access in your account, please contact our hosts at [email protected] If you wish to exercise any of your rights in accordance with the GDPR, please contact the hosts with the specific request using the contact details located under the ‘Contact Us’ section of this Policy. The action taken will be free of charge, provided in an easily accessible format (if applicable) and actioned within 30 days, where possible.
If you have concerns about the way we handle your personal data, you can contact us or raise a complaint by contacting [email protected] and they will investigate accordingly.
The hosts will continue to retain any information collected from a User of our Service as long as the Users account is deemed active. When a users account is deemed inactive, the hosts will remove information as set out below:
Content of trial accounts that have been inactive (no log in) for 6 months, will be automatically deleted.
Content of closed accounts that were once subscribed to our Service, that have been inactive for 12 months, will be automatically deleted.
Our hosts may still hold personal information of inactive accounts under the following conditions:
If required to do so in order for the hosts to continue their duties as a domain registrar or other domain hosting services
If required for financial records in line with accounting and taxation laws (for a period of at least 6 years, plus the current year)
If deemed necessary due to any legal obligations or regulatory investigations that may arise
In regards to prospective employment with FWIWA, by applying for any vacancy through the various channels, you agree to the processing of your personal data that is required in order for us to complete the employment process accordingly and thus, agree to this Policy. If you’re unsuccessful in your application to work for us, we must retain your personal information for 6 months in accordance with employer law. After 6 months, we will remove your personal information unless explicitly agreed otherwise. As set out in the ‘Your Rights’ section of this policy, if you wish to correct or request deletion of your information before the 6 month time frame has expired, please contact us with the relevant request.