HSV privacy statement

Overview and purpose

  1. HealthShare Victoria (HSV) was established on 1 January 2021 as an independent public sector and commercially oriented provider of supply chain, procurement and corporate services. HSV partners with Victoria’s public health services and suppliers in delivering best-value health-related goods and services and ensuring health purchasing policies are duly complied with.
  2. This Privacy Statement explains how HealthShare Victoria (HSV) handles your personal information (being information capable of identifying you as an individual). This includes how HSV collects, stores, secures, accesses, uses and discloses such personal information.
  3. HSV endorses fair information handling practices and use of personal information, in compliance with HSV’s obligations under the Privacy and Data Protection Act 2014 (Vic) (PDP Act) and other applicable legislation, policies and frameworks.
  4. Further information as to how HSV manages personal information can be found in the HSV PRO140.3 Privacy Procedure.

Information we collect

  1.  HSV collects personal information necessary to its functions and activities, including facilitating the supply of goods and services, monitoring compliance with HSV purchasing policies, training access and records of learning and ensuring probity is maintained in the purchasing, tendering and contracting of public hospitals and health services.
  2. Information which HSV may collect includes:
    1. your name, contact details and organisation details;
    2. information about the goods and services you or your organisation provides to HSV;
    3. online requests to seek any services or information from HSV;
    4. information collected during the course of employment with HSV;
    5. information you submit when you participate in an online survey; and
    6. any messages or comments you submit to HSV, which may include personal information such as name, email address and telephone number.
  3. HSV will only collect sensitive information in limited circumstances.
  4. Where lawful and practicable, you may choose not to identify yourself when dealing with HSV. However, HSV may be unable to provide services in these circumstances.

Purpose of collection

  1. As part of HSV’s functions and activities, HSV collects the information for various purposes, including for:
    1. the purchase or supply of goods and services;
    2.  providing procurement and logistics services, including undertaking tender activities;
    3. providing training to health services and other stakeholders;
    4. seeking feedback from stakeholders;
    5. the recruitment and employment of staff; and
    6. improving our services.

Using and disclosing information

  1. In most cases, HSV will only use or disclose an individual's information for the primary purpose for which it was collected.
  2. However, HSV may use and disclose information for a secondary purpose if the secondary purpose is:
    1. related to the primary purpose in the case of personal information; or
    2. directly related to the primary purpose in the case of health and sensitive information; and
    3. the individual would reasonably expect HSV to use or disclose the information for that secondary purpose.
  3. In all other cases, HSV may use and disclose the information if:
    1. the individual has consented to the use and disclosure; or
    2. the disclosure is authorised or required by law.
  4. HSV may disclose information to third parties engaged by HSV in the provisions of services to you. Such third parties include:
    1. third service providers, including logistics providers and technology providers;
    2. professional services firms;
    3. health services and related services; and
    4. probity advisers and auditors.
  5. HSV staff and agents sending information outside of Victoria as part of HSV’s functions and activities must only do so:
    1. if the recipient is subject to principles for fair handling of information that are substantially similar to Victoria's;
    2. with the individual's consent, or if it is impracticable to obtain their consent if the transfer is for their benefit and they would be likely to consent if they could;
    3. if contracting with the individual, or with a third party for the individual's benefit; or
    4. in accordance with the applicable legislation.
  6. HSV will only assign identifiers to individuals, or use or disclose identifiers assigned by other organisations, in accordance with Information Privacy Principles (IPPs) or other applicable legislation
  7. HSV is subject to the Freedom of Information Act 1982 (Vic) (FOI Act) and may be required to disclose personal information as required by that Act. HSV applies the Freedom of Information Guidelines published by the Office of the Victorian Information Commission in its approach to freedom of information requests and when making freedom of information decisions.

Securing, storing and retaining data

  1. HSV will take reasonable steps to ensure that information it handles is protected from misuse, loss, unauthorised access, modification and disclosure.
  2. HSV will take reasonable steps to destroy or permanently de-identify information which is no longer required for any purpose in accordance with applicable legislation and HSV policies and procedures.

Access to information

  1. HSV will provide individuals with access to information it holds about them, subject to legal requirements.
  2. Requests for access to information will be considered in accordance with the applicable legislation, HSV’s Privacy Procedure and other applicable HSV policies and procedures.
  3. In some cases, requests for access to information will need to be made through HSV’s Freedom of Information process.
  4. If an individual establishes and notifies HSV that their information is inaccurate, incomplete or not up to date, HSV will take reasonable steps to correct the information or to record that the individual disagrees with the information held by HSV.

Contacting us

  1. Any questions relating to the Privacy Statement or your personal information should be directed to:

Privacy Officer
HealthShare Victoria
Level 11, Spring Place
50 Lonsdale Street
Melbourne VIC 3000
Ph: +61 (03) 9947 3988
Email: privacy@healthsharevic.org.au

 

 

 

 Content reviewed: December 2024