Privacy Policy
About this privacy policy
This is the privacy policy (Privacy Policy) for Advanced Detailing and Design Applications Australia Pty Limited ACN 615 937 445, Advanced Detailing and Design Applications Holdings Pty Limited ACN 615 932 986, and Advanced Detailing and Design Applications UK Limited Company No. 104 815 16 (ADDA, ADDA Group, we, our, us). We value and respect your privacy and take the protection of your personal information seriously.
We have prepared this Privacy Policy to inform users and prospective users of our software as-a-service subscription service and any of our other products and services (‘you’) of the personal information that ADDA collects and holds about you, as well as other non-personal data that we collect and hold, and how we use that information.
This Privacy Policy also provides information about your privacy rights as an individual and how to contact us or the appropriate regulator if you have any privacy concerns. This Privacy Policy may change from time to time and it is therefore important that you review it regularly. Any change to this Privacy Policy will become effective when we publish the revised Privacy Policy on our website at adda-bim.com.
What personal information do we collect and handle?
Personal information generally means any information about an individual from which that person can be identified. We may collect and use different kinds of personal information related to our business activities and when it is necessary and relevant to our relationship with you. This may include:
- General information: such as your name and title;
- Contact information: such as your physical address, phone number and email address;
- Transaction information: such as information about products and services you have purchased from us or use;
- Project information: such as the information about the projects you are working on, including your project plans and drawings;
- Technical information: includes information about how you use our licensed applications including login identity, IP and MAC addresses, the command functions you use, when you log in and out; and
- Marketing information: includes your preferences in receiving marketing communications from us and any sales data relating to purchases of our products and services.
We do not collect any sensitive personal information about you (this includes details about your race or ethnic origin, political opinions or associations, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association or union, sexual orientation or practices, criminal record information). Nor do we collect any information about your health, genetic background or biometric personal information.
Our products and services are not intended for use by children and should only be accessed by individuals of at least 18 years old or the age of majority (the Age Limit). If you are under the Age Limit, please do not provide us your personal information. We will upon notice or discovery take all reasonably efforts to erase or destroy any personal information that may have been collected or stored by us about those under the Age Limit without our knowledge.
How do we collect your personal information?
We collect personal information from you wherever it is reasonable and practical to do so for the purposes described in the section headed “Why do we collect your personal information” below. We may collect personal information from you via:
- information you provide to us directly, for example when you communicate or interact with us by telephone, email, online (including through our products and services and website) or in person;
- your response to any surveys or marketing materials we send out;
- interactions between you, other users of our products and services, and our staff; and
- information that we automatically collect when you use our products and services to enable us to manage your subscription, use of our products and services and to provide you with technical support.
In some instances, we collect information about you from the following other sources for the purposes described in the section headed “Why do we collect your personal information” below:
- the company or organisation that authorises you to access and use our products and services;
- our suppliers and other third parties who provide services to us; and
- publicly available sources.
You must only provide us with the personal information of someone else if you have that person’s consent to disclose that information to us and for us to use that information in accordance with this Privacy Policy.
Why do we collect your personal information?
We collect, hold, use and disclose information, including your personal information, primarily for business purposes that are directly related to our business activities and when it is necessary and relevant to our relationship with you. However, we may also collect information, including your personal information, for related reasons, including:
- verifying your identity and information;
- understanding your requirements in order to provide you with a product solution or service;
- to set up, administer, and manage our products, systems and services;
- to respond to your comments or questions, including advice on construction solutions, software solutions and service offerings;
- to fulfil requests for products, services, functionality, support and information for internal operations, including troubleshooting, data analysis and testing;
- to assess and investigate any complaints made about our products or services;
- to manage, train and develop our employees, contractors, and representatives;
- to manage complaints and disputes (including to defend or exercise legal claims), and report to dispute resolution bodies;
- for administrative purposes including product and service research and development, and business strategy, including managing the delivery of our services and products via the ways we communicate with you;
- to create aggregated and de-identified data relating to use of our product solutions and services and projects that use our products and services;
- to detect and prevent fraudulent activity;
- for the purposes of marketing our products, systems and services; and
- to comply with applicable laws and regulations.
The legal basis for collecting and using personal information will depend on the specific circumstances in which it is collected. However we will collect personal information from you as follows:
- Consent: where you have given consent to ADDA’s use of the personal information for one or more purposes;
- Contract performance: it is necessary for the performance of a contract to which you are party;
- Legal obligation: where we need to use your personal information to comply with a legal obligation (e.g. to defend and exercise legal claims);
- Vital interests: where we need to process your personal information in order to protect the vital interests of you or another natural person (e.g. where you require urgent assistance);
- Public interests: where we need to process your personal information in order to carry out a task in the public interest (e.g. public health and safety); and
- Legitimate interests: where it is necessary for the legitimate interests pursued by ADDA and those interests are balanced against your rights to information privacy (e.g. to communicate useful content updates).
For additional or specific information on our legal basis for processing your information, please contact our Privacy Officer using the contact details at the bottom of this Privacy Policy.
Who might we disclose your personal information to?
We may disclose information, including your personal information, to various third parties for any of the purposes identified above. The types of third parties with whom we disclose personal information include:
- our service providers, including providers of campaign, promotion, accounting, auditing, legal, banking, payment, debt collection, delivery, data processing, data analysis, document management, research, investigation, technology services, retailers and training providers;
- government agencies for reporting and compliance purposes;
- various third party suppliers and partners, which provide services and support for our programs and operations;
- to members of the ADDA Group, which provide support for our operations and services to you;
- persons who you authorise to access and use our products and services or who have authorised you to access and use our products and services;
- to a third party organisation in the event we sell or transfer all or a portion of our business or assets; and
- your organisation and representatives.
In order to comply with our legal obligations, respond to complaints and claims, and investigate and protect ourselves and third parties against any activity that we reasonably suspect to be fraudulent, we may also disclose your personal information to law enforcement agencies, regulatory authorities and governments around the world and their service providers in connection with their investigations, screening or other functions.
Transfers to other countries
ADDA may disclose information to other members of the ADDA Group, who may be located in Australia, India, the United States of America and the United Kingdom and in other countries in which we do business. ADDA may also subcontract certain activities and share your personal information with third parties located in countries outside of New Zealand, Australia and the European Union for the purposes described in this Privacy Policy. The countries in which these organisations are located will vary, but, in the course of our business operations, we generally disclose personal information to organisations located in Australia including for hosting and data storage, India, Canada, the United States of America and the United Kingdom. Such transfers are made in order to provide the services and carry out the activities specified in this Privacy Policy.
When we disclose information in accordance with this Privacy Policy, it may be accessed from, transferred to, and/or stored outside the country in which you are located. The privacy laws in that country may be of a lower standard than those in your own country. In these situations ADDA may not be accountable for the actions of those recipients and you may have limited or no rights under the applicable privacy regime.
What if we can’t collect your personal information?
If you do not provide us with the personal information we need, some or all of the following may occur:
- we may not be able to provide you with our products and services; and
- we may not be able to respond to your requests for information.
Direct marketing communications
From time to time we may send you direct marketing communications regarding our products and services.
We may contact you by electronic messages (e.g. email), online (e.g. through our website), by mail and by other means, unless you opt out or we are subject to legal restrictions. You may opt out of receiving electronic messages from us at any time by contacting our Privacy Officer via the contact details at the bottom of this Privacy Policy or by using the opt out mechanism included in our marketing messages.
Visitors to our website and social media
To provide services through our website, or understand more about visitors to our websites, we collect certain information from your browser about your interaction with our website. This information is collected as statistical information and includes the IP address, browser type, language and access times. Our website also uses cookies to track pages visited and information accessed within our website. This information is for statistical reference, site analysis and to remember your details and preferences when you return to that website.
In many cases, the tools used on our website record information in a way that does not identify you as an individual. In other cases, information collected through our website may be personal information in which case this Privacy Policy will apply. We may also collect personal information through our social media presence, such as when you communicate with us through LinkedIn.
Our website may also use third party website tools from time to time, for example data analytics and online survey tools. Below we summarise why we use different types of cookies:
- Necessary cookies: are those that are essential to run our website or enable you to receive a service that you have requested. For example, to operate request type functionality on our website.
- Performance cookies: are those that collect information about how visitors use and interact with our website so that we can improve it. For example, we use Google Analytics to track information about how visitors use our site. This only collects statistical information such as the number of visitors to our website, how they arrived there (i.e. via a Google search or another website), whether it is a first-time or return visit. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/ and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
- Functionality cookies: are those that remember choices you make. Without these cookies you may find that certain features are less convenient and reliable. For example, we use these remembering your language and country of choice and presenting relevant content.
- Marketing cookies: are those that help us deliver advertising that is more relevant to you and your interests. They include third-party cookies placed by our partners and other advertisers who share cookie data with us. For example, we use these cookies to allow our website to serve up different versions of a page for marketing purposes. If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Privacy Policy, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/.
Your web browser can be configured to reject cookies. If you set up your web browser to reject cookies certain functions of our website may become unavailable to you.
Data security
We store information in both physical and electronic form at our offices or on our servers. We have put in place reasonable security measures designed to protect your personal information from being accidentally lost, modified, used or accessed in an unauthorised way, altered or disclosed.
We have put in place procedures to deal with personal information breaches and will notify you and any applicable regulator of a breach where we are legally required to do so.
How can you access and correct your personal information?
The accuracy of the personal information we hold and use is important to us. We take reasonable steps to ensure that the personal information we handle is accurate, complete, relevant, not misleading and up-to-date. To help us keep your personal information accurate, please let us know if there are any errors or changes in your personal information.
You can request to access or correct the personal information we hold about you at any time. To request access to, or a correction of, any personal information that we may hold about you (or to request our confirmation of whether we hold information about you), please contact our Privacy Officer using the contact details at the bottom of this Privacy Policy. In most cases, we can help you promptly and informally with these requests. In other cases, we may need to verify your identity and ask you to make your request in writing.
From time to time, we may need to reject your request to access or correct the personal information we hold about you, if we believe it to be necessary and to the extent allowed by law. We will provide our reasons if we deny your request for access to, or correction of, your personal information. Where we decide not to make a requested correction to your personal information and you disagree, you may ask us to make a note of your requested correction with the information we hold about you. We won’t charge you for simply making a request to access or correct personal information. However, we may charge reasonable costs for carrying out your request.
You may also contact our Privacy Officer if you wish to obtain further information regarding our privacy practices and the way we handle your personal information.
Other privacy rights
Subject to certain limitations and restrictions (e.g. depending on circumstances such as where you reside) you may have the right to exercise additional rights in relation to your personal information. These may include the right to:
- request erasure of your personal information;
- object to processing of your personal information;
- request restriction of processing of your personal information;
- transfer your personal information (i.e. the right to data portability);
- not be subject to automatic decision making; and
- withdraw consent.
If you wish to exercise or obtain details of any of the rights set out above, please contact our Privacy Officer via the contact details at the bottom of this Privacy Policy. The Privacy Officer may require further information in order to assess the applicability of the right to the relevant circumstances.
Additional services and links to other sites
From time to time, we may provide links or mechanics to interface with our website for your information or convenience or offer additional services through separate websites. These websites operate independently from ADDA and may be subject to alternative terms of use, including terms concerning use of your personal information. We have not reviewed these third party sites and do not control and are not responsible for any of these websites, their content or their privacy policies. If you decide to access or interact with any of the third party sites listed on our website, you do so at your own risk.
Information retention
We will retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy and in each case in accordance with applicable legal and regulatory requirements in respect of permitted or required retention periods and limitation periods for taking legal action.
How can you make a privacy complaint?
We take your privacy concerns seriously. If you have a complaint regarding our handling of your personal information or concerning our privacy practices, you may file a complaint with our Privacy Officer using the contact details set out at the bottom of this Privacy Policy. Our Privacy Officer will confirm receipt of your complaint. If our Privacy Officer believes an investigation is necessary, we will open an investigation into your complaint. Our Privacy Officer may need to contact you to request further details of your complaint. If an investigation has been opened following a complaint made by you, our Privacy Officer will contact you with the result of that complaint as soon as possible. You may also raise a complaint and contact the local privacy and data protection authorities directly. For reference, we set out below the identity of relevant authorities:
- Australia: the Office of the Australian Information Commissioner, www.oaic.gov.au
- New Zealand: Office of the Privacy Commissioner, www.privacy.org.nz
- United Kingdom: the Information Commissioner’s Office, www.ico.org.uk
- Canada: the Office of the Privacy Commissioner of Canada, www.priv.gc.ca
Policy reviews
From time to time, we may review and update this Privacy Policy. All personal information will be collected and handled by us in accordance with the most recently updated policy.
This Privacy Policy was last updated on [29 April 2021].
Who we are
The ADDA Group comprises:
- Advanced Detailing and Design Applications Australia Pty Limited ACN 615 937 445, a corporation with a principal place of business at 133-139 Newtown Road, Wetherill Park, New South Wales, Australia;
- Advanced Detailing and Design Applications Holdings Pty Limited ACN 615 932 986, a corporation with a principal place of business at 133-139 Newtown Road, Wetherill Park, New South Wales, Australia; and
- Advanced Detailing and Design Applications UK Limited Company No. 104 815 16, a corporation with a principal place of business at Suit 1, 3rd Floor, 11-12 St James Square, London, United Kingdom.
How to contact us
If you have any questions or comments about this Policy, our privacy practices or if you would like to request access to or correction of any personal information we may hold about you, or exercise any other rights you may have under applicable privacy laws, please contact our Privacy Officer:
Email: privacy@adda-bim.com
Phone: +61 2 9765 2100
Sub-processors
ADDA uses sub-processors to assist in providing our services. A sub-processor is a third party who agrees to receive personal data from us intended for processing activities to be carried out (i) on behalf of ADDA customers; (ii) in accordance with customer instructions as communicated by ADDA; and (iii) in accordance with the terms of a written contract between ADDA and the sub-processor.
Sub‐processor |
Purpose for the data transfer |
Location |
Microsoft Azure | Provision of hosted server infrastructure and database services | Australia, UK |
Atlassian | Management of support ticket data used to provide support services to ADDA customers | Australia, USA |
Zendesk | Customer forum application for ADDA customers and community users |
Australia |