At BAC your privacy is important to us. We comply with the National Privacy Principles (new privacy laws which apply from 21 December 2001) as well as our existing obligations of confidentiality.

This brochure explains the types of information that we keep on record and how we may use that information. It also provides some detail about your privacy rights along with our general rights and obligations and our policy in relation to how we collect, maintain, use and disclose your personal information.

When you enter into a transaction with BAC or apply for a licence, permit or authority from BAC, the application and other forms we may use include notices about privacy and requests for consent. Those privacy notices (called privacy statements and consents) specify in more detail how any information about you may be used and disclosed in relation to a particular function of BAC.

When you enter into a transaction with BAC or apply for a licence, permit or authority from BAC, you consent to us collecting, maintaining, using and disclosing personal information about you and provided by you or by another person in accordance with the privacy statement in the application or other form that we may use and this brochure.

The types of information we ask for will depend on your particular dealing with BAC.

Generally, we keep a record of one or more of the following types of information about you:

• information that identifies you, such as your name and address and other information provided by you and people nominated by you;

• in the case of security related matters (such as an Aviation Security Identification Card application or an application for airside access), information about your background, where you and other members of your family come from and your record with various law enforcement agencies.

All information sought is required for our business purposes, which are detailed generally in this brochure and more specifically in our application and other forms that BAC uses.

Except in the case of ASIC card applications and other security related matters with BAC and unless it is necessary for our business purposes, we do not actively seek to collect sensitive information (for example health information or information about your racial or ethnic origin or any criminal record). If we do have to collect sensitive information, we will do so in accordance with the National Privacy Principles and as required by Commonwealth law.

Sometimes we act as an agent for others when collecting information about you. We will tell you when we do this.

During the course of our relationship with you, we may gather information about you relating to any services that we or our strategic alliance partners and suppliers provide to you. This information is used to help us form views about how we can improve our relationship with you.

Generally, we only collect personal information about you from you, unless it is not reasonable or practical for us to do so or you consent. For example, you may authorise us to collect information from a third party, like a law enforcement agency, or we may engage an agent to collect information on our behalf. We may also collect information about you from a publicly available source such as Australian Securities & Investments Commission, the Courts or other publicly accessible registries, such as the land title registry.

BAC does not currently use Internet "cookies". However, if BAC uses Internet "cookies" or any other electronic data that BAC stores on computers at BAC, BAC will use them to recognise returning users and to monitor Internet traffic through our website. This information helps BAC to improve the website and make it more user-friendly. BAC also collects with either cookies or weblogs, users’ ISP addresses and log in times of each individual user.

We use your personal information to:

• help us process your application for our services (including maintenance of contact details);

• effectively manage and administer all services we provide to you;

• ensure our internal business operations are running smoothly which may include fulfilling legal requirements and conducting confidential systems maintenance and testing;

• assist us develop our services and for us to inform you of those services so that we can improve our relationship with you.

• process and, if appropriate, issue of a relevant licence, permit or authority.

• enforce a contract we have with you, research by BAC or a third party acting on our behalf, statistical analysis by BAC and marketing of airport or other services offered by BAC, its strategic alliance partners, tenants, occupiers and other users of Brisbane Airport.

Any application or other form we use to collect your information may give more specific details about the way we use your information.

Depending on the service we provide to you, if it is necessary we may disclose your personal information to:

• our external service providers (which may be located overseas) that provide services to us. This is on a confidential basis and may include for example organisations that provide information storage services or our related company in the Netherlands, mailing houses, property valuers and debt collectors. These organisations are limited in their use of your information to the purposes of our business only;

• government agencies in connection with your dealings with BAC, such as the Office of State Revenue, the Department of Natural Resources and other government agencies;

• any organisation which you request us to or any persons acting on your behalf, including your solicitor, or accountant - unless you tell us not to.

Additionally, we will disclose information if we are required by law to do so or if the law allow us to do so. For example, we may have reporting requirements to the Australian Tax Office, the Commonwealth Department of Transport, the ACCC or other statutory body or authority as required by the Airports Act 1996 (Cth). Another example is giving your personal information to a court if we are ordered to do so under a subpoena.

We may also disclose your information if you consent to us doing so. Usually we must get your consent before we tell anyone about you or your personal information. You can give us your consent expressly or it may be implied by your conduct.

We may at other times give you more details about our disclosure practices in relation to specific services - for example on the application and other forms we use to collect personal information about you.

Your personal information may also be used by us to analyse services, evaluate the needs of our tenants, customers, passengers and other users of Brisbane Airport and develop new services to benefit you and them.

Unless you tell or have previously told us not to, we may also provide access to your personal information to BAC’s shareholders, or use that information ourselves to inform you of services offered by any of our strategic alliance partners or tenants or preferred organisations which we think may be of interest or value to you.

We take all reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification or disclosure.

We have physical, electronic and procedural safeguards to protect your information which is held by us. For example, your personal information is stored in secured office premises, in electronic databases requiring logins and passwords for access. Access to information stored electronically is restricted to staff whose job purpose requires access. We require all staff to maintain the confidentiality of personal information.

Any visitor, for any purpose, to any part of our premises in which customer personal information is kept is required to register with a security desk or be accompanied by a member of staff while in the premises.

We use secure methods to destroy or de-identify any personal information as soon as the law permits, provided the information is no longer needed by us for any purpose. Ordinarily, for information about a particular transaction, we may destroy the information seven years from the date the transaction is completed.

We may amend this brochure from time to time. Not all changes to our privacy statement will require your consent, for example where office security procedures are changed. We will notify you of any change to our information handling policy that requires your consent before the change is implemented.

You need not give us any of the personal information about you or any other person which may be requested in our communications with you. However, without that information, we may not be able to transact business with you, process an application for a licence, permit or authority, fulfil your request or provide you with an appropriate level of service.

If you do not want the benefit of receiving information, special offers or exclusive opportunities about us, our services or services of a strategic alliance partner, tenant or preferred supplier which we think may be of interest or value to you, then please tell us. You can do this at any time by either writing to us or telephoning us at the contact details listed at the back of this brochure.

You can request access at any time to personal information we hold about you. We will process your request within a reasonable time, usually 14 days for a straightforward request. More time may be needed, depending on the nature and detail of your request.

There is no fee for requesting access to your information, however we may charge you the reasonable cost of processing, and producing the results of, your request (for example, reasonable photocopying costs and, depending on the level of access required, reasonable administrative costs).

Sometimes we are not required to provide you with access - for example, if we consider your request is vexatious or when giving you access would have an unreasonable impact on the privacy of another person or if the law says we can deny access. If we refuse you access to your personal information, we will tell you the reason why. If we are not required to provide you with access to the information requested, we will consider, if reasonable, whether the use of a mutually agreed intermediary would allow sufficient access to meet your needs and ours.

We try to ensure that all information we hold about you which we collect, use or disclose is accurate, complete and up to date. Please notify us promptly if there are any changes to your personal information.

You may ask us at any time to correct personal information held by us about you which you believe is incorrect or out of date. We will deal with your request within a reasonable time.

If we disagree as to the accuracy of the information, you may request that we attach a statement to that information noting that you consider it is not accurate, complete or up to date.

Reference to "we/us" in this brochure means BAC.

Reference to "you" in this brochure means you the person who is transacting business or other dealing with BAC, the applicant for a licence, permit or authority, a customer, passenger or other user of Brisbane Airport, as the case may be.

If you have any questions, concerns or complaints about our information handling statement or practices, please contact us at:

Privacy Officer
Brisbane Airport Corporation Limited
Banksia Place (off Airport Drive)
EAGLE FARM QLD 4009

or

PO Box 61
HAMILTON CENTRAL QLD 4007

Telephone: (07) 3406 3000
Fax: (07) 3406 3111

E-mail: brad.bowes@bne.com.au

We will try to answer any questions you may have, correct any error on our part or resolve any complaint that you may have about our information handling practices.