Orora Limited and its associated entities within Australia (Orora) are committed to protecting your privacy.

At Orora, we are committed to protecting your privacy and using your data carefully. This privacy policy describes the privacy practices of Orora Limited and its affiliates, subsidiaries, international and associated entities. (“Orora” “our,” “we”) for our websites (“Websites”) or any website or mobile application that we own, operate or control that links to this Privacy Policy.

This privacy policy outlines how we collect, use, share and store your personal data, including when you create an Orora account, interact with our customer support specialists and visit www.ororagroup.com or other Orora websites that link to this privacy policy.

In certain jurisdictions, including Australia, there are exemptions which apply to particular “employee records.” In such circumstances, Orora may operate within certain exceptions to the restrictions in those relevant privacy laws in relation to such employee records. While Orora makes every effort to treat your personal data in accordance with this Privacy Policy, Orora is entitled to rely on any “employee records” or other exemptions available under applicable local laws.

This privacy policy covers the following topics:

  1. What is Orora?
  2. What personal data do we collect?
  3. Why do we collect and process personal data?
  4. How do we share data about you?
  5. How do we protect your personal data?
  6. Do we transfer your data internationally?
  7. How long do we retain your personal data?
  8. What about third party links?
  9. What are your rights?
  10. Do we collect children’s data?
  11. Notice to California Residents
  12. Notice to Nevada Residents
  13. Accessibility
  14. How to contact us
  15. Privacy Policy Updates

 

1. What is Orora?

Orora is a global manufacturer, distributor and visual communication solutions company with more than 4,800 team members located across seven countries. Orora’s operations span two core regions: Australasia and North America. Australasia is home to Orora Beverage, while North America is home to Orora Packaging Solutions (which includes Orora Visual) (“OPS”). OPS is the data controller of all personal data collected from residents of the European Economic Area and the United Kingdom.

2. What personal data do we collect?

The personal data we collect about you depends on who you are and how we interact with you. Personal data means any information relating to an identified or identifiable natural person.  It includes data that could be used to identify, locate, track or contact you.

If you are a customer, business partner, or express interest in our solutions:

  • Learning about our company and our solutions: If you request or indicate an interest in information about our solutions or partnership opportunities, we process your name, email address, phone number, job title, information about the organisation where you work, including its website address, and any comments you provide. We append business information related to the organisation where you work from third party sources, such as business intelligence providers, information from publicly available sources, such as LinkedIn, as well as information about the number and frequency of your interactions with us online and offline, such as at events, webinars, via email and our website. We may also process personal data about you that we collect either directly, through forms or data entry fields on our website, or through passive collection by cookies and other data collection technologies as described in this policy. We maintain and update this information as we continue to engage with you and use it as described under the legitimate interests processing purposes described below.
  • Using the Orora Customer Portals: If you are an authorized user of our platform, we process your name, email address, username, password, IP address, job title, phone number, information about the organisation where you work, actions you have taken in the applications on the platform, such as record creation, changes, input, responses, analysis, and approvals, and tickets filed on your behalf related to our platform.
  • Receiving marketing, sales-related and business development communications from us: If our marketing team or a member of our sales or business development teams sends communications to you, we process your name, phone number, email address, postal address, job title, job function, company name, company size, company financial information, IP address, device type, email view information including IP address and associated city, birthday if provided, and information about which of our solutions you use or which may be of interest to you.
  • Market research and surveys: If you participate in our market research and surveys, we process your email address, job title, phone number, survey responses, company name, job function, state, country, and any comments you provide.

If you visit the websites and online properties we provide:

We process personal data about you that we collect either directly, through forms or data entry fields on our website, or through passive collection by cookies and other data collection technologies. The types of personal data we collect and process in each of these contexts is further explained in the following four categories:

  • Contact us and registration forms: We process your name, email address, company where you work, phone number, job function, job title, country, and any comments you provide.
  • Consumer opinion surveys: We process your survey responses.
  • Cookies and other data collection technologies: We use browser session cookies, which are temporary cookies that are erased from your device’s memory when you close your Internet browser or turn your computer off, and persistent cookies, which are stored on your device until they expire, unless you delete them before that time. We group browser cookies on our site into three categories, which you can manage through our “Cookie Preferences” manager:
    • Required cookies: These cookies are necessary to enable the basic features of this site to function, such as allowing images to load or allowing you to select your cookie preferences.
    • Functional cookies: These cookies allow us to analyse your use of the site to evaluate and improve our performance. They may also be used to provide a better customer experience on this site. For example, remembering your log-in details or providing us information about how our site is used.
    • Advertising cookies: These cookies may be used to share data with advertisers so that the ads you see are more relevant to you, allow you to share certain pages with social networks, or allow you to post comments on our site. Depending on the advertiser, the data in the cookie may be shared with other companies so they may provide you with ads that are relevant to you.

If you are an employee, contractor, job applicant, temporary hire or former employee:

  • Applying to work at Orora. If you apply to work at Orora, we collect personal data about you and your professional experience, education and training such as your application, your name (and any former names), postal address, email address, phone number, universities attended, academic degrees obtained, grades, professional certifications and licenses, employment history, and curriculum vitae or resume. If you are offered employment, we will collect additional personal data about you, including possibly through background and professional reference checks.
  • California Residents: If you are a California resident, please see our Orora Employee Privacy Policy for California Residents here  for more information on our data collection practices in this capacity.
  • Offer of employment, temporary hire or contractor position: Prior to making an offer of employment, temporary hire, or a contractor position, we process personal data to conduct professional reference checks in accordance with applicable laws. If we extend an offer of employment, temporary hire or a contractor position at Orora to you, we will process personal data about the position to which you have been appointed, your job title at Orora, the compensation or project-based contractor rate we offer to you, whether you or your employment agency accepts the offer, your signature, and your starting compensation, agency agreed compensation or project-based contractor rate, and your start date at Orora.
  • Employment-Related Background checks: Prior to commencement of your employment with us, we conduct and may engage vendors to conduct background checks that involve the necessary personal data processing as permitted by the laws in the location in which you reside and/or work. More details are provided to you in the context of our request to you to complete these checks.
  • As an employee or contractor or temporary hire of Orora: We may collect and process personal data about your benefits, nationality, residency status, personal or email address, office or other workplace location, work phone number, mobile phone number, photographs, passport, visas, marital status, beneficiaries, profile, emergency contact details, financial account information, disability status, race, gender, age, social security number or other government-issued identification number, holiday and paid time off days, salary, incentive compensation, Orora stock options granted, Orora stock ownership, assigned projects, performance against your assigned goals, training completed, any performance improvement plans, any disciplinary actions taken, system accounts, technology and physical assets provided to you, your role and actions taken in connection with Orora projects and processes.
  • If your employment with Orora ends, we process personal data necessary to off-board you from Orora, including deactivation of your access to our systems, fulfilling our financial and related benefits obligations, and other related obligations with respect to the end of your employment with Orora.
  • In certain countries, supplemental privacy notices will be provided to Orora employees and contractors, and where applicable, consent will be obtained, to ensure compliance with local requirements.

We will not collect, use, or disclose sensitive personal data about you unless it is necessary to operate our business, we have your consent, we are legally required or permitted to collect, use or disclose that data, or as otherwise allowed by law. Sensitive personal data includes any personal information about a person's race, ethnic origin, political opinions, religious or philosophical beliefs or affiliations, membership of a professional, trade or political association or union, sexual preferences or practices, criminal record, health information, or genetic information about an individual that is not otherwise health information.

We also operate video surveillance devices in our premises and may monitor and record your communications with us (including email and telephone) for legitimate business and security purposes.

3. Why do we process personal information?

The reasons that we collect and process personal data about you depends on who you are and how we interact with you.

If you are a customer, business partner, or express interest in our solutions:

If you have a contract or other agreement in place with us, we collect and process personal data about you to fulfil the following obligations to you under that contract or agreement:

  • Provision your account on our business systems, customer portal and other systems to provide the requested goods or services.
  • Authenticate you to enable you to access your account and conduct business with us.
  • Provide customer service and support and investigate issues that you raise.
  • If you apply for a credit account with an Orora business, we may request credit information from you or a credit reporting body and disclose the information we receive to one or more credit reporting bodies and use this information to assess your credit worthiness for a trading account.
    • If you are a customer with our Australian companies, and apply for a credit account, we may request credit information from you or a credit reporting body and disclose the information we receive to one or more credit reporting bodies, in accordance with the Privacy Act. The data we collect and hold includes identification information such as your name and address, the type and amount of credit applied for, the fact that information was requested from a credit reporting body (and the information received following such a request), any court judgments relating to credit provided to you in the past, and information relating to your solvency from the National Personal Insolvency Index. We use this information to assess your credit worthiness for a trading account and (where applicable) to register interests on the Personal Property Securities Register. If you nominate Orora as a commercial reference to a third party, we may provide limited credit information to that third party.
    • Communicate with you, including via email, about your use of our customer portals and business, obtain your input on new features, functionality, and content, and to provide information about our solutions.
    • De-provision your account on our business systems, customer portal and other systems, where required. To the extent required by law, if you have provided your consent, we process personal data about you to send direct email marketing communications about our solutions. You may unsubscribe from our emails at any time by clicking the “unsubscribe” link in the email communications we send to you or by exercising Your Rights as described below.

Our legitimate interests: We process personal data about you based on our legitimate business interests, including for the following purposes:

  • To renew your account or service you have requested, based on our legitimate business interest in retaining you as a customer or partner.
  • To provide additional solutions you request based on our legitimate business interest to respond to your reasonable requests and to retain you as a customer or partner.
  • To determine whether, when, and the IP address and associated city of, a marketing, sales, or business development email communication we sent was viewed based on our legitimate interest to effectively manage and improve upon such communications with you.
  • To understand the business that you work for and your prior experience based on our legitimate interest to tailor our communications with you to improve our engagement with you.
  • To manage our legal, financial, policy and regulatory compliance responsibilities and to demonstrate our compliance upon request.
  • To defend our legal rights and the rights of others.
  • To maintain, improve, and protect the security and integrity of our websites and mobile applications.
  • To investigate, prevent, or act on illegal activities, suspected fraud, and situations involving potential threats to the physical safety of a person.

  • To undertake or engage in certain business transactions where some, or all our assets are purchased by or merged with another party or in preparation for these events.

Statistical and research purposes: We may further analyse use of our solutions, and characteristics of the companies that use our solutions (e.g., by size and industry sector) to help us understand and make decisions about customer and market needs, to improve our solutions, to design new solutions, and to inform partnership and business development decisions.

If you visit the websites and online properties we provide:

Consent: If you have provided your consent, we process personal data about you to:

  • Respond to your individual rights requests.
  • Manage your consent preferences.
  • Ads Interests: If required by law, to apply your device-specific interests for both mobile apps and mobile websites, to create a non-permanent unique ID within our platform for the purpose of storing and communicating interests within our internal platform, to communicate and share your interests to service providers, including whether you want to receive interest-based ads, and to enable us to honour your interests according to the preferences you have set.
  • Deliver the resources and information you have requested online.
  • If required by law, use cookies and other data collection technologies to help you navigate our website or technical solutions, personalize and provide a more convenient experience to you, analyse which pages you visit, which features you use, provide features such as social sharing widgets and videos, measure advertising and promotional effectiveness, assess which areas of our site you visit to remarket to you after you visit our site, and to provide content to you from our third party content partners.
  • Our legitimate interests: We process personal data about you based on our legitimate business interests, including for the following purposes: To investigate complaints or concerns based on our legitimate interest to ensure that such complaints or concerns are addressed appropriately.
  • To evaluate the characteristics and needs of our customers based on our legitimate interest in improving the solutions we offer and provide.
  • To communicate with you about Orora events, industry or related news based on our legitimate interest in engaging with you as a customer.
  • To administer our website and to understand how our website visitors navigate through our websites.
  • To engage in certain marketing activities.

Statistical and research purposes: We may further analyse information we gather online to improve the online experience and resources we provide to our users

If you are an employee, contractor, job applicant, temporary hire or former employee:

If you have a contract or other agreement with us, we process personal data about you to fulfil the specific obligations we have to you under the applicable contract or agreement such as:

  • Payment of project fees to contractors and temporary hires.
  • Managing performance obligations under employment contracts, where applicable.
  • Management of Orora stock options pursuant to stock option agreements.
  • Management of stock ownership pursuant to stock purchase and related agreements.

Our legitimate interests: We process personal data about you based on our legitimate interests, including to establish and manage our relationship with and responsibilities to you and for effective operation of our business, such as to:

  • Recruit new talent to join Orora.
  • On-board employees, contractors and new hires to Orora.
  • Grant and ensure appropriate access to Orora systems and facilities.
  • Ensure the security, safety, and health of the workplace and the tangible and intangible assets for which we are responsible.
  • Assign roles and responsibilities.
  • Manage team and cross-functional communications and collaboration.
  • Promote a positive workplace culture.
  • Administer payroll.
  • Benefits administration.
  • Award and pay incentive compensation.
  • Invoice payments.
  • Managing Orora projects and processes.
  • Maintaining corporate, financial and other essential business records and reporting.
  • Evaluating financial and operational performance.
  • Managing compliance, including, but not limited to our privacy, security, accounting, labour and employment, and other legal and regulatory obligations.

Statistical and research purposes: We may further analyse information to evaluate and understand employee engagement and to develop plans to continuously improve our workplace culture.

 

4. How do we share data about you?

We share your personal data in the following ways:

  • Vendors. We share personal data with vendors that help us with our business activities, including advertising. They only are authorized to process that information as necessary and as directed by us.
  • Advertising partners. We permit some of our advertising partners to collect and use personal data to provide you with relevant marketing and advertising content as described in this privacy policy.
  • Required by law. If we are required to disclose personal data as part of a legal process, we will take commercially reasonable steps to inform you as part of that process if required by law. We may also be required to disclose personal data in response to lawful requests by or in accordance with our obligations to government authorities, including requests from taxation authorities, national security agencies or law enforcement.
  • Legal proceedings. We may share personal data in connection with any legal proceedings and to establish, exercise or defend our or a third party’s legal rights, including providing information to others for the purposes of fraud prevention.
  • Safety, fraud prevention, government requests and protection of our rights are all reasons where we may share personal data where we believe in good faith it is necessary.
  • Mergers, acquisitions, divestitures, bankruptcies, asset sales, or similar proceeding, or in preparation for these events, but only if the acquiring organization agrees to this privacy policy’s protections.
  • With any other person or entity where you consent to the disclosure.
  • For any other purpose disclosed by us when you provide the personal data or for any other purpose, we deem necessary, including to protect the health or safety of others.
  • We take the security of your personal data very seriously. Accessing your personal data is only permitted among our team members on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third-parties.

5. How do we protect your personal data?

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

6. Do we transfer your data internationally?

We may transfer, access, or store personal data about you outside of your country of residence. This may include but is not limited to, transferring, accessing, or storing personal data about you outside the European Economic Area, United Kingdom, Switzerland, Australia, New Zealand, China, or Mexico. When we do, and to the extent required by applicable law, we will ensure that an adequate level of protection is provided for the information by using one or more of the following approaches:

  • Transferring personal data to countries that have privacy laws that have been recognized by the country from which the personal data are transferred as providing similar protections for the personal data.
  • Entering into written agreements with recipients that require them to provide the same level of protection for the personal data.
  • Relying on other transfer mechanisms approved by authorities in the country from which the data are transferred.
  • With your consent.

If you are accessing our websites from outside the United States of America, please note that your personal data may be transferred to, stored or processed in the United States. The United States may have privacy and data protection laws that differ from, and are potentially less protective than, the laws of your country. Your personal data can be subject to access requests from governments, courts, or law enforcement in the United States according to the laws of the United States.

7. How long do we retain your personal data?

We will keep your personal data for as long as we provide solutions to you, as long as you work for or with us, or as long as we are addressing a concern, question, complaint, or request you have made to us, as applicable to our interactions with you. If we have a contract or other agreement with you, we will follow the retention obligations of that agreement.

We may keep personal data longer if we have a legal obligation to keep it or to maintain necessary records for legal, financial, compliance, or other reporting obligations, and to enforce our rights and agreements. We also may keep personal data about you for statistical analysis or research purposes.

8. What about third party links?

The websites may contain links that will let you leave the websites and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.

9.What are your rights?

Depending on the jurisdiction in which you reside, you may have certain privacy rights such as:

 

  • Right to be informed: right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This information is covered through the contents of this privacy policy.
  • Right to access and rectification: right to access, change or correct your personal data. Note that your rights to access may be limited if such access would compromise the privacy rights of another person.
  • Right to data portability: personal data you provide us can be moved, copied or transmitted electronically in certain circumstances. Note that your rights to portability may be limited if such access and portability would compromise the privacy rights of another person.
  • Right to be forgotten: right to request the deletion of your personal data, in some circumstances. If we no longer need the personal data we collect for any purpose and we are not permitted by law to keep it, we will do what we can to delete, destroy or permanently remove any personal data that could be used to personally identify you.
  • Right to restrict processing: right to restrict the processing of your personal data, in certain circumstances.
  • Right to object: right to object to certain types of processing, including processing for direct marketing (i.e., receiving emails from us notifying you or being contacted with varying potential opportunities), in certain circumstances.
  • Right to lodge a complaint: right to lodge a complaint with a Supervisory Authority if you object to the way we process your personal data.
  • Right to withdraw consent: where we rely on consent as the legal basis for processing, you have the right to withdraw your consent to the use of your personal data at any time, even if you have provided consent to the use of your personal data in the past. To withdraw consent, please email us.
  • Rights related to automated decision-making: the right to human intervention, to express your point of view, to obtain an explanation of a decision reached after an assessment, and to challenge a decision based solely on automated processing and which produces legal or other significant effects on you.

 

We will honour the requests you make related to your rights as the relevant regional law allows, which means in some cases there may be legal or other official reasons that we may not be able to address the specific request you make related to your rights. To exercise your privacy rights, please contact us as describe in the “How to contact us” section below.

10. Do we collect children’s data?

Orora is committed to protecting the privacy of children. Our websites are intended for use by adults. We do not knowingly collect personal data about children or sell products to children. If you are a child, we kindly ask that you do not use our websites. If we discover that we have collected personal data from a child, we will delete that data as soon as we are able.

11. Notice to California Residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. For more information, please see our California Privacy Notice here.

12. Notice to Nevada Residents

Nevada law allows Nevada residents to opt out of the sale of certain types of personal data. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal data for monetary consideration to another person. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales and we will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests to privacy@ororagroup.com.

13. Accessibility

We are committed to ensuring this privacy policy is accessible to individuals with disabilities. If you wish to access this privacy policy in an alternative format, please contact us as described below.

14. How to contact us

United States

Please contact us at 1-888-526-3723 or at privacy@ororagroup.com if you any questions or would like to exercise your privacy rights. You can also submit written inquiries to:

Privacy Officer
Orora Packaging Solutions
6600 Valley View Street
Buena Park, CA 90620, USA

Australia

Please contact us at +61 3 9811 7111 or at privacy@ororagroup.com if you any questions or would like to exercise your privacy rights. You can also submit written inquiries to:

Privacy Officer
Orora Limited
109 Burwood Road
Hawthorn, Victoria 3122, Australia

If you are not satisfied with how Orora has dealt with your enquiry, you may contact the Office of the Australian Information Commissioner at enquiries@oaic.gov.au or by calling 1300 363 992.

New Zealand

Please contact us at +61 3 9811 7111 or at privacy@ororagroup.com if you any questions or would like to exercise your privacy rights. You can also submit written inquiries to:

Privacy Officer
Orora Packaging New Zealand Limited
239 Cavendish Drive
Manukau, New Zealand

If you are not satisfied with how Orora has dealt with your enquiry, you may contact the Office of Privacy Commissioner at investigations@privacy.org.nz or by calling 0800 803 909.

European Economic Area

The nominated Representative for data protection matters within the European Union is:

Email

privacy@ororagroup.com

Privacy Officer
Orora Landsberg
15 Hill Street Edinburgh
EH2 3JP UK

 

15 Privacy Policy Updates

We may update this privacy policy from time to time. We will provide notice of any material changes to our privacy policy as required by law. We will also post an updated copy on our website. Please check our site periodically for updates.

Effective and last updated date: May 22, 2023