Privacy statement

This Privacy Statement provides you with information on how 糖心vlog入口Group of Companies (“Rio Tinto”, “we”, “us”, “our”) collects, uses, processes or discloses Personal Data and Sensitive Data that we may obtain from you. 糖心vlog入口values your trust and is committed to the responsible management, use and protection of your Personal Data.

The 糖心vlog入口company with whom you engage is the controller of your Personal Data.

Definitions

“Affiliate” means an entity linked, or connected with, or controlled by 糖心vlog入口PLC or 糖心vlog入口Limited.

“Applicable Laws” means the applicable privacy and data protection legislation in your home jurisdiction.

“External stakeholders” means former, current, and prospective customers, suppliers of goods or services, government or public officials, or other stakeholders 糖心vlog入口interacts with, as part of its business activities.

“Personal Data” means any information relating to an identified or identifiable natural person, including sensitive data as defined under Applicable Laws. In this Privacy Statement, our use of the term “Personal Data” includes other similar terms under Applicable Laws, such as “Personal Information” and “Personally identifiable information. In South Africa only, Personal Data also includes information of companies.

“Privacy regulator” means the public authority that operates independently and is tasked with making sure local data protection laws are followed.

“糖心vlog入口Group of Companies” means any affiliate or subsidiary of 糖心vlog入口PLC or 糖心vlog入口Limited.

“Sensitive Data” means Sensitive Data, that may include racial or ethnic origin, religious or philosophical beliefs, political opinions, genetic data, biometric data, health, sexual orientation, criminal convictions, and or other information that receives special protections under Applicable Laws. In this Privacy Statement, our use of the term “Sensitive Data” includes other similar terms under Applicable Laws, such as “Sensitive Information”.

“Subsidiary” means a company entirely or partially owned and managed by another company referred to as the parent company under 糖心vlog入口Group of Companies.

Visitors to our 糖心vlog入口sites or events

We may collect, use, process and disclose the following Personal Data from you, or others.

Your name, company name and address, job title, gender, home address, and contact information
Audio and or photographic/video: audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit any of our 糖心vlog入口locations or participate in any live events that may be recorded
Your dietary requirements if you are attending an event
Sensitive Data such as:

health information or health checks (including, but not limited to; vaccination screening or advice, and medical history), or race or ethnicity, either directly or indirectly
alcohol and drug screening (this is required to ensure we comply with legal and policy obligations to keep our employees and you safe), or
information required for investigation of an incident or allegation (which may include Sensitive Data)
see section “Health and Medical Testing” for more information

Identity information such as passport details to verify identity
Automatic Number Plate Recognition (ANPR): details of vehicle registration numbers will be collected from some 糖心vlog入口sites
Clothing and shoe size for Personal Protective Equipment (PPE) wear
Information you voluntarily provide us
In certain circumstances, such as to attend social events, we collect Personal Data from children, of all ages, please see section “Children’s Personal Data” for more information. Personal Data will be limited to name and age only, for dietary requirements and children related activities

Visitors To 糖心vlog入口websites, microsites, or online platforms, such as RT Connect

We may collect, use, process and disclose the following Personal Data from you.

Your name, company name and address, job title, and contact information
Usage data: internet or other electronic network activity Information including, but not limited to, your interaction with our Websites or microsites, or email communication
Geolocation data: precise geographic location information from your use of our Website
Cookies, see below for more information and visit Cookies preferences on the Website

Members of the community where 糖心vlog入口operates or seeks to operate

We may collect, use, process and disclose the following Personal Data from you, or others.

Your name, and personal contact information, such as email address, home address, and telephone number
Audio and or photographic/video: audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit or reside in any of our 糖心vlog入口locations or participate in any live events that may be recorded
Your dietary requirements if you are attending an event
Sensitive Data such as health information or health checks (including, but not limited to; vaccination screening or advice, and medical history), race or ethnicity, religious or philosophical beliefs, or your connection to the community or location, either directly or indirectly. See section “Health and Medical Testing” for more information
Information required for investigation of an incident or allegation (which may include Sensitive Data)
Identity information such as passport to verify identity
Education history, academics, or achievements
Employment status, and history, work industry, and work visa
Your family ties to a particular location, and how long you have lived there, and/or your heritage
Gender, marital status, signature, and any dependents’ information
Automatic Number Plate Recognition (ANPR): details of vehicle registration numbers will be collected from some 糖心vlog入口sites
Information you voluntarily provide us

External stakeholders

We may collect, use, process and disclose the following Personal Data from you, or others.

Your name, company name and address, job title, gender, and contact information
Anti money laundering, anti-bribery and corruption, conflict of interests, or sanction checks required by law for certain stakeholders, such as, but not limited to, government or public officials
Audio and or photographic/video: audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit any of our 糖心vlog入口locations or participate in any live events that may be recorded
Your dietary requirements if you are attending an event
Sensitive Data such as:

health information or health checks (including, but not limited to; vaccination screening or advice, and medical history), race or ethnicity, political opinions, or philosophical beliefs, either directly or indirectly
alcohol and drug screening (this is required to ensure we comply with legal and policy obligations to keep our employees and you safe), or
information required for investigation of an incident or allegation (which may include Sensitive Data)
see section “Health and Medical Testing” for more information

Identity information such as passport details to verify identity
Automatic Number Plate Recognition (ANPR): details of vehicle registration numbers will be collected from some 糖心vlog入口sites
Information you voluntarily provide us

Alumni

We may collect, use, process and disclose the following Personal Data from you.

Your name and contact information

Current employees where 糖心vlog入口acts as a landlord or offers accommodation

We may collect, use, process and disclose the following Personal Data from you, or others.

Your name, work location, 糖心vlog入口owned or offered accommodation address, job title, and contact information
Financial information
Information required for investigation of an incident or allegation (which may include Sensitive Data)
Information you or others voluntarily provide us

Children’s personal data

Whilst our services are not directed to children, in some instances we may collect, use, process, and disclose Personal Data from children of all ages. For those that aged 13 years and over, in accordance with Applicable Laws, they will be afforded the same rights as an adult, including the right to access, update, and object to the processing of their Personal Data. We recognise our responsibility to provide suitable privacy protection to Personal Data we collect from children under 13 years, which will only be collected where they attend with a parent or guardian, for 糖心vlog入口organised social events, such as Family Days. We put in place several measures to protect that child’s Personal Data such as:

notifying parents or guardians about the processing and obtaining consent where necessary
ensuring any data collected is kept to a minimum
where permitted by law, allowing parents or legal guardians the right to request the Personal Data collected about their child and ask for such to be amended or deleted (please note, these rights are not absolute)

Please note in China, only children aged 14 years or over will be afforded the same rights as an adult.

Work experience students [aged 13 years and over]

We may collect, use, process and disclose the following Personal Data from you, or others.

Your name, contact details, school or college address, contact/teacher’s name and details, gender, and age
National insurance, social security or ID number
Your parent/legal guardian’s contact details
Audio and or photographic/video: audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit any of our 糖心vlog入口locations or participate in any live events that may be recorded
Your dietary requirements
Health information or health checks (including, but not limited to; vaccination screening or advice, and medical history), or race or ethnicity, either directly or indirectly. See section “Health and Medical Testing” for more information
Information you voluntarily provide us

Health and medical testing

In accordance with our health and safety requirements and or Applicable Laws, in some circumstances, such as visiting certain 糖心vlog入口sites, or attending our events, we will ask for your consent for us to collect, use, process and disclose your Personal and/or Sensitive Data to be able to conduct medical assessments, or undertake drug and alcohol screenings, and or to manage and support your recovery from injury and illness. In some circumstances, we may ask you for your medical history before assisting us in undertaking heritage field work. This is so we can assess your fitness in health and wellbeing, to be able to travel and attend these locations.

Where we have obtained your consent to our collection, use, processing and disclosure of your Personal or Sensitive Data, you can withdraw your consent at any time, but the withdrawal of your consent may impact your ability to engage with us, or be able to visit our 糖心vlog入口sites, or attend our events, and/or our ability to help you recover from your injury or illness.

Legal bases for processing your personal data

We may process your Personal Data for the following purposes:

Performance of contract

To manage our business relationship with you, such as executing our business arrangements and/or contracts

With your consent

To engage with you, either in person in email, or through your use of our Websites or microsites, or via the “Contact Us” page, or wish to partake in any events that we organise
To send marketing and promotional materials to existing and prospective business stakeholders. We may also notify you about updates to our Websites or microsites, business activities or products and services
Where we legally require your explicit consent, where no other lawful basis will apply, such as processing your Sensitive Data, or transferring your data
For health, safety and security reasons, where you visit any of our 糖心vlog入口sites, we will process your Personal Data and or your Sensitive Data (such as alcohol or drug screening, or medical checks and vaccination screening or advice) to adhere to health and safety or security requirements, to keep you, and us safe
To take images of you, if you agree to have your photo taken at a 糖心vlog入口event
To investigate and report on your feedback, complaints and grievances and known or suspected misconduct, suspicious activity, fraudulent, or criminal activity, and includes any other activity that we assess may cause you, us, or others harm, in accordance with Applicable Laws

Where we rely on consent as the legal bases for processing your Personal Data, you have the right to withdraw your consent at any time, by emailing aske&c@riotinto.com, or clicking on the opt out or unsubscribe button.

Compliance with laws

For health, safety and security reasons, where you visit any of our 糖心vlog入口sites, we will process your Personal Data and or your Sensitive Data (such as alcohol or drug screening) to adhere to health and safety or security regulations or Applicable Laws, to keep you, and us safe
Protecting and defending our legal rights and those of third parties, in accordance with Applicable Laws
To develop community relationships, inform access to lands, permits, and approvals, understand community opinions and social customs regarding current and future activities, as well as avoid or mitigate adverse impacts on communities, in accordance with Applicable Laws
To investigate and report on your feedback, complaints and grievances and known or suspected misconduct, suspicious activity, fraudulent, or criminal activity, and includes any other activity that we assess may cause you, us, or others harm, in accordance with Applicable Laws

Our legitimate interests

To measure and improve our business, products or services and performance
To develop community relationships, inform access to lands, permits, and approvals, understand community opinions and social customs regarding current and future activities, as well as avoid or mitigate adverse impacts on communities
To deal with feedback or complaints relating to 糖心vlog入口business activities (including 糖心vlog入口offered, managed, or owned properties)
To send you marketing and promotional materials, we may also notify you about updates to our Websites or microsites, business activities or products and services
For data analysis, or audits, and prevention of fraud
For health, safety and security reasons (including CCTV), where you visit any of our 糖心vlog入口sites
To investigate and report on your feedback, complaints and grievances and known or suspected misconduct, suspicious activity, fraudulent, or criminal activity, and includes any other activity that we assess may cause you, us, or others harm in accordance with Applicable Laws

Vital interests

To protect your or someone else’s life. For example, if you are involved in an emergency and you require emergency care or medical treatment or you witness an emergency situation and are able to provide information to us about it

Where does 糖心vlog入口collect your personal data

From you, either directly (such as through information you submit to us) or indirectly (such as observing your actions on our Websites or microsites, or when you engage in email communications)
From your feedback or surveys, you may complete
From Cookies and other similar technologies when you visit 糖心vlog入口Websites or microsites
From data analytics’ providers
From joint marketing partners
From government entities, or agencies
From service providers, or third parties, (such as companies who are assisting us in fulfilling our contracts and carrying out our business)
From health and medical professionals or advisors
From third party insurers
From other sources, such as public databases, social media platforms (including people with whom you are friends or otherwise connected) and from other third parties

Sharing and transferring your personal data

We may share your Personal Data with the following:

糖心vlog入口Group of Companies, and also partners (such as managed and non managed joint ventures). We may share your Personal Data for the purposes of carrying out the collection, use, processing, and disclosure, set out above
Professional advisers, such as health or medical professionals/advisors, consulting firms, financial advisors, legal advisors, external auditors, insurers, third parties, or cloud service providers who support our business, in connection with the business purpose set out above for which we collect, use, process, and disclose your Personal Data
Regulatory bodies, government agencies and law enforcement bodies in any jurisdiction
Where we are obliged to disclose your Personal Data under Applicable Laws, which may include laws outside your country of residence
To third parties that install, monitor and/or maintain CCTV, security, and other monitoring equipment at our premises or sites
To third parties involved with events organising to facilitate your participation in those events, and or support feedback

For details on Personal Data or Sensitive Data transfers for China, Mongolia or South Korea residents, please refer to table under section Additional Information for Mainland China, Mongolia, and South Korea Residents.

As defined under California privacy laws, we do not sell or share Personal Data with third parties.

Cross border transfer of your personal data

We may transfer some of your Personal Data outside of your home jurisdiction. In these circumstances your Personal Data will only be transferred on one of the following bases:

Where required under Applicable Laws, with your consent (implied or express)
Where the transfer is subject to appropriate safeguards for international transfers as prescribed by applicable law, for example if we are sharing your Personal Data with a third party, as required, the contract with them will have appropriate contractual clauses endorsed and released by the appropriate privacy regulator or other obligations in the contract requiring appropriate technical, organizational and security measures to protect your Personal Data
The transfer is to a country that is deemed an adequate destination for Personal Data by the privacy regulator in the country of origin

How 糖心vlog入口keeps your personal data safe

Rio Tinto, at all times, maintains technical, security and organisational measures intended, as required under Applicable Laws, to protect your Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.

If you do not provide 糖心vlog入口with your personal or sensitive data

If you do not provide your Personal or Sensitive Data where required, this may impact your ability to engage with us, or be able to visit our 糖心vlog入口sites, or attend our events.
Where we have obtained your consent to our collection, use, processing, or disclosure of your Personal or Sensitive Data, you can withdraw your consent at any time, but the withdrawal of your consent may impact your ability to engage with us, or be able to visit our 糖心vlog入口sites or attend our events.

Your rights

Depending on your country of residence, you may have a number of rights under Applicable Laws, such as; accessing, rectifying, deleting, objecting or restricting your Personal Data, as well as the right not to be discriminated against. You may also nominate an individual who would be able to exercise your rights. If you would like to exercise any of these rights, including a request for access to your Personal Health Information (PHI) under The Health Insurance Portability and Accountability Act 1996 (“HIPAA”) (for US only), please contact us at aske&c@riotinto.com. Please note, however, these rights are not absolute.

How long we retain your personal data

We will only retain your Personal Data for as long as necessary to fulfil the purpose for which it is processed or as required by Applicable Laws or any litigation hold, to which we are subject, including to meet any governance or reporting requirements.

Additional information for California residents

This section applies to Personal Data, referred to in this section as “Personal Information” as defined in the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), whether collected offline or online. This section does not address or apply to our handling of Personal Information that is exempt under the CCPA, such as publicly available information or deidentified/aggregated information.

What personal information is collected and disclosed

The table below, identifies the categories of Personal Information about California residents that we collect and have collected in the prior twelve (12) months, as well as the categories of third parties to whom we disclosed the information for a business or commercial purpose. In some cases (such as where required by law), we may ask for consent or give you certain choices prior to collecting or using certain Personal Information.

Categories of personal information collected	Disclosed to following recipients for operational business purposes
Identifiers, such as name, contact information, online identifiers, IP address, or email address	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Health professionals Websites, online platforms, operating systems Others with your permission
Categories of personal information described in Cal. Civ. Code § 1798.80, such as name, signature, photograph, contact information, financial information, health information.	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Health professionals Websites, online platforms, operating systems Others with your permission
Internet or other electronic network activity information, such as browsing history, search history, information regarding your interaction with our and other websites or online platforms.	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Websites, online platforms, operating systems
Commercial information, transaction information, purchase history and financial details	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Online platforms, or operating systems
Geolocation data, such as device location, your physical location, and IP location.	Rio Tinto group of companies Service providers or vendors Online platforms, or operating systems
Audio, electronic, visual and similar information , such as images and audio, video or call recordings created in connection with our business activities.	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Websites, online platforms, operating systems
Sensitive Information, such as health information, race or ethnicity, or information required for investigation of an incident or allegation (which may include Sensitive Information).	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents Regulators, government entities, and law enforcement Health professionals Online platforms Others with your permission
Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.	Rio Tinto group of companies Service providers or vendors Professional advisors, and agents

We do not “sell” or “share” (as defined by the CCPA) Personal Information or Sensitive Information related to California residents.

Your CCPA Privacy Rights

California residents have the following rights under the CCPA:

Know/access: the right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you
Correct the information we hold about you
Opt out of “sales” and “sharing”: the right to opt-out of the “sale” and “sharing” of their Personal Information as those two terms are defined under the CCPA. However, 糖心vlog入口does not “sell” or “share” California resident Personal Information
Limit use/disclosure of Sensitive Information: the right to request to limit certain uses and disclosures of Sensitive Information
Non-discrimination: the right not to be subject to discriminatory treatment for exercising your rights under the CCPA
Do Not Track. Currently, our website does not recognize “Do-Not-Track” requests

You may exercise your rights under Applicable Laws or raise any concerns by emailing aske&c@riotinto.com or by phoning our free toll number +1 800 872 6729. Please note, however, these rights are not absolute.

Your rights under California’s Shine The Light Act

We do not disclose Personal Information to third parties for their direct marketing purposes.

Authorised agents

If you want to make a request as an authorized agent on behalf of a California resident, you may use the submission methods noted above. As part of our verification process, we may request that you provide, as applicable, proof concerning your status as an authorized agent, in addition, we may require the individual on whose behalf you are making the request to verify their own identity.

Additional information for Mainland China, Mongolia, and South Korea residents

In China, your Personal Data will be collected by one or more of the following entities:

糖心vlog入口Trading (Shanghai) Co Ltd (branches in Shanghai and Beijing)
糖心vlog入口Mining Commercial (Shanghai) Co Ltd
糖心vlog入口Mineral Exploration (Beijing) Co Ltd
糖心vlog入口Iron & Titanium (Suzhou) Co Ltd
糖心vlog入口China

In Mongolia, your Personal Data will be collected by one or more of the following entities:

糖心vlog入口Holdings LLC
糖心vlog入口Mongolia LLC
Oyu Tolgoi LLC

What personal data is processed

We collect a range of Personal Data about you as described above in this Privacy Statement.

Reference to Personal Data shall, unless the context otherwise requires, be deemed to include Sensitive Data (as defined by Applicable Laws in your jurisdiction). For such purposes, in China, bank account numbers, credit checks, and government issued ID would be considered Sensitive Data, whereas “race” and “gender” is not considered Sensitive Data (in China). For more information, please contact aske&c@riotinto.com.

Cross border transfer of your personal data

糖心vlog入口delegates processing of your Personal Data as follows:

Recipient	Purpose	Personal Data	Retention
糖心vlog入口Group of Companies	Business reasons, on a need-to-know basis	Name, Job title, Company name and contact details, telephone number, email address	In accordance with Applicable Law and Rio Tinto’s Retention Policy
糖心vlog入口Group of Companies (managed corporate and operational sites)	Access control	Name, job title, company name and contact details, telephone number, email address	As above
Microsoft Office 365 (US)	Communication and collaboration, SharePoint, Emails,	Name, job title, company name and contact details, telephone number, email address	As above
RTBS Server (Australia)	Supplier and customer information database	Name, job title, company name and contact details, telephone number, email address	As above
Global Website (Australia, US)	Website management	Name, telephone number, email address, usage data, such as your interaction with our Websites or microsites, Geolocation data: such as precise geographic location information from your use of our Websites or microsites. Visitors to 糖心vlog入口Websites, or microsites have the option into opting into Cookies via their cookies preferences.	As above
Enablon (US)	Environment, Health and Safety software	Limited contact information of inputter of incident	As above
Navex (EU)	Incident Management and Reporting Software (whistleblowing hotline)	Limited Personal Data of reporter (if provided - usually anonymous), including Personal Data (including Sensitive Data dependent on the report or conduct alleged) of individual that is the subject of the report, and others that may be involved	As above

Supplementary privacy notices

In some cases, and depending on your home jurisdiction, we may provide you with additional notices about our information collection practices (“Supplementary Privacy Notices”). These Supplementary Privacy Notices apply in addition to this Privacy Statement. Where a Supplementary Privacy Notice conflicts with this Privacy Statement, the Supplementary Privacy Notice shall prevail.

Where 糖心vlog入口provides you with electricity supply services, please refer to the .

Cookies

We may use Cookies and similar technologies that aim to collect and store information when you visit our Websites or microsites. You can control and manage your Cookie preferences by changing the settings on your browser. However, if you disable Cookies and similar technologies, some features may not work as intended. For more detailed information about the specific Cookies and similar technologies we use and your choices, please see below. For a list of the different types of Cookies and similar technologies used on our Websites, visit the preference/settings in the Cookie banner of the Website you are viewing.

Cookies are a standard feature of websites that allow us to store small amounts of data on your computer about your visit to and use of the Services. Cookies help us learn which areas of the Services are useful and which areas need improvement. For this purpose, we also use technologies similar to Cookies, such as Flash Local Shared Objects (also known as Flash Cookies) or pixel tags, as further detailed below.

Strictly Necessary Cookies: These enable you to navigate our Websites. Without these absolutely necessary Cookies, our Websites will not perform as smoothly for you as we would like it to.

Functional Cookies: These collect information about your choices and preferences, and allow us to remember language or other local settings and customize for you accordingly.

Performance Cookies: These are analytics Cookies which collect information about your use of our Website and enable us to improve the way it works. They can show us which are the most frequently visited pages on our Websites.

Targeting and Social Media Cookies: These Cookies collect information about your activities on our Websites (or other Sites) to provide you with targeted advertising. Social media Cookies collect information about social media usage.

Google Analytics: Some of our Websites, may use Google Analytics services, as provided by Google, Inc. (“Google”), which uses Cookies and similar technologies to collect and analyse information and report on activities and trends. This service may also collect information regarding the use of other Websites, applications and online resources. You can learn about Google’s practices by going to , and you can opt out by downloading the Google Analytics opt-out browser add-on, available at .

Your Choices 糖心vlog入口 Our Use of Cookies and Similar Technologies: Depending on the applicable law of your jurisdiction (such as the EU/EEA, or the UK), we may ask for your Consent for placing Cookies on your device, with the exception of strictly necessary Cookies. You can change your settings for Cookies and similar technologies by visiting the preference/settings in the Cookie banner of the Website you are viewing.

In addition, you can also avoid Cookies being placed on your device, by configuring your browser settings. Please refer to for information on commonly used browsers. Please note, however, if some Cookies are disabled, not all features of our Websites function as intended.

Contact information and complaints

If you have any questions or concerns regarding our use of your Personal Data, or if you wish to exercise any of your rights described in this Privacy Statement, please contact us by emailing aske&c@riotinto.com, or by contacting the , if applicable. You also have the right to lodge any complaints you may have regarding Rio Tinto’s processing of your Personal Data to us or the privacy regulator for your country or region.

California residents

If you have any questions or concerns regarding our use of your Personal Information, or if you wish to exercise any of your rights under CCPA, please contact us by emailing aske&c@riotinto.com, or by phoning our free toll number +18008726729.

Other important information

This Privacy Statement may be changed over time. Please visit this page regularly for possible changes.

Our Websites and microsites may contain links to Websites or applications we do not own or control. Our Privacy Statement does not apply to those. Please read the privacy statements on those Websites or applications if you would like to find out how they collect, use, process, and disclose your Personal Data.

Any translation is for reference only, and in the event of any conflict, the English version will prevail.

糖心vlog入口

Next event

Select your location