Last updated: January 2024
Our Commitment to GDPR
russet-canyon is committed to protecting the personal data of all individuals, including those in the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) in our collection, processing, and storage of personal data.
Data Controller
russet-canyon acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing personal data.
Contact: [email protected]
Address: Level 12, 180 Queen Street, Melbourne VIC 3000, Australia
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so:
- Consent: When you explicitly agree to processing for specific purposes
- Contract: When processing is necessary to fulfil a contract with you
- Legal obligation: When processing is required by law
- Legitimate interests: When processing is necessary for our legitimate business interests, provided these do not override your rights
Your Rights Under GDPR
If you are located in the EEA, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of a verified request.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer this data to another controller.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
International Data Transfers
As an Australian company, data may be transferred to and processed in Australia. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Protection Measures
We implement technical and organisational measures to protect personal data, including:
- Secure data storage systems
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
- Incident response procedures
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods are detailed in our Privacy Policy.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within 30 days. There is no fee for most requests, though we may charge a reasonable fee for excessive or unfounded requests.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Changes will be posted on this page with an updated revision date.