Last Updated: January 2024
Overview
The General Data Protection Regulation (GDPR) is a European Union regulation on data protection and privacy. While bamboo-hawk primarily operates in Australia, we are committed to upholding GDPR standards for any visitors from the European Economic Area (EEA) who access our website.
Data Controller
For the purposes of GDPR, bamboo-hawk acts as the data controller for personal information collected through this website.
Contact details:
Email: [email protected]
Address: Level 12, 456 Collins Street, Melbourne VIC 3000, Australia
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: When you submit a form or subscribe to communications, you provide consent for us to process your data for stated purposes.
- Contractual necessity: When processing is necessary to fulfil a service you have requested.
- Legitimate interests: For business purposes such as improving our services, provided these do not override your fundamental rights.
- Legal obligation: When processing is required to comply with applicable laws.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
Right to Restriction
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or significant effects. We do not currently engage in such automated decision-making.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to valid requests within 30 days. We may request verification of your identity before processing requests.
International Data Transfers
As we operate from Australia, personal data collected from EEA visitors is transferred to Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection under GDPR.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Criteria for determining retention periods include legal requirements, contractual obligations, and business necessity.
Cookies and Tracking
We obtain consent before placing non-essential cookies on devices of EEA visitors. For more information, see our Cookie Policy.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in your country of residence. However, we encourage you to contact us first so we can address your concerns.
Updates
We may update this GDPR information periodically. Material changes will be communicated through our website.