GDPR Compliance

Our Commitment to Data Protection

Although geyser-kudu operates primarily in Australia under the Australian Privacy Act, we recognise the importance of the General Data Protection Regulation for individuals located in the European Union. We are committed to protecting personal data in accordance with international best practices and applicable data protection laws.

Data Controller Information

For the purposes of data protection legislation, geyser-kudu acts as the data controller for personal information collected through this website. Our contact details are:

geyser-kudu
142 Production Lane
Docklands, VIC 3008
Australia
[email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given explicit consent for specific processing purposes
• Contract: Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Legal Obligation: Where processing is required to comply with applicable laws

Your Rights Under GDPR

If you are located in the European Union, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request to receive your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: You have rights concerning any automated decision-making or profiling

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, although this may be extended by up to two months for complex requests. We may need to verify your identity before processing your request.

International Data Transfers

As we operate from Australia, personal data collected from EU residents may be transferred outside the European Economic Area. Where such transfers occur, we implement appropriate safeguards to ensure your data remains protected in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods vary depending on the type of data and processing purpose. Upon request, we can provide information about our retention policies for specific categories of data.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. Our security measures are reviewed regularly and updated as necessary to maintain appropriate protection levels.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence. We encourage you to contact us first so we can address your concerns directly.

Updates to This Information

This GDPR compliance information may be updated periodically. Any changes will be posted on this page with an updated date. We encourage you to review this information regularly.

Contact

For any questions regarding GDPR compliance or data protection matters, please contact us at [email protected]