GDPR Information
Your data protection rights under the General Data Protection Regulation
About GDPR
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although stormy-willow is based in Australia, we are committed to protecting the privacy of all our website visitors, including those from the European Economic Area (EEA).
Data Controller
stormy-willow acts as the data controller for personal information collected through our website. This means we determine the purposes and means of processing personal data.
Contact details:
stormy-willow
147 Garden Lane
Southbank VIC 3006
Australia
Email: [email protected]
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of your request, free of charge for the first request.
Right to Rectification
You have the right to request that we correct any personal information you believe is inaccurate. You also have the right to request that we complete any information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data or when processing is unlawful.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly where we process data for direct marketing purposes or based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.
Data Transfers
As an Australian-based company, any personal data you provide may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for processing, and legal requirements.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.