Last updated: January 2024
The General Data Protection Regulation (GDPR) is a European Union regulation that provides individuals within the EU with specific rights regarding their personal data. Although witty-cove operates from Australia, we respect and uphold these principles for all our website visitors.
Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
Right to Access
You have the right to request copies of your personal data that we hold. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions. This is also known as the "right to be forgotten."
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data under certain conditions, including processing for direct marketing purposes.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Legal Basis for Processing
We process personal data based on the following legal grounds:
Consent
When you submit an inquiry or subscribe to communications, you provide consent for us to process your data for those specific purposes.
Contractual Necessity
When you engage our services, processing your data is necessary to fulfil our contractual obligations.
Legitimate Interests
We may process data when it is in our legitimate business interests, provided these interests do not override your fundamental rights and freedoms.
Legal Compliance
We process data when required to comply with legal obligations.
International Data Transfers
As witty-cove operates from Australia, your data may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection.
We take appropriate safeguards to ensure your personal data remains protected in accordance with this privacy notice when transferred internationally.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The retention period varies depending on the context of our relationship with you.
Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Secure data storage systems
- Access controls limiting data access to authorised personnel
- Regular security assessments
- Staff training on data protection
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases or when we receive multiple requests, this period may be extended by two additional months, in which case we will inform you.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
Contact Information
For any questions regarding GDPR or to exercise your data protection rights, please contact:
witty-cove
42 Design Street
Melbourne VIC 3000
Australia
Email: [email protected]