GDPR Compliance
Information for users in the European Economic Area regarding data protection.
Last updated: October 2024
1. Introduction
This page provides additional information for individuals located in the European Economic Area (EEA) regarding how eyser-coor processes personal data in compliance with the General Data Protection Regulation (GDPR). This information supplements our main Privacy Policy.
2. Data Controller
eyser-coor acts as the data controller for personal data collected through our website and services. Our contact details are:
Email: [email protected]
Address: Level 12, 456 Collins Street, Melbourne, VIC 3000, Australia
3. Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legal Obligation: Where processing is necessary for compliance with a legal obligation
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights
4. Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
5. International Data Transfers
As we are based in Australia, your personal data may be transferred outside the EEA. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by the European Commission
- Ensuring the receiving country provides an adequate level of data protection
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
7. Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In complex cases or where we receive numerous requests, this period may be extended by two additional months, and we will inform you of any such extension.
8. Complaints
If you are not satisfied with how we handle your personal data or your request to exercise your rights, you have the right to lodge a complaint with a supervisory authority in your country of residence or the country where you believe an infringement has occurred.
9. Changes to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.