GDPR Compliance
Information for European Union visitors about data protection rights.
Last updated: September 2024
topaz-crag respects the privacy rights of individuals in the European Union and European Economic Area under the General Data Protection Regulation (GDPR). This page provides additional information about how we process personal data of EU residents.
Data Controller
topaz-crag is the data controller responsible for the processing of your personal data collected through this website. Our contact details are:
topaz-crag
Level 8, 127 Creek Street
Brisbane QLD 4000
Australia
Email: [email protected]
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you submit an enquiry form, you consent to us processing your data to respond to your request.
- Legitimate Interests: We may process data for our legitimate business interests, such as improving our services and website functionality, provided these interests do not override your rights.
- Legal Obligations: We may process data when required to comply with applicable laws and regulations.
Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
Right to Access: You have the right to request copies of your personal data that we hold. We may charge a reasonable fee for additional copies.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure: You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object: You have the right to object to our processing of your personal data under certain conditions, including processing for direct marketing purposes.
Right to Data Portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Exercising Your Rights
To exercise any of these rights, please contact us at the email address provided above. We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
We may ask you to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
International Data Transfers
As we are based in Australia, any personal data you submit through our website may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where required, we implement appropriate safeguards to ensure your data is protected in accordance with GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for a period of two years unless you request earlier deletion or we have a legal obligation to retain it longer.
Complaints
If you are not satisfied with how we handle your personal data or your privacy rights request, you have the right to lodge a complaint with your local data protection authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).
Updates to This Notice
We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when this notice was last revised.