Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
The General Data Protection Regulation (GDPR) is a regulation in European Union law on data protection and privacy. Although harbor-egret is based in Australia, we are committed to respecting the privacy rights of all our visitors, including those from the European Economic Area (EEA).
This page explains your rights under GDPR and how we handle personal data in compliance with these regulations.
harbor-egret acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
harbor-egret
45 Greenway Boulevard
Sydney, NSW 2000
Australia
Email: [email protected]
If you are a resident of the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
You have the right to request that we correct any personal data that is inaccurate or incomplete.
You have the right to request that we delete your personal data in certain circumstances, including when:
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis, or where we process data for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
We process personal data on the following legal bases:
As harbor-egret is based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not currently subject to an adequacy decision by the European Commission. Where we transfer data internationally, we implement appropriate safeguards to protect your personal data.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence.
We may update this GDPR information from time to time. Any changes will be posted on this page with a revised date.