Data Protection

Last Updated: January 2024

Our Commitment to Data Protection

crater-civet is committed to ensuring that your personal data is handled in accordance with applicable data protection laws, including the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). For users located in the European Economic Area, we also respect the principles of the General Data Protection Regulation (GDPR).

Data Controller

crater-civet acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.

Contact details:
Email: [email protected]
Address: 42 Greenway Boulevard, Sydney NSW 2000, Australia

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Where processing is necessary to comply with a legal obligation
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms

Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Right to Object

You have the right to object to our processing of your personal data, under certain conditions.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the data and our obligations.

International Data Transfers

Your personal data may be transferred to and processed in countries other than Australia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Data Security Measures

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised or unlawful processing
• Accidental loss, destruction, or damage
• Unauthorised access or disclosure

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay.

Automated Decision Making

We do not use automated decision-making processes, including profiling, that would have a significant effect on you without human intervention.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with:

• The Office of the Australian Information Commissioner (OAIC) for Australian residents
• Your local data protection authority if you are located in the European Economic Area

Updates to This Notice

We may update this data protection notice from time to time. We will notify you of any significant changes by posting the new notice on this page with an updated revision date.