GDPR Compliance

Last updated: January 2024

petal-stag is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines our compliance measures and your rights under GDPR if you are located in the European Economic Area (EEA) or United Kingdom.

Data Controller

petal-stag acts as the data controller for personal information collected through our website and services. Our contact details are:

Email: [email protected]
Address: Level 12, 180 George Street, Sydney NSW 2000, Australia

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you, such as providing requested services.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary to comply with applicable laws.

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data held by us.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data under certain circumstances.
• Right to Data Portability: You have the right to request transfer of your personal data to another organisation or directly to you.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month, which may be extended by two further months for complex requests. We will inform you of any extension and the reasons for it.

Data Transfers

As we are based in Australia, personal data collected from EEA or UK residents may be transferred outside the EEA. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods are outlined in our Privacy Policy.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Complaints

If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in your country of residence or work, or where the alleged infringement took place.

Updates to This Notice

We may update this GDPR compliance notice periodically. We will post any changes on this page with an updated revision date.