GDPR Compliance
Last updated: January 2024
Introduction
spry-lotus is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR). While we are an Australian company primarily serving Australian customers, we recognise that some of our website visitors may be located in the European Union or European Economic Area. This page outlines how we comply with GDPR requirements for such visitors.
Data Controller
For the purposes of GDPR, spry-lotus acts as the data controller for personal data collected through our website. Our contact details are:
spry-lotus
42 Solar Way
Sydney, NSW 2000
Australia
[email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
Consent
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or setting non-essential cookies.
Contract Performance
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as providing quotations or conducting site assessments.
Legal Obligation
Where processing is necessary to comply with legal obligations, such as maintaining business records or responding to lawful requests from authorities.
Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights. This includes improving our services and website security.
Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of any inaccurate personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making processes.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases, we may extend this period by two months, but we will inform you of any extension within the first month.
We may ask you to verify your identity before fulfilling your request. There is no fee for exercising your rights, except where requests are manifestly unfounded or excessive.
International Data Transfers
As an Australian company, your personal data may be transferred to and processed in Australia. Australia is not currently subject to an adequacy decision by the European Commission. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account legal, accounting, and reporting requirements. When personal data is no longer needed, we securely delete or anonymise it.
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.
Updates
We may update this GDPR compliance page from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
For any questions regarding GDPR compliance or to exercise your data protection rights, please contact:
spry-lotus
42 Solar Way
Sydney, NSW 2000
Australia
[email protected]