Our commitment to data protection and your privacy rights
Last updated: January 2024
glossy-ocean is committed to protecting the privacy and security of personal data. This page provides information about how we comply with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the United Kingdom.
This information supplements our main Privacy Policy and provides additional details specific to GDPR requirements.
For the purposes of the GDPR, glossy-ocean acts as the data controller for personal data collected through this website. Our contact details are:
glossy-ocean
Level 14, 225 George Street
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data on the following legal bases under the GDPR:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or setting non-essential cookies.
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights. Our legitimate interests include:
Where processing is necessary to comply with a legal obligation to which we are subject.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including when:
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We do not currently use automated decision-making processes.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
There is no fee for exercising your rights, although we may charge a reasonable fee for manifestly unfounded or excessive requests.
As we are based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. However, we implement appropriate safeguards to ensure your data is protected in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the nature of the data and the purposes for processing. When personal data is no longer needed, we securely delete or anonymise it.
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.
If you have concerns about how we handle your personal data, we encourage you to contact us first so we can address your concerns. However, you also have the right to lodge a complaint with a supervisory authority in the EEA member state where you live or work, or where the alleged infringement took place.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
If you have questions about this GDPR information or our data protection practices, please contact us at:
glossy-ocean
Level 14, 225 George Street
Sydney NSW 2000
Australia
Email: [email protected]