Last Updated: January 2024
Introduction
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data of individuals within the EU. Although orchard-space is based in Australia, we are committed to protecting the privacy of all our website visitors, including those from the European Union, and we comply with GDPR requirements when processing personal data of EU residents.
Data Controller
For the purposes of the GDPR, orchard-space acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
orchard-space
Level 12, 45 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
Legal Basis for Processing
Under the GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights do not override those interests
Your Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
Right to Rectification
You have the right to request correction of any incomplete or inaccurate personal data we hold about you.
Right to Erasure
You have the right to request that we delete or remove your personal data in certain circumstances, such as when there is no compelling reason for continued processing.
Right to Restrict Processing
You have the right to request that we suspend the processing of your personal data in certain circumstances, for example, if you want us to establish the accuracy of the data.
Right to Data Portability
You have the right to request the transfer of your personal data to another party in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Exercising Your Rights
To exercise any of the rights described above, please contact us using the details provided at the end of this page. We will respond to your request within one month of receiving it. In some cases, we may need to verify your identity before processing your request.
There is no fee for exercising your rights, although we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
International Data Transfers
As we are based in Australia, any personal data you provide to us may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of protection for personal data.
Where we share your data with third parties located outside the EU and Australia, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.
Data Security
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including measures to prevent unauthorised access, accidental loss, destruction, or damage to your personal data.
Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and inform the relevant supervisory authority within 72 hours of becoming aware of the breach.
Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
Contact Us
If you have any questions about this GDPR information or wish to exercise your data protection rights, please contact us at:
orchard-space
Level 12, 45 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]