Overview
The General Data Protection Regulation (GDPR) provides data protection rights for individuals within the European Union. While Glacier-caribou is an Australian business primarily serving Australian customers, we are committed to extending GDPR-equivalent protections to all users who interact with our services.
Data Controller
Glacier-caribou acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: Where you have provided explicit consent for specific processing activities
- Contract: Where processing is necessary to perform our contractual obligations to you
- Legitimate Interest: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
- Legal Obligation: Where processing is necessary to comply with applicable laws
Your GDPR Rights
If you are located in the European Union, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions. This right is not absolute and may be subject to legal exceptions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object to Processing
You have the right to object to our processing of your personal data, under certain conditions, particularly where we are processing data based on legitimate interests.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Data Transfers
As an Australian business, any personal data you provide may be transferred to and stored in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. We ensure that all data transfers are conducted in compliance with applicable data protection laws.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period varies depending on the context of the processing and our legal obligations. When personal data is no longer required, it is securely deleted or anonymised.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.
Complaints
If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.
Contact Information
For any GDPR-related enquiries or to exercise your rights, please contact us at:
Email: [email protected]
Address: Level 12, 100 Collins Street, Melbourne VIC 3000, Australia