GDPR Compliance

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although we are based in Australia, we respect the data protection rights of all individuals, including those in the European Union, and are committed to handling personal data in accordance with GDPR principles where applicable.

Data Controller

tranquil-frost acts as the data controller for personal information collected through our website. This means we determine the purposes and means of processing personal data.

Contact details:
tranquil-frost
42 Broadcast Lane
Sydney NSW 2000
Australia
Email: [email protected]

Lawful Basis for Processing

We process personal data based on one or more of the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you or because you have asked us to take specific steps before entering into a contract
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests

Your Data Protection Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This right is also known as the right to be forgotten.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

If you wish to exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month of receiving it. In complex cases, this period may be extended by two months, and we will inform you of any such extension.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When determining retention periods, we consider:

• The nature and sensitivity of the data
• The potential risk of harm from unauthorised use or disclosure
• The purposes for which we process the data
• Applicable legal requirements

International Data Transfers

As we are based in Australia, personal data collected from EU residents may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority and affected individuals in accordance with GDPR requirements.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with a supervisory authority. In the EU, this would be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Last updated: January 2024