Your data protection rights under the General Data Protection Regulation
Last Updated: January 2024
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although orchard-kit operates primarily in Australia, we are committed to respecting the data protection rights of all individuals, including those protected under GDPR.
This page outlines how we comply with GDPR principles and the rights available to individuals whose personal data we process.
orchard-kit acts as the data controller for personal information collected through this website. This means we determine the purposes and means of processing your personal data.
Contact details:
orchard-kit
42 Solar Drive
Brisbane, QLD 4000
Australia
Email: [email protected]
Under GDPR, we must have a valid legal basis for processing your personal data. The legal bases we rely on include:
If you are located in the European Economic Area (EEA), you have certain rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any personal information you believe is inaccurate or incomplete.
You have the right to request that we erase your personal data under certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or if you withdraw your consent.
You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to request that we transfer the personal data you provided to us to another organisation, or directly to you, in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. We do not currently use automated decision-making in ways that affect your rights.
To exercise any of your rights under GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to your request within one month. In some cases, we may extend this period by two further months if necessary, taking into account the complexity of the request.
As orchard-kit is based in Australia, personal data may be transferred outside the EEA. Where we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal or regulatory requirements, or as required for our legitimate business purposes. When personal data is no longer needed, we securely delete or anonymise it.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For individuals in the EEA, this would be the data protection authority in your country of residence.
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.