Your data protection rights under the General Data Protection Regulation
sienna-vale is committed to protecting the privacy and security of your personal data. Although we are based in Australia, we recognise the importance of the General Data Protection Regulation (GDPR) and extend its protections to all individuals whose data we process, regardless of their location.
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will make the corrections within one month of receiving your request.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes or processing based on legitimate interests.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month. In complex cases or where we receive a large number of requests, we may extend this period by a further two months, but we will inform you of any such extension within one month of receiving your request.
As an Australian company, any transfer of personal data from the EEA or UK to Australia is subject to appropriate safeguards. Australia has been granted an adequacy decision by the European Commission, meaning that personal data can flow from the EU to Australia without any further safeguard being necessary.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are based on business needs and legal requirements. When personal data is no longer needed, we securely delete or anonymise it.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with GDPR requirements.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you can contact the supervisory authority in your country of residence. If you are in the UK, you can contact the Information Commissioner's Office (ICO).
For any questions or concerns about our GDPR compliance or to exercise your data protection rights, please contact us at:
sienna-vale
Level 12, 45 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]