deft-forest

Last Updated: January 2024

Introduction

The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on 25 May 2018. While deft-forest is based in Australia, we are committed to protecting the privacy rights of all our website visitors, including those from the European Economic Area (EEA).

This page outlines how we comply with GDPR requirements for individuals located in the EEA.

Data Controller

For the purposes of GDPR, deft-forest is the data controller for personal information collected through this website. Our contact details are:

deft-forest
47 Industrial Drive
Dandenong South VIC 3175
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent

Where you have provided clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.

Contractual Necessity

Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (such as providing quotations).

Legitimate Interests

Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms. This includes improving our services and website functionality.

Legal Obligation

Where we are required to process data to comply with legal or regulatory obligations.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In some cases, we may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your country of residence.

International Data Transfers

As deft-forest is based in Australia, personal data collected from EEA residents may be transferred to and stored in Australia. Australia is not subject to an adequacy decision by the European Commission.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, which may include:

Standard contractual clauses approved by the European Commission
Ensuring the recipient is certified under an approved certification mechanism
Where applicable, relying on your explicit consent

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our obligations.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to ensure ongoing security.

Cookies and Tracking

We use cookies and similar technologies on our website. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookies Policy.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Contact

For questions about GDPR compliance or to exercise your rights, please contact: