Your data protection rights
Mist-sparrow is committed to protecting the privacy and security of your personal data. This page outlines how we comply with the General Data Protection Regulation (GDPR) and the rights you have regarding your personal information.
Under the GDPR, you have several rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
We process personal data on the following legal bases:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.
If we transfer your personal data outside of Australia or the European Economic Area, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by relevant authorities.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, but we will inform you of any extension within the first month.
If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with a supervisory authority. In Australia, you can contact the Office of the Australian Information Commissioner (OAIC).
For any data protection enquiries or to exercise your rights, please contact us at [email protected]
Address: Level 12, 345 George Street, Sydney, NSW 2000, Australia