Our Commitment to Data Protection
Although Sunny Crag operates in Australia, we recognise that some of our website visitors and clients may be located in the European Union. We are committed to protecting the personal data of all individuals in accordance with the General Data Protection Regulation (GDPR) where applicable.
Data Controller Information
For the purposes of data protection law, Sunny Crag is the data controller responsible for your personal information. Our contact details are:
Sunny Crag
42 Greenleaf Lane
Collingwood VIC 3066
Australia
Email: [email protected]
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it. We will provide this information free of charge within one month of your request.
Right to Rectification
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure
Also known as the "right to be forgotten", you may request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or where we process your data based on our legitimate interests.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
Legal Basis for Processing
We process personal data of EU residents based on one or more of the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you
- Legal obligation: Where processing is necessary for compliance with a legal obligation
- Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests
International Data Transfers
As we are located in Australia, your personal data may be transferred to and processed in Australia. Australia is not considered to have an adequacy decision from the European Commission. However, we implement appropriate safeguards to ensure your data is protected, including standard contractual clauses approved by the European Commission where applicable.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you are not satisfied with our response or believe we are processing your data unlawfully, you have the right to lodge a complaint with a supervisory authority in your country of residence.
Changes to This Notice
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.