Information for visitors from the European Economic Area
Last updated: January 2024
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data of individuals in the European Economic Area (EEA). Although bamboo-whale is based in Australia, we are committed to respecting the privacy rights of all our website visitors, including those protected by the GDPR.
For the purposes of the GDPR, bamboo-whale is the data controller for personal information collected through this website. Our contact details are:
bamboo-whale
Level 4, 287 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
When we process personal data of individuals in the EEA, we rely on the following legal bases:
Consent: Where you have provided explicit consent for us to process your data for specific purposes, such as receiving marketing communications.
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms. Our legitimate interests include:
Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
Right to Erasure: You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
We may refuse requests that are manifestly unfounded or excessive, or that would require disproportionate effort or adversely affect the privacy of others.
As bamboo-whale is based in Australia, personal data collected from EEA visitors may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission; however, we implement appropriate safeguards to protect personal data transferred outside the EEA, including:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period may vary depending on the context and our legal obligations. When personal data is no longer required, we securely delete or anonymise it.
If you are located in the EEA and believe that we have violated your data protection rights, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA data protection authorities is available on the European Commission website.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.
For questions about GDPR compliance or to exercise your data protection rights, please contact us at:
Email: [email protected]
Address: Level 4, 287 Collins Street, Melbourne VIC 3000, Australia