GDPR Compliance
Information for visitors from the European Economic Area
Overview
Although moon-condor is based in Australia, we are committed to protecting the privacy rights of all visitors, including those from the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.
Data Controller
moon-condor acts as the data controller for personal information collected through this website. For enquiries regarding your data, contact us at [email protected].
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit an enquiry form, you consent to us processing your data for the purpose of responding to your request
- Legitimate Interests: We may process data for our legitimate business interests, such as improving our services and website functionality, provided these do not override your rights
- Legal Obligation: We may process data to comply with applicable laws and regulations
Your Rights Under GDPR
If you are located in the EEA, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data under certain circumstances
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another organisation
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
International Data Transfers
As we are based in Australia, data collected from EEA visitors is transferred to Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. We also implement appropriate safeguards including standard contractual clauses where necessary.
Data Retention
We retain personal data only for as long as necessary for the purposes described in our Privacy Policy. Enquiry data is typically retained for three years from last contact, after which it is securely deleted.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Data Protection Officer
Given the nature and scale of our data processing activities, we have not appointed a formal Data Protection Officer. However, all privacy enquiries can be directed to [email protected].
Supervisory Authority
If you are located in the EEA and believe we have not addressed your concerns satisfactorily, you have the right to lodge a complaint with your local data protection supervisory authority.
Contact
For any GDPR-related enquiries or to exercise your rights, please contact:
Email: [email protected]
Address: Level 12, 45 Collins Street, Melbourne VIC 3000, Australia
We aim to respond to all legitimate requests within 30 days.