Our Commitment to GDPR
Brave-swan recognises the importance of the General Data Protection Regulation (GDPR) and is committed to ensuring the protection of personal data belonging to individuals in the European Economic Area (EEA). This page provides additional information about how we comply with GDPR requirements.
Data Controller
Brave-swan acts as the data controller for personal information collected through this website. Our contact details are:
Brave-swan
Level 14, 123 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Consent
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications or submitting an enquiry form.
Contract
Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.
Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include:
- Operating and improving our website
- Understanding how visitors use our services
- Administering our business relationships
- Protecting our legal rights
Legal Obligation
Where processing is necessary to comply with a legal obligation to which we are subject.
Your Rights Under GDPR
As a data subject in the EEA, you have the following rights:
Right of Access
You have the right to obtain confirmation as to whether we process your personal data and, if so, to request access to that data along with supplementary information about how it is processed.
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including where:
- The data is no longer necessary for its original purpose
- You withdraw consent and no other legal basis applies
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of data or object to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where processing is based on consent or contract and carried out by automated means.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling. You also have the absolute right to object to processing for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently engage in such automated decision-making.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two further months where requests are complex or numerous.
We may ask you to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.
International Data Transfers
As we are based in Australia, your personal data may be transferred outside the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Transfers to countries with adequate data protection recognised by the European Commission
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy. When data is no longer required, we securely delete or anonymise it.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this is typically the data protection authority in your country of residence, place of work, or where the alleged infringement occurred.
Updates to This Information
We may update this GDPR compliance information periodically. We encourage you to review this page regularly for any changes.