Last updated: January 2024
Our Commitment to GDPR
solar-tundra is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) for individuals within the European Economic Area (EEA). This page outlines how we comply with GDPR requirements and details your rights under this regulation.
Data Controller
solar-tundra acts as the data controller for personal information collected through our website and in connection with our photography services. For enquiries regarding data protection, please contact us using the details provided at the end of this page.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you submit enquiry forms or subscribe to communications, you provide explicit consent for us to process your data for the stated purposes.
- Contractual Necessity: Processing required to fulfil our photography service agreements with you.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website security, where these interests do not override your fundamental rights.
- Legal Obligation: Processing required to comply with applicable laws and regulations.
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently use automated decision-making processes.
International Data Transfers
We primarily store and process personal data within Australia. If we transfer personal data outside Australia or the EEA, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses or adequacy decisions.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods include:
- Enquiry data: Two years from last contact
- Client project data: Seven years for legal and accounting purposes
- Marketing consent records: Until consent is withdrawn
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where appropriate, notify affected individuals without undue delay.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
solar-tundra
Level 12, 456 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, in which case we will inform you of the extension.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.