Last updated: January 2024
wandesnowc is committed to protecting the privacy and personal data of all individuals, including those residing in the European Union (EU) and European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR) and the rights afforded to data subjects under this regulation.
Our Role as Data Controller
wandesnowc acts as the data controller for personal data collected through our website and services. This means we determine the purposes and means of processing personal data and are responsible for ensuring compliance with applicable data protection laws.
Legal Basis for Processing
We process personal data under the following legal bases:
Consent
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or accepting non-essential cookies.
Contractual Necessity
Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract, such as when you register for our services.
Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided these interests are not overridden by your rights. Our legitimate interests include operating and improving our services, preventing fraud, and ensuring network security.
Legal Obligation
Where processing is necessary to comply with a legal obligation to which we are subject.
Your Rights Under GDPR
If you are located in the EU or EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and to verify that we are processing it lawfully.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected or if you withdraw consent.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, though this period may be extended by two further months if necessary, depending on the complexity of the request.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, but we may charge a reasonable fee if your request is clearly unfounded or excessive.
International Data Transfers
As we are based in Australia, any personal data transferred from the EU/EEA to us constitutes an international data transfer. We ensure that such transfers are made in compliance with GDPR requirements, including implementing appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary depending on the type of data and the purpose of processing. When personal data is no longer required, we securely delete or anonymise it.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to maintain effective protection.
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Supervisory Authority
If you are located in the EU or EEA and believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Contact Our Data Protection Team
For questions about GDPR compliance or to exercise your rights, please contact us at:
wandesnowc
Data Protection Enquiries
42 Harbour Street, Level 3
Sydney NSW 2000
Australia
Email: [email protected]
We aim to respond to all legitimate requests within one month.