GDPR Information

About GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

While thiolstreg is based in Australia, we are committed to protecting the data of all our website visitors and customers, including those located in the European Union. This page outlines the rights available to individuals under GDPR and how we handle personal data.

Your Rights Under GDPR

If you are a resident of the European Economic Area, you have the following data protection rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

Lawful Bases for Processing

Under GDPR, we must have a lawful basis for processing your personal data. The lawful bases we rely on are:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Data We Collect

The personal data we may collect includes:

• Identity data such as name
• Contact data such as email address and postal address
• Technical data such as IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• Usage data such as information about how you use our website and services
• Property information you provide for service assessments

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, and the applicable legal requirements.

International Transfers

As our business is based in Australia, your personal data may be transferred to and processed in Australia. If you are located in the European Economic Area, please be aware that Australia may not have the same data protection laws as your country.

We take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

Exercising Your Rights

If you wish to exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. We may need to verify your identity before processing your request.

You will not have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

Complaints

You have the right to lodge a complaint with a supervisory authority if you believe that we have not complied with the requirements of GDPR with regard to your personal data.

Contact Information

For any questions about this GDPR information page or to exercise your data protection rights, please contact us at:

thiolstreg
45 Solar Way, Richmond
Melbourne, VIC 3121
Australia

Email: [email protected]