GDPR Information

Last Updated: November 13, 2024

Introduction

This page provides information about how Dundeunifi complies with the General Data Protection Regulation (GDPR) and explains your rights regarding the personal data we collect and process.

While Dundeunifi is based in Australia, we respect the privacy rights of all individuals, including those in the European Union, and we have implemented measures to comply with GDPR requirements when processing personal data of EU residents.

Data Controller

For the purposes of GDPR, the data controller is:

Dundeunifi
142 Flinders Street
Melbourne VIC 3000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services, unless such interests are overridden by your rights and freedoms.
• Legal Obligation: When processing is necessary to comply with legal obligations to which we are subject.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you, or to complete any incomplete personal data.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, particularly when processing is based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected] with the subject line "GDPR Request".

Please include the following information in your request:

• Your full name
• Your email address
• A description of the right you wish to exercise
• Any relevant details or documentation to verify your identity

We will respond to your request within one month of receipt. In certain cases, we may extend this period by an additional two months if the request is complex or we receive multiple requests from you.

Data Processing and Storage

Data Collection

We collect personal data that you voluntarily provide when you:

• Submit inquiry forms or contact forms
• Request information about our services
• Subscribe to our communications
• Communicate with us via email

Data Storage

Your personal data may be stored on servers located in Australia or other countries. When we transfer personal data outside the European Economic Area, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection

Third-Party Processing

We may share your personal data with third-party service providers who process data on our behalf for purposes such as website hosting, email services, and analytics. We ensure that all third-party processors comply with GDPR requirements and have appropriate data protection agreements in place.

We do not sell or rent your personal data to third parties for their marketing purposes.

Cookies and Tracking

We use cookies and similar technologies on our website. For detailed information about our use of cookies and how to manage your cookie preferences, please see our Cookies Policy.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting a notice on our website or by contacting you directly.

Contact Us

If you have any questions or concerns about our GDPR compliance or our data protection practices, please contact us at:

Dundeunifi
142 Flinders Street
Melbourne VIC 3000
Australia
Email: [email protected]