Last updated: November 2024
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data of individuals within the EU. Although Bisecappet is based in Australia, we are committed to protecting the privacy of all our users, including those in the European Economic Area (EEA).
This page outlines how we comply with GDPR requirements when processing personal data of EU residents who access our website and services.
For the purposes of GDPR, the data controller responsible for your personal data is:
Bisecappet
42 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data of EU residents only when we have a valid legal basis to do so. These legal bases include:
If you are an EU resident, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and to verify that we are lawfully processing it.
You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis for processing.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In certain circumstances, this period may be extended by two further months where necessary, taking into account the complexity and number of requests.
There is no fee for making a request. However, if your request is clearly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.
As we are based in Australia, your personal data may be transferred outside the EEA. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, which may include:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. When determining retention periods, we consider:
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us in the first instance.
For any questions regarding this GDPR information or to exercise your rights, please contact:
Bisecappet
42 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]