Last updated: January 2024
Our Commitment to Data Protection
cypress cypress is committed to ensuring that your privacy is protected in accordance with the General Data Protection Regulation (GDPR) and the Australian Privacy Principles. This page outlines how we comply with data protection requirements and explains your rights regarding your personal data.
Data Controller
cypress cypress is the data controller for personal information collected through this website. Our contact details are:
cypress cypress
47 Artisan Way
Ballarat, VIC 3350
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for a contract we have with you or to take steps at your request before entering into a contract
- Legal Obligation: Where processing is necessary to comply with legal requirements
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless overridden by your interests or fundamental rights
Your Rights Under GDPR
If you are a resident of the European Economic Area, you have the following rights:
Right of Access
You have the right to request a copy of the personal information we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any personal information that is inaccurate or incomplete. We will respond to your request within one month.
Right to Erasure
You have the right to request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you do not want the data erased.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from us.
Right to Object
You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes. Upon objection, we will cease processing unless we can demonstrate compelling legitimate grounds for the processing.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex or you have made multiple requests.
International Data Transfers
Your personal information may be transferred to and processed in countries outside of the European Economic Area. Where this occurs, we ensure that appropriate safeguards are in place to protect your personal information and that all transfers comply with applicable data protection law.
Data Security
We have implemented appropriate technical and organisational measures to secure your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected. Retention periods are determined based on the nature of the data, our legitimate business needs, and applicable legal requirements.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence. For Australian residents, you may contact the Office of the Australian Information Commissioner.
Changes to This Policy
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.