GDPR Compliance

Overview

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although khaki-moss operates primarily in Australia, we are committed to providing GDPR-level protections to all users of our website regardless of location.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given explicit consent for us to process your data for specific purposes
• Contractual necessity: Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights and freedoms
• Legal obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as while we verify the accuracy of contested data.

Right to Object to Processing

You have the right to object to our processing of your personal data under certain conditions, particularly where we rely on legitimate interests as our lawful basis.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Data Transfers

As an Australian organisation, personal data collected from EU residents may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data during such transfers, including standard contractual clauses approved by the European Commission.

Data Protection Officer

While we are not required under GDPR to appoint a Data Protection Officer, we have designated a privacy coordinator responsible for overseeing data protection matters. You may contact this person for any GDPR-related enquiries.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at:

Email: [email protected]
Address: Level 4, 287 Collins Street, Melbourne VIC 3000, Australia

We will respond to your request within one month of receiving it. In complex cases, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.