GDPR Compliance
Your data protection rights under the General Data Protection Regulation
Overview
The General Data Protection Regulation (GDPR) is a European Union regulation that governs the collection, processing, and storage of personal data. Although BuckbridjxProAI is based in Australia, we are committed to protecting the privacy of all users, including those in the European Economic Area (EEA).
This page outlines your rights under GDPR and how we comply with its requirements.
Data Controller
BuckbridjxProAI acts as the data controller for personal information collected through our website and services. As the data controller, we determine the purposes and means of processing your personal data.
Contact details:
BuckbridjxProAI
Level 14, 225 George Street
Sydney NSW 2000, Australia
Email: [email protected]
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legitimate interests: Processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms
- Legal obligation: Processing is necessary for compliance with a legal obligation
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you
- Right to rectification: You can request that we correct any inaccurate or incomplete personal data
- Right to erasure: You can request that we delete your personal data under certain circumstances
- Right to restrict processing: You can request that we limit how we use your data
- Right to data portability: You can request to receive your data in a structured, commonly used format
- Right to object: You can object to certain types of processing, including direct marketing
- Rights related to automated decision-making: You have rights related to automated decision-making and profiling
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR. In certain circumstances, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, although we may charge a reasonable fee if your request is manifestly unfounded or excessive.
International Data Transfers
As we are based in Australia, your data may be transferred to and processed in a country outside the EEA. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, including:
- Standard contractual clauses approved by the European Commission
- Transfers to countries with adequacy decisions
- Other appropriate safeguards as required by GDPR
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Secure access controls and authentication
- Regular security assessments and testing
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible.
Complaints
If you believe we have not handled your personal data properly or have not addressed your concerns satisfactorily, you have the right to lodge a complaint with a supervisory authority. For residents of the EEA, this would be the data protection authority in your country of residence.
We would, however, appreciate the opportunity to address your concerns directly. Please contact us at [email protected] in the first instance.
Updates to This Policy
We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the revision date.