GDPR Compliance
Our commitment to protecting the data rights of European Union residents.
Last Updated: January 2024
Our Commitment to GDPR
Although maroon-cloud is based in Australia, we are committed to protecting the privacy rights of all individuals, including those covered by the General Data Protection Regulation (GDPR). This page outlines how we handle personal data in compliance with GDPR requirements for residents of the European Economic Area (EEA).
Data Controller
maroon-cloud acts as the data controller for personal information collected through this website and our business operations. For enquiries regarding your data:
maroon-cloud
42 Workshop Lane
Fortitude Valley QLD 4006
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data under one or more of the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you
- Legal Obligation: Where processing is necessary to comply with legal requirements
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You may request confirmation as to whether we process your personal data and, if so, obtain access to that data along with information about how it is processed.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is not absolute and may be subject to legal retention requirements.
Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data.
Right to Data Portability
Where technically feasible, you may request to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data and the purposes for processing.
International Data Transfers
As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where data is transferred to other countries, we implement appropriate safeguards such as standard contractual clauses.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption of data in transit, secure storage systems, and access controls.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
We may request verification of your identity before processing your request to ensure the security of your personal data.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
Updates to This Notice
We may update this GDPR notice from time to time. Material changes will be communicated through our website or by other appropriate means.