GDPR Compliance

Last updated: September 2024

Snow-Stag is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements for individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland.

Data Controller

Snow-Stag acts as the data controller for personal data collected through this website. Our contact details are:

Snow-Stag
Level 12, 180 George Street
Sydney, NSW 2000
Australia
Email: [email protected]

Legal Bases for Processing

We process personal data under the following legal bases as defined by GDPR:

• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.
• Legal Obligation (Article 6(1)(c)): Where processing is necessary for compliance with a legal obligation to which we are subject.

Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of Access (Article 15): You have the right to obtain confirmation of whether we process your personal data and to access that data.
• Right to Rectification (Article 16): You have the right to have inaccurate personal data corrected without undue delay.
• Right to Erasure (Article 17): You have the right to have your personal data erased in certain circumstances, also known as the "right to be forgotten."
• Right to Restriction (Article 18): You have the right to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the right to object to the processing of your personal data for direct marketing purposes or based on legitimate interests.
• Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

International Data Transfers

As we are based in Australia, your personal data may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing adequate protection for personal data. For transfers to other countries without adequacy decisions, we implement appropriate safeguards such as Standard Contractual Clauses.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to establish, exercise, or defend legal claims. Specific retention periods vary based on the type of data and purpose of processing.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Data Protection Officer

For any questions or concerns regarding our GDPR compliance or data protection practices, please contact us at [email protected].

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in the EEA member state of your habitual residence, place of work, or place of the alleged infringement if you believe that our processing of your personal data violates the GDPR.

Changes to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.