GDPR Compliance

Last updated: September 2024

This page provides information about how moor-heron complies with the General Data Protection Regulation (GDPR) for visitors and clients from the European Economic Area (EEA).

Data Controller

moor-heron acts as the data controller for personal information collected through this website. Our contact details are:

• Business Name: moor-heron
• Address: 47 Collins Street, Melbourne VIC 3000, Australia
• Email: [email protected]

Legal Basis for Processing

We process personal data from EEA residents based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are party
• Legitimate Interests: Where processing is necessary for our legitimate interests, except where such interests are overridden by your fundamental rights and freedoms
• Legal Compliance: Where processing is necessary for compliance with a legal obligation

Your Rights Under GDPR

If you are a resident of the EEA, you have the following data protection rights:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request that we correct inaccurate or incomplete information
• Right to Erasure: You can request that we delete your personal data in certain circumstances
• Right to Restrict Processing: You can request that we restrict the processing of your data
• Right to Data Portability: You can request to receive your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may need to extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

International Data Transfers

As we are based in Australia, any personal data collected from EEA residents will be transferred to and processed in Australia. We ensure that appropriate safeguards are in place for such transfers, including:

• Compliance with the Australian Privacy Act 1988
• Implementation of appropriate technical and organisational security measures
• Limitation of data access to authorised personnel only

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

Supervisory Authority

If you are an EEA resident and believe that we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities and their contact details is available at the European Data Protection Board website.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

For any questions or concerns regarding our GDPR compliance or to exercise your data protection rights, please contact us at:

• Email: [email protected]
• Address: 47 Collins Street, Melbourne VIC 3000, Australia