Our Commitment to GDPR
crag-lumen is committed to protecting the personal data of all visitors, including those residing in the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and the rights it affords you.
Data Controller
crag-lumen acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.
Contact details:
crag-lumen
Level 12, 88 George Street
Sydney NSW 2000
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you subscribe to our newsletter or submit a contact form, you provide consent for us to process your data for the specified purpose.
- Legitimate Interest: We may process data for website analytics and security purposes based on our legitimate business interests, where these do not override your rights.
- Contractual Necessity: When you engage our advertising services, we process data necessary to fulfil our contractual obligations.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights concerning your personal data:
Right of Access
You have the right to request copies of your personal data that we hold. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for its original purpose.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as while we verify the accuracy of contested data.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion.
International Data Transfers
As we are based in Australia, data may be transferred outside the EEA. When this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of the rights described above, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this period may be extended by two further months, and we will inform you if this is necessary.
Complaints
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Any significant changes will be communicated through our website.