Last Updated: November 2024
Sky-osprey is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws. This page outlines our approach to GDPR compliance for visitors from the European Economic Area (EEA).
Our Role Under GDPR
Sky-osprey acts as a data controller for personal information collected through our website and service enquiries. We determine the purposes and means of processing personal data and are responsible for ensuring that processing activities comply with applicable data protection laws.
Lawful Bases for Processing
We process personal data under the following lawful bases:
Consent
Where you have given clear consent for us to process your personal data for specific purposes, such as:
- Subscribing to newsletters or marketing communications
- Using non-essential cookies
Contract
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, such as:
- Processing service enquiries and bookings
- Delivering requested geographic consultation services
Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests, such as:
- Improving our website and services
- Analysing website usage patterns
- Protecting against fraud and security threats
Legal Obligation
Where processing is necessary to comply with legal obligations, such as:
- Maintaining business records
- Responding to legal requests
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
Right to Withdraw Consent
Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates GDPR.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month of receipt. In some cases, we may need to verify your identity before processing your request.
There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive.
International Data Transfers
As Sky-osprey is based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. Where we transfer personal data outside the EEA, we implement appropriate safeguards to ensure that your personal data remains protected.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Data Protection Contact
For any questions or concerns about our GDPR compliance or to exercise your data protection rights, please contact us at:
Sky-osprey
Data Protection Enquiries
Level 8, 227 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
Updates to This Notice
We may update this GDPR compliance notice from time to time. We will notify you of any significant changes by posting the new notice on our website and updating the "Last Updated" date.