Our commitment to European data protection standards
Last Updated: November 2024
Solecspiro respects the privacy rights of individuals in the European Economic Area (EEA) and United Kingdom. This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this legislation.
Solecspiro acts as the data controller for personal information collected through our website and services. Our contact details are:
Solecspiro
42 Broadcast Lane
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data under the following legal bases:
When you submit contact forms or request services, you provide consent for us to process your information for those specific purposes. You may withdraw consent at any time by contacting us.
When you engage our research services, we process data as necessary to fulfil our contractual obligations to you.
We may process data for legitimate business interests, such as improving our services and maintaining website security, where such interests do not override your fundamental rights and freedoms.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of your request.
You have the right to request correction of any inaccurate or incomplete personal information we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You have the right to request that we limit how we use your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit this data to another controller.
You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
We do not engage in automated decision-making or profiling that produces legal effects concerning you.
As we are based in Australia, personal data collected from EEA or UK residents may be transferred outside the EEA. We implement appropriate safeguards to protect such transfers, including standard contractual clauses approved by the European Commission where applicable.
We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary based on the nature of the data and our legal obligations. When data is no longer required, it is securely deleted or anonymised.
We implement technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These measures are regularly reviewed and updated as appropriate.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.