Information for European Union residents regarding data protection
Last Updated: January 2024
This page provides additional information for individuals located in the European Economic Area (EEA) regarding their rights under the General Data Protection Regulation (GDPR). This supplements our main Privacy Policy.
gorge-heron acts as the data controller for personal information collected through this website and in connection with our heritage conservation services.
Contact details:
gorge-heron
42 Heritage Lane
Brisbane QLD 4000
Australia
Email: [email protected]
We process personal data under the following legal bases:
Where you have provided explicit consent for specific processing activities, such as receiving marketing communications or participation in research projects.
Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract, such as processing service inquiries and delivering conservation services.
Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights. This includes improving our services, maintaining security, and conducting internal research.
Where processing is necessary to comply with legal obligations, such as financial record-keeping and responding to lawful requests from authorities.
If you are located in the EEA, you have the following rights regarding your personal data:
You may request a copy of the personal data we hold about you, along with information about how we process it.
You may request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You may request that we restrict processing of your data in certain circumstances, such as when you contest the accuracy of the data.
Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. For any transfers to other countries, we implement appropriate safeguards such as standard contractual clauses.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. Conservation documentation may be retained indefinitely as part of standard heritage sector archival practices, given the long-term significance of such records.
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended for complex requests. We may request verification of your identity before processing your request.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. For EEA residents, you may contact the data protection authority in your country of residence.
We may update this GDPR notice periodically. Material changes will be communicated through our website or directly where appropriate.