GDPR Information

Introduction

While merry-storm is an Australian-based organization primarily subject to the Privacy Act 1988, we recognize that some of our users may be located in the European Union. This page explains how we approach data protection principles consistent with the General Data Protection Regulation.

Data Controller

For the purposes of data protection legislation, merry-storm is the data controller responsible for your personal information.

Contact: [email protected]
Address: Level 12, 485 La Trobe Street, Melbourne VIC 3000, Australia

Legal Basis for Processing

When we process personal data of EU residents, we do so based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Legitimate interests: Processing is necessary for our legitimate business interests, such as responding to inquiries and improving our services
• Legal obligation: Processing is necessary to comply with applicable laws

Your Rights Under GDPR

If you are located in the European Union, you have the following rights regarding your personal data:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another organization or directly to you
• Right to object: Object to processing of your personal data under certain circumstances
• Rights related to automated decision-making: We do not use automated decision-making or profiling

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods depend on the nature of the data and the purpose of processing.

International Data Transfers

Personal data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place when transferring data internationally.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority in the EU.

Changes to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]
Address: Level 12, 485 La Trobe Street, Melbourne VIC 3000, Australia

We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months.