GDPR Compliance

Last updated: 1 January 2024

Although turquoise-branch is based in Australia, we are committed to protecting the privacy of all our website visitors, including those from the European Union. This page outlines how we comply with the General Data Protection Regulation (GDPR) for EU residents.

Data Controller

turquoise-branch is the data controller for personal information collected through this website. Our contact details are:

Email: [email protected]
Address: 142 Parramatta Road, Annandale NSW 2038, Australia

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a contact form or subscribe to communications, you provide explicit consent for us to process your data for the stated purpose.
• Contractual Necessity: When you engage our services, we process data necessary to fulfil our contractual obligations.
• Legitimate Interests: We may process data for legitimate business purposes, such as improving our website and services, provided this does not override your rights.

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds

Right to Restrict Processing

You have the right to request that we limit how we use your personal data while we address your concerns about accuracy or our legal basis for processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, but we will inform you of any delay.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods are:

• Enquiry data: 2 years from last contact
• Customer data: 7 years after project completion (for legal and warranty purposes)
• Marketing data: Until consent is withdrawn

International Data Transfers

As we are based in Australia, data may be transferred to and processed in Australia. Australia has been granted adequacy status by the European Commission for transfers of personal data from the EU.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Contact Us

For any questions about GDPR or to exercise your rights, please contact:

Email: [email protected]
Address: 142 Parramatta Road, Annandale NSW 2038, Australia