Our Commitment to GDPR
lotus-stag respects the privacy rights of individuals in the European Economic Area (EEA) and is committed to handling personal data in compliance with the General Data Protection Regulation (GDPR). This page supplements our Privacy Policy with additional information relevant to EEA residents.
Data Controller
For the purposes of GDPR, lotus-stag acts as the data controller for personal information collected through this website. Our contact details are:
lotus-stag
Level 14, 225 George Street
Sydney NSW 2000, Australia
Email: [email protected]
Legal Basis for Processing
We process personal data from EEA residents on the following legal bases:
- Consent: When you submit an enquiry form, you consent to us processing your information to respond to your request.
- Contract: When you engage our services, we process information necessary to perform our contractual obligations.
- Legitimate Interests: We may process information for purposes such as improving our services and ensuring network security, where these interests are not overridden by your rights.
- Legal Obligation: We may process information to comply with applicable laws and regulations.
Your Rights Under GDPR
If you are an EEA resident, you have the following rights regarding your personal data:
Right of Access
You may request confirmation of whether we process your personal data and, if so, request access to that data along with information about how it is processed.
Right to Rectification
You may request that we correct inaccurate personal data or complete incomplete data we hold about you.
Right to Erasure
In certain circumstances, you may request that we delete your personal data. This right applies when the data is no longer necessary for its original purpose, you withdraw consent (where consent was the legal basis), or the data has been unlawfully processed.
Right to Restrict Processing
You may request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of disputed data.
Right to Data Portability
Where technically feasible, you may request to receive your personal data in a structured, commonly used, machine-readable format, and have it transmitted to another data controller.
Right to Object
You may object to processing based on legitimate interests, and we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
International Data Transfers
As lotus-stag is based in Australia, personal data from EEA residents is transferred outside the EEA. We ensure appropriate safeguards are in place for such transfers, including:
- Standard contractual clauses approved by the European Commission
- Ensuring recipients are bound by equivalent privacy obligations
- Relying on adequacy decisions where applicable
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the nature of the data and legal requirements. Upon request, we can provide information about retention periods applicable to your specific data.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month of receipt. This period may be extended by two months for complex requests, in which case we will inform you of the extension and the reasons for it.
We may request verification of your identity before processing certain requests to ensure we do not disclose information to unauthorised parties.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence.
Updates
We may update this GDPR information periodically. Any changes will be posted on this page with an updated effective date.