GDPR Compliance
Information for European Union residents regarding data protection rights
Last updated: September 2024
This page provides additional information for individuals located in the European Economic Area (EEA) regarding the processing of personal data under the General Data Protection Regulation (GDPR).
Data Controller
agile-moor acts as the data controller for personal data collected through our website and services. Our contact details are:
agile-moor
Level 12, 88 Pitt Street
Sydney, NSW 2000
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Contract Performance: Processing necessary to provide services you have requested
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your fundamental rights
- Legal Obligation: Processing required to comply with applicable laws
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to obtain confirmation as to whether your personal data is being processed and, if so, to access that data along with information about how it is being used.
Right to Rectification
You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restriction of Processing
You have the right to request that we limit how we use your data while a complaint is being investigated or verified.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
International Data Transfers
As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for such transfers, including:
- Standard contractual clauses approved by the European Commission
- Ensuring recipients maintain adequate data protection standards
- Obtaining your explicit consent where required
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods include:
- Service documentation: 3 years from service completion
- Communication records: 2 years from last contact
- Website analytics data: 26 months
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by a further two months, in which case we will notify you.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.
Updates to This Notice
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.