GDPR Compliance

Introduction

Although velvet-glen is based in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for our clients and website visitors in the European Union. This document outlines how we comply with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you explicitly agree to our processing activities
• Contract: When processing is necessary to fulfill our contractual obligations
• Legitimate Interests: When we have a legitimate business interest that doesn't override your rights
• Legal Obligation: When required by law

Your GDPR Rights

If you are located in the EU, you have the following rights:

Right to Access

You have the right to request copies of your personal data.

Right to Rectification

You have the right to request correction of inaccurate or incomplete information.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances.

Rights Related to Automated Decision Making

You have the right not to be subject to automated decision-making, including profiling.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Service delivery and customer support
• Legal and regulatory compliance
• Dispute resolution

When data is no longer needed, we securely delete or anonymize it.

International Data Transfers

As an Australian-based company, your data may be transferred outside the EU. We ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at:

Email: [email protected]

Supervisory Authority

If you are located in the EU and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: Level 12, 347 Kent Street, Sydney NSW 2000, Australia

We will respond to your request within 30 days.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Changes will be posted on this page with an updated revision date.