GDPR Compliance

Your data protection rights under the General Data Protection Regulation

Introduction

While Neon Vale is based in Australia, we respect the data protection rights of all individuals, including those protected by the European Union's General Data Protection Regulation (GDPR). This page outlines your rights and how we comply with GDPR principles when processing personal data of EU residents.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent for us to process your data
  • Contract: When processing is necessary to fulfill our service obligations
  • Legitimate Interest: When we have a legitimate business interest that doesn't override your rights
  • Legal Obligation: When required to comply with applicable laws

Your GDPR Rights

If you are an EU resident, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal information.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances, particularly for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not engage in automated decision-making or profiling.

Data Protection Officer

For GDPR-related inquiries, please contact our Data Protection Officer:

Email: [email protected]

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Service delivery and customer support
  • Legal and regulatory compliance
  • Dispute resolution

Client session data is typically retained for 7 years in accordance with Australian record-keeping requirements.

Data Transfers

Your personal data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place when transferring data outside the EU, including:

  • Standard Contractual Clauses approved by the European Commission
  • Ensuring adequate levels of data protection

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection

Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Subject line: "GDPR Request"

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you accordingly.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Changes will be posted on this page with an updated date.