Data protection rights for European visitors
Last updated: January 2024
The General Data Protection Regulation (GDPR) is a European Union regulation that strengthens data protection for individuals within the EU and European Economic Area. While canopy-oryx is an Australian company primarily serving Australian customers, we are committed to protecting the privacy of all visitors to our website, including those from the EU.
This page provides additional information relevant to EU visitors about how we handle personal data in accordance with GDPR principles.
For the purposes of GDPR, the data controller responsible for your personal data is:
canopy-oryx
42 Greenway Circuit
Fortitude Valley QLD 4006
Australia
Email: [email protected]
We process personal data under the following legal bases:
Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to communications or accepting non-essential cookies.
Where processing is necessary for the performance of a contract with you, such as providing requested services or responding to enquiries.
Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms. This includes improving our services and website functionality.
Where processing is necessary to comply with a legal obligation to which we are subject.
If you are located in the European Union or European Economic Area, you have the following data protection rights:
You have the right to request copies of your personal data. We may charge a small fee for this service if the request is manifestly unfounded or excessive.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data, under certain conditions. This right is not absolute and may be subject to exceptions.
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to object to our processing of your personal data, under certain conditions, particularly where we rely on legitimate interests as the legal basis.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Where you have provided consent for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of your data protection rights, please contact us using the details provided above. We will respond to your request within one month. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests.
We may need to verify your identity before processing your request. If we cannot verify your identity, we may request additional information from you.
As an Australian company, any personal data you provide may be transferred to and processed in Australia. Australia is not considered by the European Commission to provide an adequate level of protection for personal data. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your personal data.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes. When personal data is no longer required, we securely delete or anonymise it.
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can take appropriate action.
If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence, place of work, or where an alleged infringement occurred.
A list of EU data protection authorities can be found at: edpb.europa.eu
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
If you have any questions about this GDPR information or our data protection practices, please contact us:
canopy-oryx
42 Greenway Circuit
Fortitude Valley QLD 4006
Australia
Email: [email protected]