GDPR Information
Your rights under the General Data Protection Regulation
While Nonhetessa operates primarily in Australia, we recognize and respect the data protection rights of individuals in the European Economic Area. This page outlines how we comply with GDPR principles when processing personal data of EU residents.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit an inquiry form, you provide explicit consent for us to process your personal information to respond to your request
- Legitimate Interests: We may process data to improve our services, maintain security, and analyze website usage patterns, provided such processing does not override your fundamental rights
- Legal Obligation: We may process data when required by applicable laws or regulations
Your GDPR Rights
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for processing based on legitimate interests.
Right to Data Portability
You have the right to request transfer of your personal data to another organization or directly to you, under certain conditions.
Data Transfers
Your personal data is primarily stored and processed in Australia. If data is transferred outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Protection Officer
For GDPR-related inquiries, you may contact our data protection contact at [email protected]. We will respond to your request within one month of receipt.
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates GDPR.
Exercising Your Rights
To exercise any of your GDPR rights, please send a detailed request to [email protected]. Include the following information:
- Your full name and contact information
- Description of the specific right you wish to exercise
- Any relevant details that will help us locate your personal data
We may request additional information to verify your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized parties.
Automated Decision Making
We do not use automated decision-making or profiling in ways that produce legal effects or similarly significantly affect you.