Our Commitment to Data Protection
keen-elm is committed to protecting the privacy and security of your personal data. We recognise the importance of data protection and adhere to applicable privacy laws and regulations, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA).
Data Controller
keen-elm acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
keen-elm
42 Greenfield Avenue
Sydney, NSW 2000
Australia
Email: [email protected]
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
- Legal Obligation: Where processing is necessary for compliance with a legal obligation
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.
Right to Rectification
You have the right to request that we correct any personal data that is inaccurate or incomplete. We will respond to such requests within one month.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, including:
- When the data is no longer necessary for the purpose it was collected
- When you withdraw consent and there is no other legal basis for processing
- When you object to processing and there are no overriding legitimate grounds
- When the data has been unlawfully processed
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you do not want us to delete it.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes or processing based on legitimate interests.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
Please note that these rights are not absolute and may be subject to limitations under applicable law. We will inform you if any exemptions apply to your request.
Data Transfers
As we are based in Australia, any personal data you provide may be transferred to and processed in Australia. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The retention period depends on the nature of the data and the purpose of processing. When data is no longer needed, we securely delete or anonymise it.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication procedures
- Regular security assessments and updates
- Staff training on data protection practices
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For individuals in the EEA, this would be the data protection authority in your country of residence.
Updates to This Notice
We may update this GDPR compliance notice from time to time. We will post any changes on this page and update the effective date. We encourage you to review this notice periodically.
Contact Us
For any questions or concerns about our GDPR compliance or to exercise your rights, please contact us at:
keen-elm
42 Greenfield Avenue
Sydney, NSW 2000
Australia
Email: [email protected]