Introduction
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. While Sunny-oak is based in Australia, we are committed to respecting the privacy rights of all individuals, including those protected under GDPR.
This page outlines how we comply with GDPR requirements for visitors from the European Economic Area (EEA) and the United Kingdom.
Data Controller
Sunny-oak is the data controller responsible for your personal data collected through this website.
Contact details:
Sunny-oak
142 Greenfield Avenue
Sydney NSW 2000
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary to perform a contract with you or take steps to enter into a contract
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these do not override your fundamental rights
- Legal Obligation: Where processing is necessary to comply with a legal obligation
Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you without undue delay.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent to process your data, you have the right to withdraw that consent at any time.
Exercising Your Rights
To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to extend this period by up to two months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. There is no fee for exercising your rights, except in cases of manifestly unfounded or excessive requests.
International Data Transfers
As Sunny-oak is based in Australia, any personal data we collect may be transferred to and stored in Australia. Australia is not currently subject to an adequacy decision by the European Commission.
Where we transfer data outside the EEA, we will ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period may vary depending on the context of the processing and our legal obligations.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence. For UK residents, this would be the Information Commissioner's Office (ICO).
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.