Last updated: October 2024
Velvet-hollow is committed to protecting the personal data of all individuals, including those covered by the General Data Protection Regulation (GDPR). This page outlines our compliance with GDPR requirements for visitors and customers from the European Economic Area (EEA).
Velvet-hollow acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing personal data.
Contact details:
Velvet-hollow
147 Brunswick Street
Fitzroy VIC 3065
Australia
Email: [email protected]
We process personal data under the following legal bases as defined by GDPR:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you.
You have the right to request that we correct any inaccurate or incomplete personal data.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
As we are based in Australia, any personal data collected from EEA residents may be transferred to and processed in Australia. Australia is not currently subject to an adequacy decision by the European Commission. We implement appropriate safeguards, including standard contractual clauses, to ensure your data is protected in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on the type of data and the purpose of processing:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. If you are located in the EEA, you may contact your local data protection authority.
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.