GDPR Compliance
This page outlines how ocean-bear complies with the General Data Protection Regulation (GDPR) for users accessing our website from the European Economic Area and other applicable jurisdictions.
Data Controller
Ocean-bear acts as the data controller for personal information collected through this website. We determine the purposes and means of processing personal data in accordance with applicable data protection laws.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you voluntarily submit information through our contact forms or quote request forms
- Legitimate Interests: To respond to enquiries and provide requested information about our services
- Contractual Necessity: When processing is necessary to fulfil a service agreement
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
International Data Transfers
Your personal data may be transferred to and processed in Australia, where our business operates. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, typically no longer than 24 months from your last interaction with us, unless a longer retention period is required by law.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within 30 days. We may request verification of your identity before processing your request.
Complaints
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
Last updated: August 2024