GDPR Compliance

Our Commitment to GDPR Compliance

Unswusfrac is committed to protecting your personal data and ensuring compliance with the General Data Protection Regulation (GDPR). This page outlines your rights under GDPR and explains how we fulfill our obligations as a data controller.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications
• Contract Performance: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request, free of charge for the first request.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We will make corrections within one month of your request and notify any third parties with whom we shared the data.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent on which processing is based and there is no other legal ground
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased for compliance with a legal obligation

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data when:

• You contest the accuracy of the data, for a period enabling us to verify accuracy
• Processing is unlawful and you oppose erasure, requesting restriction instead
• We no longer need the data, but you require it for legal claims
• You have objected to processing, pending verification of our legitimate grounds

Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data where:

• Processing is based on legitimate interests or the performance of a task in the public interest
• Your personal data is used for direct marketing purposes
• Your personal data is used for scientific or historical research or statistical purposes

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision-making that meets this threshold.

Data Protection Officer

While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact responsible for overseeing our data protection practices:

Privacy Contact
Email: [email protected]
Address: Level 7, 142 Flinders Street, Melbourne VIC 3000, Australia

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us using the information provided above. We will:

• Respond to your request without undue delay and within one month of receipt
• Provide information on action taken free of charge, unless requests are manifestly unfounded or excessive
• Verify your identity before processing your request to protect your personal data
• Inform you if we need to extend the response period by two additional months due to complexity

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We maintain procedures to detect, report, and investigate personal data breaches and will notify the relevant supervisory authority within 72 hours of becoming aware of a breach where required.

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing certain countries as providing adequate protection
• Binding Corporate Rules for transfers within corporate groups

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Our standard retention periods are:

• Client project data: 7 years following project completion
• Inquiry data (no contract entered): 2 years from last contact
• Marketing consent data: Until consent is withdrawn or 3 years of inactivity
• Financial records: As required by applicable tax and business laws

Children's Data

We do not knowingly process personal data of children under 16 years of age. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information promptly.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Information

We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, through direct notification.

Contact for GDPR Matters

For any questions, concerns, or requests related to GDPR compliance or your data protection rights:

Email: [email protected]
Address: Unswusfrac, Level 7, 142 Flinders Street, Melbourne VIC 3000, Australia