Your Data Protection Rights
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organisations processing personal data of individuals located in the European Union (EU) and European Economic Area (EEA).
Although Aura-rhythm is based in Australia, we are committed to respecting the data protection rights of all our users, including those protected by GDPR.
For the purposes of GDPR, Aura-rhythm acts as the data controller for personal information collected through our website and services. Our contact details are:
Aura-rhythm
142 Flinders Lane
Melbourne VIC 3000
Australia
Email: [email protected]
We process your personal data based on one or more of the following legal grounds:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information free of charge within one month of receiving your request.
You have the right to request that we correct any inaccurate personal information we hold about you, or complete any incomplete information.
Also known as the "right to be forgotten," you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you. We do not engage in automated decision-making.
To exercise any of the rights described above, please contact us at [email protected]. We will respond to your request within one month. If your request is complex, we may extend this period by up to two additional months, but we will inform you of any extension within the first month.
We may need to verify your identity before processing your request. If we cannot verify your identity, we may request additional information.
As we are based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. However, we implement appropriate safeguards to protect your data, including:
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining retention periods, we consider:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, providing information about the nature of the breach and the measures taken to address it.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.
We may update this GDPR information from time to time. Any changes will be posted on this page.