GDPR Compliance

cypress-rhythm is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page provides additional information for users located in the European Economic Area (EEA).

Data Controller

cypress-rhythm acts as the data controller for personal information collected through this website. Our contact details are:

cypress-rhythm
Suite 412, 88 George Street
Sydney NSW 2000
Australia
[email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given explicit consent for processing, such as subscribing to our newsletter or accepting cookies
• Contract: Where processing is necessary to perform a contract with you or to take steps prior to entering a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal Obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal information we hold about you and to verify that we are processing it lawfully.

Right to Rectification

You have the right to request that we correct any personal information that is inaccurate or incomplete.

Right to Erasure

You have the right to request that we delete your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

International Data Transfers

As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements, including the use of standard contractual clauses approved by the European Commission where applicable.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention period depends on the nature of the data and the purposes for processing. We regularly review our data retention practices to ensure compliance with applicable regulations.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, this period may be extended by two further months, in which case we will inform you of the extension and the reasons for it.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.