GDPR Compliance
Last Updated: January 2024
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organisations processing personal data of individuals in the European Union. Even though cedar-lemur is based in Australia, we are committed to protecting the privacy rights of all our users, including those in the EU.
Our Commitment
We process personal data in accordance with the principles set forth in the GDPR. This means we:
- Process data lawfully, fairly, and transparently
- Collect data only for specified, explicit, and legitimate purposes
- Minimise data collection to what is necessary
- Keep data accurate and up to date
- Retain data only as long as necessary
- Ensure appropriate security of personal data
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose
- Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
- Legal Obligation: Processing is necessary for compliance with a legal obligation
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights do not override those interests
Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
You have the right to request correction of any inaccurate personal data we hold about you. We will respond to rectification requests within one month.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
International Data Transfers
As we are based in Australia, personal data collected from EU residents may be transferred to and stored in Australia. Australia is recognised by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we ensure appropriate safeguards are in place.
Data Protection Officer
For matters related to GDPR and data protection, you may contact our designated privacy representative at:
Email: [email protected]
Subject Line: GDPR Enquiry
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details above. We will respond to your request within one month. In complex cases, we may extend this period by an additional two months, and we will inform you of any such extension.
Right to Lodge a Complaint
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the supervisory authority in your EU member state. However, we encourage you to contact us first so we can try to resolve your concerns directly.
Changes to This Information
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We will notify affected users of any material changes.