GDPR Compliance

Last updated: August 2024

Our Commitment

sogliabbru is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws. This page outlines how we comply with these regulations for all users, including those located in the European Economic Area.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have provided explicit consent for specific processing activities
• Contractual necessity: Where processing is necessary to fulfil our services to you
• Legitimate interests: Where we have a legitimate business interest that does not override your rights
• Legal obligation: Where we are required to process data by law

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will respond to such requests within 30 days.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data where there is no compelling reason for continued processing. This right does not apply where we have a legal obligation to retain data.

Right to Restrict Processing

You may request that we limit the processing of your personal data under certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

International Data Transfers

When we transfer personal data outside Australia or the EEA, we ensure appropriate safeguards are in place to protect your information. These safeguards may include standard contractual clauses approved by relevant authorities.

Data Protection Officer

For questions regarding our data protection practices or to exercise your rights, please contact us at:

sogliabbru
42 Collins Street
Melbourne VIC 3000
Australia
[email protected]

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with your local data protection authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in high risk, we will also notify affected individuals directly.

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. The date of the most recent revision will be indicated at the top of this page.