Your data protection rights under the General Data Protection Regulation
ash-ibex is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we comply with GDPR requirements and explains your rights as a data subject.
ash-ibex acts as the data controller for personal data collected through our website and services. As data controller, we determine the purposes and means of processing personal data and are responsible for ensuring compliance with data protection obligations.
Contact details for data protection queries:
ash-ibex
Level 12, 180 George Street
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data only when we have a valid legal basis to do so. The legal bases we rely on include:
Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications or non-essential cookies.
Where processing is necessary for the performance of a contract with you, such as providing subscription services or processing payments.
Where processing is necessary to comply with legal obligations to which we are subject, such as tax reporting requirements.
Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes improving our services and protecting against fraud.
As a data subject, you have the following rights under GDPR:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request, unless the request is manifestly unfounded or excessive.
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.
You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.
To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).
Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your data. These safeguards may include:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. When determining retention periods, we consider the nature and sensitivity of the data, the purposes of processing, and applicable legal requirements.
We may update this GDPR information from time to time. Any significant changes will be communicated through our website or by direct communication where appropriate.
For any questions about GDPR compliance or to exercise your data protection rights, please contact:
Data Protection Officer
ash-ibex
Level 12, 180 George Street
Sydney NSW 2000
Australia
Email: [email protected]