GDPR Compliance

Last updated: January 2024

Introduction

Although seed-marmot is based in Australia and primarily serves Australian customers, we recognise that visitors from the European Economic Area (EEA) may access our website. This page outlines how we handle personal data in accordance with the General Data Protection Regulation (GDPR) for EEA residents.

Data Controller

For the purposes of GDPR, the data controller is:

seed-marmot
ABN: 92 847 291 553
42 Industrial Drive
Dandenong South VIC 3175
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you voluntarily submit information through our contact forms or subscribe to communications
• Contract: When processing is necessary to fulfil a contract or take steps prior to entering into a contract
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Legal obligation: When we are required to process data to comply with applicable laws

Your Rights Under GDPR

If you are an EEA resident, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of how we use your data
• Right to data portability: You can request transfer of your data to another organisation
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

International Data Transfers

As we are located in Australia, any personal data you provide will be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. However, we implement appropriate safeguards to protect your data, including:

• Compliance with Australian Privacy Principles
• Secure data storage and transmission
• Limited access to personal data on a need-to-know basis

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy.

Cookies and Tracking

Our website uses cookies and similar technologies. EEA visitors are presented with a cookie consent banner that allows them to accept or reject non-essential cookies. For detailed information, see our Cookie Policy.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence. However, we encourage you to contact us first so we can address your concerns directly.

Changes to This Information

We may update this GDPR information from time to time. Changes will be posted on this page with an updated revision date.