Last updated: January 2024
Introduction
This page provides additional information about how we handle personal data of individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland in accordance with the General Data Protection Regulation (GDPR) and related laws.
This information supplements our main Privacy Policy.
Data Controller
hyper-plateau acts as the data controller for personal information collected through this website and our services.
Contact details:
Email: [email protected]
Address: Level 12, 197 St Georges Terrace, Perth WA 6000, Australia
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: Where you have provided explicit consent for specific processing activities, such as receiving marketing communications or certain cookie usage.
- Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as when you engage our property advisory services.
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. This includes improving our services, website security, and responding to enquiries.
- Legal obligation: Where processing is necessary to comply with legal requirements.
Your Rights Under GDPR
If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the data has been unlawfully processed.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have contested.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. We do not currently use automated decision-making in this manner.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by up to two additional months for complex requests.
We may request verification of your identity before processing your request. There is generally no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
International Data Transfers
As we are based in Australia, your personal data will be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission, meaning it has not been formally recognised as providing adequate data protection.
We rely on the following safeguards to ensure appropriate protection for transferred data:
- Australia's Privacy Act 1988 provides substantial protections for personal information
- We apply equivalent safeguards to all personal data regardless of origin
- Where appropriate, we use standard contractual clauses approved by the European Commission
Data Retention
We retain personal data only for as long as necessary for the purposes described in our Privacy Policy. Criteria used to determine retention periods include:
- Duration of our relationship with you
- Legal obligations requiring data retention
- Limitation periods for potential claims
- Guidelines from regulatory authorities
Supervisory Authority
If you are located in the EEA, UK, or Switzerland, you have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates applicable law.
A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en
For the UK, the supervisory authority is the Information Commissioner's Office: https://ico.org.uk
Updates to This Information
We may update this GDPR information periodically. Changes will be posted on this page with an updated revision date.
Contact
For questions about this GDPR information or to exercise your rights, please contact:
Email: [email protected]