GDPR Compliance

Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect in the European Union on 25 May 2018. Although mellow-delta is based in Australia, we are committed to respecting the privacy rights of all our visitors, including those from the European Union.

This page outlines how we comply with GDPR requirements and the rights available to you as a data subject.

Data Controller

For the purposes of GDPR, the data controller for personal data collected through this website is:

mellow-delta
Level 2, 127 Collins Street
Melbourne, VIC 3000
Australia

Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you, such as providing our culinary services.
• Legitimate Interests: Where processing is necessary for our legitimate interests and does not unduly affect your rights, such as improving our website and services.
• Legal Obligation: Where processing is necessary to comply with legal requirements.

Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.

We may ask you to verify your identity before processing your request. If we are unable to verify your identity, we may refuse to act on your request.

International Data Transfers

As mellow-delta is based in Australia, personal data collected from EU visitors may be transferred to and stored in Australia. Australia is not subject to an adequacy decision by the European Commission, which means that Australian data protection laws may not provide the same level of protection as EU laws.

We take appropriate measures to ensure that your personal data is treated securely and in accordance with this policy, including implementing standard contractual clauses where necessary.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. The retention period depends on the nature of the data and the purposes for which it is processed. When personal data is no longer needed, we will securely delete or anonymise it.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with your local supervisory authority. A list of EU data protection authorities can be found on the European Data Protection Board website.

Changes to This Information

We may update this GDPR information from time to time. We encourage you to review this page periodically to stay informed about our data protection practices.