GDPR Compliance

Our Commitment to Data Protection

While breeze-field operates primarily in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for individuals in the European Union and European Economic Area. This page outlines how we handle data for EU/EEA residents in compliance with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit enrollment forms or contact requests, you provide explicit consent for us to process your information
• Contractual Necessity: Processing required to fulfill our services and manage enrollments
• Legitimate Interests: Website analytics and service improvement, where such interests do not override your rights

Data Subject Rights

Under GDPR, EU/EEA residents have specific rights regarding their personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data under certain conditions, such as when data is no longer necessary for its original purpose.

Right to Restrict Processing

You may request limitation of how we process your data in specific circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format or have it transferred to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, send a detailed request to [email protected]. Include your full name, contact information, and specific right you wish to exercise. We will respond within one month of receiving your request.

Data Transfers

Our servers and data storage facilities are located in Australia. When you provide information to us from the EU/EEA, your data is transferred outside the EU/EEA. We ensure appropriate safeguards are in place for such transfers.

Data Protection Officer

For GDPR-related inquiries, contact our data protection representative at [email protected].

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, where required by GDPR.

Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with your local data protection supervisory authority in the EU/EEA.

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent.

Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by applicable law. Enrollment records are typically retained for seven years.

Contact Information

For GDPR-related questions or to exercise your data rights:

Email: [email protected]
Address: 142 Flinders Lane, Melbourne VIC 3000, Australia