GDPR Compliance

Last updated: January 2024

Cobalt Crest Pty Ltd is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements for individuals located in the European Economic Area (EEA).

Data Controller

Cobalt Crest Pty Ltd acts as the data controller for personal information collected through this website. Our contact details are:

Cobalt Crest Pty Ltd
Level 4, 127 Crown Street
Surry Hills, NSW 2010, Australia
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent: When you provide explicit consent for specific processing activities, such as marketing communications
Contract: When processing is necessary to perform a contract with you or take steps at your request before entering into a contract
Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
Legal Obligation: When processing is necessary to comply with our legal obligations

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit this data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent as the lawful basis for processing, you have the right to withdraw that consent at any time.

International Data Transfers

As an Australian company, we may transfer personal data outside the EEA. When we do so, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Binding Corporate Rules where applicable
Transfers to countries with an adequacy decision

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit and at rest
Regular security assessments and audits
Access controls and authentication measures
Staff training on data protection

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. Where the breach is likely to result in a high risk, we will also notify affected individuals directly.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to your request within one month.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.

Contact Us

For any GDPR-related enquiries or to exercise your rights, please contact:

Data Protection Officer
Cobalt Crest Pty Ltd
Level 4, 127 Crown Street
Surry Hills, NSW 2010, Australia
Email: [email protected]