GDPR Compliance

Last Updated: January 2024

1. Introduction

oak-node is committed to protecting the personal data of all individuals, including those in the European Economic Area (EEA) and the United Kingdom. This page outlines our compliance with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.

While oak-node is based in Australia and primarily serves Australian residents, we recognise that visitors from the EEA may access our website. This page addresses the rights and protections afforded to such individuals.

2. Data Controller

For the purposes of GDPR, oak-node acts as the data controller for personal data collected through this website. Our contact details are:

oak-node
Level 8, 225 St Georges Terrace
Perth WA 6000
Australia

Email: [email protected]

3. Lawful Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.
• Legal Obligation: Where processing is necessary to comply with a legal obligation.

4. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request that we delete your personal data, subject to certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

5. Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within 30 days. In certain circumstances, we may need to verify your identity before processing your request.

There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

6. International Data Transfers

As oak-node is based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection.

Where we transfer data to third parties outside Australia or the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and applicable legal requirements.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption, access controls, and regular security assessments.

9. Data Protection Officer

Given the scale of our operations, we have not appointed a formal Data Protection Officer. However, all privacy-related enquiries can be directed to our general contact address, and we will ensure they are handled appropriately.

10. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence. UK residents may contact the Information Commissioner's Office (ICO).

We encourage you to contact us first so that we can address your concerns directly.

11. Changes to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about GDPR compliance or your data protection rights, please contact us:

oak-node
Level 8, 225 St Georges Terrace
Perth WA 6000
Australia

Email: [email protected]