Data protection rights for European Economic Area residents
While Unexepurwa primarily serves Australian clients, we recognize data protection rights for individuals in the European Economic Area (EEA) who may access our website or services.
This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.
We process personal data based on the following legal grounds:
Unexepurwa acts as the data controller for personal information collected through our website and services.
Contact: [email protected]
Address: Level 12, 485 La Trobe Street, Melbourne VIC 3000, Australia
If you are located in the EEA, you have the following rights:
You can request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate or incomplete personal data we hold about you.
You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
You can request that we limit how we use your data in certain circumstances, such as while we verify data accuracy.
You can request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
You can object to processing based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts.
To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving a valid request.
We may require verification of your identity before fulfilling requests to protect your personal data from unauthorized access.
Our servers are located in Australia. If you are located in the EEA, your personal data will be transferred outside the EEA. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach.
You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred.
We may update our GDPR compliance practices to reflect regulatory changes or operational improvements. Material changes will be communicated through this page with an updated revision date.