GDPR Information

About GDPR

The General Data Protection Regulation (GDPR) is a European Union regulation that governs how personal data of individuals within the EU must be handled. Although mellow-frost is based in Australia, we are committed to respecting the privacy rights of all our users, including those protected by GDPR.

Data Controller

For the purposes of GDPR, mellow-frost is the data controller responsible for your personal data. Our contact details are:

mellow-frost
42 Greenview Terrace
Richmond VIC 3121
Australia
Email: [email protected]

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests
• Legal obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete personal data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request limitation of processing of your personal data
• Right to data portability: You can request transfer of your data to another organisation in a structured, machine-readable format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: You have rights regarding decisions made solely by automated means

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two months for complex requests. We may need to verify your identity before processing your request.

There is no fee for exercising your rights in most cases. However, we may charge a reasonable fee if requests are clearly unfounded or excessive.

International Data Transfers

As we are based in Australia, your personal data may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period may vary depending on the context and our legal obligations. When data is no longer required, it will be securely deleted or anonymised.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority. Please contact us first at [email protected].

Updates to This Notice

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this notice periodically.

Contact

For any questions regarding GDPR or your data protection rights, please contact:

Email: [email protected]