GDPR Compliance

Last updated: January 2024

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on 25 May 2018. While solar-sequoia is based in Australia, we are committed to upholding the principles of GDPR for all our users, including those in the European Economic Area (EEA) and the United Kingdom.

Our Commitment

We are committed to:

• Processing personal data lawfully, fairly, and transparently
• Collecting data only for specified, explicit, and legitimate purposes
• Ensuring data is adequate, relevant, and limited to what is necessary
• Keeping data accurate and up to date
• Retaining data only as long as necessary
• Processing data securely

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.

Right to Erasure

Also known as the "right to be forgotten," you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects.

Legal Bases for Processing

We process personal data based on one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
• Vital Interests: Processing is necessary to protect your vital interests or those of another person.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.

Data Transfers

As we are based in Australia, any transfer of your data to us involves an international transfer. Australia is recognised by the European Commission as providing an adequate level of protection for personal data. We also implement appropriate safeguards for any other international transfers.

Data Protection Officer

While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact who is responsible for overseeing our data protection practices and can be reached at the contact details below.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required.

Supervisory Authority

If you are located in the EEA or UK and believe that your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. Contact details for EU data protection authorities can be found on the European Data Protection Board website.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details below. We may need to verify your identity before processing your request. We will respond to your request within one month, although this period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Contact Us

For GDPR-related enquiries or to exercise your rights, please contact us at:

solar-sequoia
42 Eucalyptus Lane
Richmond, VIC 3121
Australia
Email: [email protected]