GDPR Compliance

Overview

The General Data Protection Regulation (GDPR) is a European Union regulation that governs how organisations collect, use, and protect personal data of individuals in the EU. Although crag-serval is based in Australia, we are committed to protecting the privacy of all our users, including those in the European Economic Area (EEA).

This page outlines how we comply with GDPR requirements and explains your rights under this regulation.

Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfil our agreement with you, such as providing language courses you have enrolled in
• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Processing necessary to comply with laws and regulations

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request, free of charge in most cases.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another organisation.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making systems.

International Data Transfers

As an Australian company, your personal data may be transferred to and processed in Australia. When we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your information, which may include:

• Standard contractual clauses approved by the European Commission
• Ensuring the receiving country provides adequate data protection
• Obtaining your explicit consent for the transfer

Data Protection Officer

For GDPR-related enquiries, you may contact our data protection contact at:

Email: [email protected]

Please include "GDPR Request" in the subject line of your email.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details provided. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended for complex requests.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.

Data Retention

We retain personal data only for as long as necessary for the purposes set out in our Privacy Policy. When determining retention periods, we consider:

• The nature and sensitivity of the data
• The purposes for which we process the data
• Applicable legal requirements
• Our legitimate business needs

Updates

We may update this GDPR compliance information periodically. Any changes will be posted on this page with an updated revision date.

Contact Information

For questions about GDPR or to exercise your rights, please contact:

crag-serval
Suite 401, 88 Walker Street
North Sydney, NSW 2060
Australia

Email: [email protected]