Information for individuals located in the European Economic Area.
Last updated: January 2024
This page provides additional information for individuals located in the European Economic Area (EEA) regarding how we process personal data in accordance with the General Data Protection Regulation (GDPR).
This notice supplements our main Privacy Policy and should be read alongside it.
crisp-crane is the data controller responsible for your personal data. Our contact details are:
Email: [email protected]
Address: Level 8, 127 Creek Street, Brisbane QLD 4000, Australia
We process personal data on the following legal bases under GDPR:
Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes responding to service enquiries and delivering consulting services.
Processing necessary for our legitimate interests, provided these are not overridden by your rights and interests. Our legitimate interests include:
Where you have provided consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time.
Processing necessary to comply with legal obligations to which we are subject.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you.
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request deletion of your personal data in certain circumstances.
You have the right to request that we restrict processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
As we are located in Australia, personal data collected from individuals in the EEA will be transferred outside the EEA. We ensure appropriate safeguards are in place for such transfers, which may include:
We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods are determined based on:
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month, though this period may be extended by two further months for complex requests.
We may request verification of your identity before processing your request.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can attempt to resolve your concerns.
We may update this GDPR notice from time to time. Material changes will be communicated through our website.