Information on this site is advertising in nature

Last Updated: January 2024

Our Commitment to GDPR

nebula-stag is committed to protecting the personal data of all visitors, including those from the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and the rights available to EU residents.

Data Controller

For the purposes of GDPR, nebula-stag acts as the data controller for personal information collected through this website. Our contact details are:

nebula-stag
45 Heritage Lane
Sydney, NSW 2000
Australia
[email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent

Where you have given clear consent for us to process your personal data for a specific purpose, such as subscribing to updates or submitting enquiry forms.

Contract

Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract for our services.

Legitimate Interests

Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights. This includes improving our services and ensuring website security.

Legal Obligation

Where processing is necessary to comply with legal obligations to which we are subject.

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be subject to legal requirements for data retention.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you. We do not currently use automated decision-making processes.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, but we will inform you of any such extension.

We may request specific information to help us confirm your identity and ensure your right to access the information.

International Data Transfers

As we are based in Australia, personal data collected from EU residents may be transferred outside the EEA. When such transfers occur, we implement appropriate safeguards to ensure your data receives adequate protection, including:

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When personal data is no longer needed, it is securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to maintain their effectiveness.

Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that information promptly.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR information from time to time. Any significant changes will be communicated through our website or other appropriate means.