Information for users in the European Economic Area regarding data protection.
Last Updated: November 2024
This document provides additional information for individuals in the European Economic Area (EEA) about how Flux-birch processes personal data in accordance with the General Data Protection Regulation (GDPR). This supplements our main Privacy Policy.
Flux-birch acts as the data controller for personal data collected through this website and in connection with our services. Our contact details are:
Email: [email protected]
Address: Level 12, 456 George Street, Sydney NSW 2000, Australia
We process personal data on the following legal bases under Article 6 of the GDPR:
Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights. Our legitimate interests include:
Where processing is necessary to comply with a legal obligation to which we are subject.
As a data subject in the EEA, you have the following rights:
You have the right to obtain confirmation that your data is being processed and access to your personal data.
You have the right to have inaccurate personal data corrected and incomplete data completed.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
You have the right to request that we restrict processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
You have the right to object to processing based on legitimate interests, including profiling, and to processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing adequate protection for personal data. Where we transfer data to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods depend on:
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, although we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive.
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
However, we would appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us in the first instance.
We may update this GDPR compliance information from time to time. We will post any changes on this page and update the "Last Updated" date accordingly.