Information for European Union residents about data protection.
Last Updated: January 2024
This page provides additional information for residents of the European Economic Area (EEA) and the United Kingdom regarding their rights under the General Data Protection Regulation (GDPR) and similar data protection laws.
This notice supplements our main Privacy Policy and should be read in conjunction with it.
Gleaming Bumper acts as the data controller for personal data collected through our website and services. Our contact details are:
Gleaming Bumper
Level 14, 101 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
We process personal data on the following legal bases:
If you are a resident of the EEA or UK, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
You have the right to request that we correct any inaccurate personal data or complete any incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
As we are based in Australia, personal data may be transferred to and processed in Australia. When we transfer personal data from the EEA or UK to Australia, we ensure appropriate safeguards are in place, including:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period depends on the context of the processing and our legal obligations. When personal data is no longer needed, we securely delete or anonymise it.
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, we may extend this period by a further two months, and we will inform you of any such extension.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this is typically the data protection authority in your country of residence. For UK residents, this is the Information Commissioner's Office (ICO).
We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this notice periodically.
If you have any questions about this GDPR notice or our data protection practices, please contact us at [email protected].