GDPR Compliance

Branch-orbit is committed to protecting your personal data and respecting your privacy. This page outlines how we comply with the General Data Protection Regulation (GDPR) and your rights under this regulation.

Our Commitment to GDPR

Although Branch-orbit is based in Australia, we recognise the importance of GDPR for visitors from the European Union. We have implemented measures to ensure that personal data of EU residents is processed in accordance with GDPR requirements.

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal grounds we rely upon include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.

Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Data Protection Principles

We adhere to the following data protection principles:

• Processing personal data lawfully, fairly, and transparently
• Collecting data for specified, explicit, and legitimate purposes
• Ensuring data is adequate, relevant, and limited to what is necessary
• Keeping data accurate and up to date
• Retaining data only as long as necessary
• Processing data securely and protecting against unauthorised access

International Data Transfers

As an Australian-based company, some of your data may be stored or processed in Australia. We ensure that appropriate safeguards are in place when transferring data outside the European Economic Area.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Supervisory Authority

If you are an EU resident and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a data protection supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.

Contact Us

For any GDPR-related enquiries or to exercise your rights, please contact us at:

Branch-orbit
47 Victoria Street
Melbourne VIC 3000
Australia
Email: [email protected]