GDPR Compliance

Last updated: 1 January 2024

clouded-dream respects the privacy rights of individuals in the European Economic Area (EEA) and the United Kingdom. This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA and UK residents.

Data Controller

clouded-dream acts as the data controller for personal data collected through our website and services. Our contact details are:

clouded-dream
Level 4, 127 Creek Street
Brisbane QLD 4000, Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given explicit consent to the processing of your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request
• Legitimate interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms
• Legal obligation: Where processing is necessary to comply with applicable laws and regulations

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You have the right to request correction of any inaccurate personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

International Data Transfers

As an Australian company, personal data collected from EEA or UK residents may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Compliance with the Australian Privacy Act, which provides comparable protection

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods depend on the type of data and the purpose of processing.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In complex cases, this period may be extended by two further months, and we will inform you of any such extension.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.