GDPR Compliance
Information for users under the General Data Protection Regulation
Last updated: January 2024
About GDPR
The General Data Protection Regulation (GDPR) is a European Union regulation that governs data protection and privacy. Although dapper-space is based in Australia, we respect the rights of all users and extend GDPR-equivalent protections to visitors from the European Economic Area (EEA).
Data Controller
dapper-space acts as the data controller for personal information collected through this website. This means we determine how and why your personal data is processed.
Contact details:
dapper-space
45 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will make corrections without undue delay.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, including:
- The data is no longer necessary for the purpose it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You can request that we restrict processing of your data in certain situations, such as while we verify the accuracy of data you have contested.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you. We do not currently use fully automated decision-making processes.
Legal Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. Our legal bases include:
- Contract: Processing necessary to perform a rental agreement with you
- Legal obligation: Processing required to comply with laws
- Legitimate interests: Processing for business purposes where your rights are not overridden
- Consent: Processing based on your freely given consent
International Data Transfers
Your data is primarily processed in Australia. When we transfer data from the EEA to Australia, we rely on:
- Standard contractual clauses approved by the European Commission
- Ensuring adequate data protection measures are in place
Data Retention
We retain personal data only for as long as necessary for the purposes it was collected. Retention periods are determined based on:
- Legal requirements and statute of limitations
- Business operational needs
- Industry standards and best practices
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details below. We may ask you to verify your identity before processing your request. We will respond to valid requests within one month.
Complaints
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EEA member state of your residence, place of work, or where the alleged infringement occurred.
Contact
For GDPR-related enquiries or to exercise your rights:
Email: [email protected]
Address: 45 Harbour Street, Sydney NSW 2000, Australia
Please include "GDPR Request" in your subject line to ensure prompt handling.