Overview
Storm-civet is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and how you can exercise your rights.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you explicitly agree to us processing your data for recruitment purposes
- Contract: When processing is necessary to fulfill our service agreement with you
- Legitimate Interests: When necessary for our legitimate business interests, balanced against your rights
- Legal Obligation: When required to comply with applicable laws
Your GDPR Rights
Right to Access
You have the right to request confirmation of whether we process your personal data and to receive a copy of that data. We will provide this information within one month of your request.
Right to Rectification
You may request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.
Right to Erasure
You can request deletion of your personal data under certain circumstances, including:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restriction of Processing
You may request that we limit how we use your data in specific situations:
- You contest the accuracy of the data
- Processing is unlawful but you prefer restriction over erasure
- We no longer need the data but you require it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
Where technically feasible, you can request to receive your personal data in a structured, commonly used format or request that we transfer it directly to another organization.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing conducted prior to withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your data violates GDPR requirements.
Data Protection Officer
For questions regarding our data processing practices or to exercise your GDPR rights, please contact us at [email protected].
Data Transfers
We primarily process data within Australia. If we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions confirming equivalent data protection levels
- Binding corporate rules where applicable
Automated Decision-Making
We do not make solely automated decisions that significantly affect you, including profiling, without human oversight and the opportunity for you to express your viewpoint.
Data Security Measures
We implement appropriate technical and organizational measures to ensure data security, including:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and audits
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach, as required by GDPR.
Exercising Your Rights
To exercise any of your GDPR rights, please submit a request to [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two additional months for complex requests.
Updates to This Statement
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.