Last Updated: January 2024
This page provides additional information for individuals located in the European Economic Area (EEA) regarding our processing of personal data under the General Data Protection Regulation (GDPR).
Data Controller
vine-orbit acts as the data controller for personal data collected through our website and services. Our contact details are:
vine-orbit
Level 4, 287 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
Contractual Necessity
Processing necessary to provide our historical research services when you engage us for a project. This includes using your contact information to communicate about your project and processing research-related information to conduct investigations on your behalf.
Legitimate Interests
Processing necessary for our legitimate business interests, including:
- Responding to enquiries and providing information about our services
- Improving our website and services
- Maintaining records for professional and legal purposes
Consent
Where required, we obtain your consent for specific processing activities, such as marketing communications or the use of non-essential cookies.
Legal Obligation
Processing necessary to comply with legal requirements, such as financial record-keeping obligations.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access
You have the right to request confirmation of whether we process your personal data and, if so, to request a copy of that data along with information about how we use it.
Right to Rectification
You have the right to request correction of inaccurate personal data or completion of incomplete data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where processing is based on consent or contract and carried out by automated means.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
International Data Transfers
As we are located in Australia, personal data collected from individuals in the EEA may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission.
We ensure appropriate safeguards are in place for such transfers, including:
- Compliance with the Australian Privacy Principles, which provide comparable protection
- Implementation of appropriate technical and organisational security measures
- Contractual protections where data is shared with third-party processors
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data and the purposes of processing.
Automated Decision-Making
We do not engage in automated decision-making, including profiling, that produces legal effects or similarly significantly affects individuals.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us at:
Email: [email protected]
We will respond to your request within one month. In complex cases, we may extend this period by two months, in which case we will inform you of the extension and reasons for it.
Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For individuals in the EEA, this is the data protection authority in your country of residence.
We encourage you to contact us first so we can address your concerns directly.
Updates to This Information
We may update this GDPR information from time to time. Changes will be posted on this page with an updated revision date.