Last updated: January 2024
Zen-falcon is committed to protecting the privacy and personal data of all individuals, including those who are residents of the European Union (EU) and European Economic Area (EEA). This page provides information about how we comply with the General Data Protection Regulation (GDPR).
When we collect and process your personal data through our website or in connection with our services, Zen-falcon acts as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws, including the GDPR.
Under the GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:
Consent: When you submit a booking request or subscribe to our communications, you provide consent for us to process your personal data for the specified purposes. You have the right to withdraw consent at any time.
Contractual Necessity: When you engage our training services, we process your personal data as necessary to fulfil our contractual obligations to you.
Legitimate Interests: We may process your personal data based on our legitimate business interests, such as improving our website and services, provided these interests are not overridden by your rights and freedoms.
Legal Obligation: We may process your personal data to comply with legal obligations to which we are subject.
If you are a resident of the EU or EEA, you have the following rights regarding your personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure: You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR.
To exercise any of your rights under the GDPR, please contact us using the details provided below. We will respond to your request within one month of receipt. If your request is complex or we receive a large number of requests, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
We may need to verify your identity before processing your request. In certain circumstances, we may be unable to comply with your request, such as when doing so would adversely affect the rights and freedoms of others or when we are required by law to retain the data.
As an Australian organisation, any personal data we collect may be transferred to and processed in Australia. When we transfer personal data outside the EU or EEA, we ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses approved by the European Commission.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure.
If you have any questions about this GDPR information, our data protection practices, or wish to exercise your rights, please contact us at:
Zen-falcon
Level 8, 45 Clarence Street
Sydney NSW 2000
Australia
Email: [email protected]