GDPR Compliance Statement

Last Updated: November 2024

Our Commitment to GDPR

Although Muse-wolf is based in Australia, we are committed to protecting the privacy rights of all individuals, including those in the European Economic Area (EEA). This page outlines our approach to compliance with the General Data Protection Regulation (GDPR) for visitors and clients from the European Union.

Data Controller Information

For the purposes of GDPR, the data controller is:

Muse-wolf
Unit 12, 45 Industrial Avenue
Wetherill Park NSW 2164
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have provided explicit consent for specific processing activities
• Contractual Necessity: Where processing is necessary to perform a contract with you or take pre-contractual steps at your request
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
• Legal Obligation: Where processing is necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

International Data Transfers

As we are based in Australia, data you provide may be transferred to and stored in Australia. Australia does not have an adequacy decision from the European Commission. When transferring data from the EEA, we rely on appropriate safeguards including:

• Standard contractual clauses approved by the European Commission
• Your explicit consent where applicable
• Contractual necessity for the performance of services

Data Protection Measures

We implement technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Staff training on data protection obligations
• Secure data storage facilities

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours. We will also notify affected individuals where required by law.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods are determined based on:

• Legal and regulatory requirements
• Contractual obligations
• Legitimate business needs

Withdrawing Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence.

Contact for GDPR Enquiries

For questions regarding GDPR compliance or to exercise your rights, please contact:

Email: [email protected]
Subject Line: GDPR Enquiry

We aim to respond to all GDPR-related requests within 30 days.