GDPR Compliance
Last updated: 15 March 2024
Rogue Eternity Pty Ltd respects the privacy rights of individuals located in the European Economic Area (EEA) and the United Kingdom. This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA and UK residents.
Data Controller
For purposes of the GDPR, Rogue Eternity Pty Ltd acts as the data controller for personal data we collect and process. Our contact details are:
Rogue Eternity Pty Ltd
42 Greenway Parade
Pyrmont NSW 2009
Australia
Email: [email protected]
Legal Bases for Processing
We process personal data under the following legal bases as defined by GDPR:
Consent (Article 6(1)(a))
Where you have provided explicit consent for processing, such as subscribing to communications or accepting cookies. You may withdraw consent at any time.
Contractual Necessity (Article 6(1)(b))
Processing necessary to perform a contract with you or to take steps at your request before entering into a contract, such as preparing proposals and delivering services.
Legal Obligation (Article 6(1)(c))
Processing necessary to comply with legal obligations, including tax and accounting requirements.
Legitimate Interests (Article 6(1)(f))
Processing necessary for our legitimate business interests, such as improving our services and website functionality, where those interests are not overridden by your rights.
Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification (Article 16)
You have the right to request correction of inaccurate personal data or completion of incomplete data.
Right to Erasure (Article 17)
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction (Article 18)
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.
International Data Transfers
As an Australian company, we may transfer personal data from the EEA or UK to Australia. We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses approved by the European Commission
- Compliance with our obligations under Australian privacy law
- Technical and organisational security measures
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Retention periods vary based on the type of data and applicable legal requirements.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption, and secure data storage practices.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
We will respond to your request within one month. If your request is complex or you have made multiple requests, we may extend this period by up to two additional months, in which case we will inform you of the extension.
Supervisory Authority
If you are located in the EEA or UK and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities can be found on the European Data Protection Board website.
Changes to This Notice
We may update this GDPR compliance notice from time to time. Changes will be posted on this page with an updated revision date.