Effective Date: January 1, 2024
Last Updated: January 1, 2024
While infilscant.com primarily operates in Australia and is governed by Australian privacy laws, we recognize that individuals from the European Union may access our website. This statement outlines how we address General Data Protection Regulation (GDPR) principles when processing personal data of EU residents.
We process personal data based on the following legal grounds:
If you are an EU resident, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information in a structured, commonly used format.
You may request correction of inaccurate or incomplete personal data. We will update records promptly upon verification of corrected information.
You may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes it was collected or when you withdraw consent. This right is subject to legal retention obligations.
You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing.
You may request that we transfer your personal data to another controller in a machine-readable format, where technically feasible.
You may object to processing of your personal data based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
You have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates GDPR provisions.
Personal data may be shared with:
We do not transfer personal data to third countries outside Australia without appropriate safeguards or legal mechanisms to ensure adequate protection.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
After the retention period expires, personal data is securely deleted or anonymized.
We implement appropriate technical and organizational measures to protect personal data, including:
In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will notify affected data subjects without undue delay, typically within 72 hours of becoming aware of the breach. Notification will include the nature of the breach, likely consequences, and measures taken to address it.
Our operations are based in Australia. If personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as:
We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
Our services are not directed to individuals under 16 years of age. We do not knowingly collect or process personal data of children. If we become aware of such data collection, we will delete it immediately.
For questions or concerns regarding GDPR compliance or to exercise your data subject rights, contact us at:
Email: [email protected]
Subject Line: GDPR Request
We will respond to requests within 30 days of receipt. In complex cases, this period may be extended by an additional 60 days with notification to you.
We may update this GDPR Compliance Statement to reflect changes in our data processing practices or legal requirements. Significant changes will be communicated through website notice or direct email to affected individuals.
EU residents may lodge complaints with their local supervisory authority. A list of EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en