Last Updated: January 2024
Myth-blossom is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) for individuals in the European Union and European Economic Area. This page outlines our commitment to GDPR compliance and your rights under this regulation.
Myth-blossom acts as the data controller for personal data collected through our website and services. As the data controller, we determine the purposes and means of processing personal data.
Contact:
Myth-blossom
Level 4, 127 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
We process personal data based on one or more of the following legal bases:
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
You have the right to request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
You have the right to request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
You have the right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in certain scenarios.
You have the right to request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
Where we are relying on consent to process your personal data, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
As we are based in Australia, your personal data may be transferred to, and processed in, a country outside the European Economic Area. When we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
We have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
To exercise any of your rights under GDPR, please contact us using the details provided above. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. We will respond to your request within one month of receiving it.
If you have any concerns about our use of your personal data, you have the right to lodge a complaint with a supervisory authority. In the EU, you can contact the data protection authority in your country of residence. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.
We may update this GDPR information from time to time. We will notify you of any significant changes by posting a notice on our website.