GDPR Compliance

Our Commitment to Data Protection

illaipinsa is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we handle personal data and your rights under these regulations.

Data Controller

illaipinsa acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing personal data in accordance with applicable laws.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request your data in a machine-readable format
• Right to Object: You can object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision-Making: You can request human intervention in automated decisions

Exercising Your Rights

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.

Data Transfers

As an Australian-based company, some of your data may be processed outside the European Economic Area. When this occurs, we ensure appropriate safeguards are in place to protect your data, including standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary based on the type of data and our legal obligations. Service records are typically retained for seven years following your last engagement with us.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.

Supervisory Authority

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with your local data protection supervisory authority.

Contact Us

For any questions regarding GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: Level 12, 485 Bourke Street, Melbourne VIC 3000, Australia