GDPR Compliance Statement

Last Updated: October 26, 2024

General Data Protection Regulation Compliance

River-trek respects data protection rights and complies with applicable privacy regulations including the General Data Protection Regulation for users in relevant jurisdictions.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you submit forms or accept cookies, you provide explicit consent for data processing
• Contractual necessity: Processing required to provide requested services and respond to inquiries
• Legitimate interests: Analysis of website usage to improve functionality and security
• Legal obligations: Retention of records as required by applicable law

Data Subject Rights

Under GDPR and similar regulations, you have the following rights regarding your personal data:

• Right to Access: Request confirmation of what personal data we hold about you and receive a copy
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

Exercising Your Rights

To exercise any of these rights, send a request to [email protected] with the following information:

• Your full name and contact information
• Specific right you wish to exercise
• Details to help us locate your data (such as submission date or reference number)
• Verification of your identity (we may request additional information to confirm identity)

We will respond to verified requests within 30 days. In complex cases, we may extend this period by an additional 60 days with notification.

Data Retention

Personal data is retained only as long as necessary for the purposes stated in our privacy policy. Assessment requests and associated communications are archived after:

• Completion of installation projects
• Closure of inquiries without proceeding to installation
• Expiration of warranty periods for completed installations
• Fulfillment of legal retention requirements

International Data Transfers

Personal data collected through our website is stored on servers located in Australia. We do not routinely transfer data outside Australia. If international transfers become necessary for service provision, we will implement appropriate safeguards such as standard contractual clauses.

Automated Decision Making

We do not use automated decision-making processes or profiling that produce legal effects or similarly significant impacts on individuals.

Data Protection Officer

For questions specifically about data protection practices or to lodge complaints about our data handling, contact [email protected] with "Data Protection Inquiry" in the subject line.

Supervisory Authority

If you believe our data processing violates your rights under GDPR or applicable privacy laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Employee training on data protection requirements

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

Third-Party Processing

Service providers who process data on our behalf are contractually bound to protect your information and use it only for specified purposes. We verify that these processors maintain adequate data protection standards.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated date.