GDPR Rights and Data Protection

Effective Date: January 1, 2025

Last Updated: January 1, 2026

Introduction

This page explains your rights under the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APP). At solarmosaices.com, we are committed to protecting your personal data and respecting your privacy rights.

Data Controller Information

The data controller responsible for your personal information is:

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

1. Right to Access

You have the right to request copies of your personal data. This allows you to receive a copy of the personal information we hold about you and to check that we are processing it lawfully.

How to exercise: Send an email to support@solarmosaices.com with the subject line "Data Access Request". Include your full name and email address used on our website.

Response time: We will respond within 30 days of receiving your request.

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We want to ensure your data is accurate and up to date.

How to exercise: Contact us at support@solarmosaices.com with details of the information that needs to be corrected.

Response time: We will correct verified inaccuracies within 30 days.

3. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data under certain circumstances, including:

How to exercise: Email support@solarmosaices.com with "Deletion Request" in the subject line.

Response time: We will process your request within 30 days, unless we have a legal obligation to retain certain data.

4. Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data under certain circumstances:

How to exercise: Contact support@solarmosaices.com explaining why you want to restrict processing.

Response time: We will respond within 30 days.

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data to another organization where technically feasible.

This right applies when:

How to exercise: Email support@solarmosaices.com requesting data portability.

Response time: We will provide your data in CSV or JSON format within 30 days.

6. Right to Object

You have the right to object to processing of your personal data in certain situations:

How to exercise: Send an objection to support@solarmosaices.com explaining your grounds for objection.

Response time: We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

7. Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects on you.

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

8. Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to exercise: Contact support@solarmosaices.com or use unsubscribe links in our communications.

Effect: We will stop processing your data for that purpose immediately.

How to Exercise Your Rights

To exercise any of your GDPR rights:

  1. Send an email to support@solarmosaices.com
  2. Include your full name and email address used on our website
  3. Clearly state which right you wish to exercise
  4. Provide any additional information to help us locate your data
  5. We may request identification to verify your identity

We will respond to your request within 30 days. If we need more time, we will notify you and explain the reason for the delay.

No Fee Usually Required

You will not have to pay a fee to access your personal data or to exercise any other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We may also refuse to comply with your request in these circumstances.

What We May Need From You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or exercise other rights. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

Cookie Management

You have the right to control cookies on our website:

Essential Cookies

These cookies are necessary for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting privacy preferences or filling in forms.

Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. You can opt out of analytics cookies through your cookie preferences.

Marketing Cookies

These cookies track your online activity to help deliver more relevant advertising. You can opt out of marketing cookies through your cookie preferences or browser settings.

How to Manage Cookies

You can control cookies through:

Note that disabling certain cookies may affect website functionality.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

International Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13 without parental consent. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will delete that information.

Parents or guardians who believe we may have collected information from children under 13 should contact us immediately at support@solarmosaices.com.

Data Retention Periods

We retain your personal data only as long as necessary for the purposes outlined in our Privacy Policy:

After the retention period, we will securely delete or anonymize your personal data.

Complaints and Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority.

For Australian Residents

Office of the Australian Information Commissioner (OAIC)

For EU/EEA Residents

You can contact your local data protection authority. A list of authorities is available at:

https://edpb.europa.eu/about-edpb/board/members_en

Updates to This Page

We may update this GDPR Rights page from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically for the latest information on our data protection practices.

Legal Basis for Processing

We process your personal data under the following legal bases:

Data Protection Officer

For questions about data protection or to exercise your rights, you can contact our data protection team at:

Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

Third-Party Processing

We work with third-party service providers who process data on our behalf. These processors are contractually bound to:

Contact Us

For any questions about your GDPR rights or our data protection practices:

We aim to respond to all enquiries within 24-48 hours during business days.

Your Responsibilities

While we take data protection seriously, you also have responsibilities:

Acknowledgment

By using our services, you acknowledge that you have read and understood your rights under GDPR and Australian Privacy Principles. You understand how to exercise these rights and how to contact us with questions or concerns.