Information presented on this website is promotional in nature

Last updated: November 2024

This page provides additional information for visitors located in the European Economic Area (EEA), the United Kingdom, and Switzerland regarding the General Data Protection Regulation (GDPR) and equivalent data protection legislation.

Data Controller

For the purposes of the GDPR, Mellow-space acts as the data controller for personal information collected through this website. Our contact details are:

Mellow-space
Level 4, 127 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]

Lawful Bases for Processing

We process personal data from EEA residents on the following legal bases:

Consent

When you submit an enquiry form, you provide consent for us to process the information you submit for the purpose of responding to your enquiry. You may withdraw consent at any time by contacting us.

Legitimate Interests

We may process certain data based on our legitimate business interests, including:

Contractual Necessity

If you engage our services, we process personal data as necessary to fulfil our contractual obligations to you.

Your Rights Under GDPR

As a data subject in the EEA, you have the following rights:

Right of Access

You may request confirmation of whether we process your personal data and, if so, access to that data along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You may request that we restrict processing of your personal data in certain circumstances, such as while we verify the accuracy of contested data.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

International Data Transfers

As we are based in Australia, data submitted by EEA residents is transferred outside the EEA. Australia has been granted an adequacy decision by the European Commission for certain types of personal data. Where additional safeguards are required, we implement appropriate measures such as standard contractual clauses.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Enquiry data is typically retained for three years unless a longer period is required by law or for ongoing business relationships.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by a further two months, in which case we will inform you.

Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with your local supervisory authority. For a list of supervisory authorities in the EEA, please visit the European Data Protection Board website.

Updates to This Notice

We may update this GDPR notice periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.