GDPR Compliance

Our Commitment to GDPR

Although Twisted Echo is based in Australia, we respect the privacy rights of individuals in the European Economic Area (EEA) and comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.

Data Controller

Twisted Echo acts as the data controller for personal information collected through our website and services. Our contact details are:

Twisted Echo
42 Harbour View Road
Surry Hills, NSW 2010
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is necessary for compliance with a legal obligation

Your Rights Under GDPR

If you are a resident of the EEA, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. For project-related data, we typically retain records for seven years following project completion for warranty and legal purposes.

International Data Transfers

As an Australian company, data collected from EEA residents may be transferred to Australia. We ensure appropriate safeguards are in place for such transfers, including compliance with GDPR requirements.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.