GDPR Compliance

Scope of This Notice

This notice supplements our Privacy Policy and provides additional information for individuals located in the European Economic Area (EEA), United Kingdom, or Switzerland whose personal data we process. The General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data, which we outline below.

While fusion-teach operates primarily in Australia, we recognise that some visitors to our website or enquirers about our services may be protected under GDPR. We are committed to respecting these rights.

Data Controller

fusion-teach Pty Ltd acts as the data controller for personal data collected through our website and service enquiries. Our contact details are:

fusion-teach Pty Ltd
Level 12, 456 Collins Street
Melbourne VIC 3000, Australia
Email: [email protected]

Legal Basis for Processing

We process personal data on the following lawful bases:

Consent

Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or accepting non-essential cookies.

Contract Performance

Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract, such as when you enquire about our services or engage us for a project.

Legitimate Interests

Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes improving our services, website security, and business operations.

Legal Obligation

Where we need to process your data to comply with a legal requirement, such as maintaining financial records or responding to lawful requests from authorities.

Your Rights Under GDPR

If GDPR applies to our processing of your data, you have the following rights:

Right of Access

You can request a copy of the personal data we hold about you, along with information about how we use it. We will provide this within one month of receiving a valid request.

Right to Rectification

You can ask us to correct inaccurate personal data or complete incomplete data we hold about you.

Right to Erasure

You can request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, when you withdraw consent, or when you object to processing and there are no overriding legitimate grounds.

Right to Restriction

You can ask us to restrict processing of your personal data while we verify accuracy, assess legitimate interests, or where processing is unlawful but you do not want deletion.

Right to Data Portability

Where we process your data based on consent or contract performance, you can request a machine-readable copy of your data to transfer to another provider.

Right to Object

You can object to processing based on legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests. You can always object to direct marketing processing.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects. Should this change, we will update this notice accordingly.

International Data Transfers

As an Australian company, data you provide may be transferred to and stored in Australia, which is outside the EEA. Australia has not received an adequacy decision from the European Commission. Where we transfer data to Australia, we rely on Standard Contractual Clauses approved by the European Commission to ensure appropriate safeguards.

We also use service providers who may process data in other jurisdictions. We ensure appropriate safeguards are in place for any such transfers, including Standard Contractual Clauses where applicable.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. When determining retention periods, we consider the nature and sensitivity of the data, potential harm from unauthorised use, and applicable legal requirements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond within one month, though this may be extended by two months for complex requests, in which case we will notify you.

We provide this service free of charge, though we may charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.

Complaints

If you believe we have not handled your data appropriately, please contact us first so we can try to resolve your concerns. You also have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or where an alleged infringement occurred.

Updates to This Notice

We may update this GDPR notice from time to time. The date at the top indicates the last revision. We encourage you to review this notice periodically for any changes.