GDPR Compliance Statement

Last updated: January 15, 2024

Introduction

Although Echo Void Digital is based in Australia, we recognize the importance of General Data Protection Regulation (GDPR) and apply its principles to processing data of all users, including EU citizens.

1. Our Role Under GDPR

Echo Void Digital acts as Data Controller for information we collect through our website and in the process of providing services.

For client data processed as part of marketing campaigns, we act as Data Processor.

2. Legal Basis for Processing

We process your personal data on the following grounds:

  • Consent: when you explicitly gave consent
  • Contract: to fulfill a contract with you
  • Legitimate interests: for our legitimate business interests
  • Legal obligation: to comply with legislation

3. Your Rights Under GDPR

If you are in the EU, you have the right to:

  • Right to access: receive a copy of your data
  • Right to rectification: correct inaccurate data
  • Right to erasure: delete your data ("right to be forgotten")
  • Right to restrict processing: limit processing
  • Right to data portability: receive data in portable format
  • Right to object: object to processing
  • Rights related to automated decision-making

To exercise these rights: [email protected]

4. International Data Transfer

Data transfer from the EU to Australia is carried out using appropriate safeguards:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions (where applicable)
  • Your explicit consent

5. Data Protection Officer

You can contact our Data Protection Officer:

DPO
Echo Void Digital
Email: [email protected]

Response within 30 days.

6. Breach Notification

In case of a data breach affecting your rights, we will notify:

  • You within 72 hours
  • Relevant supervisory authorities
  • Any actions taken to minimize damage

7. Cookies and GDPR

We obtain your explicit consent before using non-essential cookies. You can withdraw consent at any time through our Cookie Control Panel.

8. Complaints

If you believe we violate GDPR, you can lodge a complaint:

  1. Contact us: [email protected]
  2. Contact your local Data Protection Authority
  3. In EU: find your DPA at https://edpb.europa.eu/about-edpb/board/members_en