GDPR Compliance

General Data Protection Regulation compliance information

Your Rights Under GDPR

If you are a resident of the European Economic Area, you have specific rights regarding your personal data under the General Data Protection Regulation. crisp-labs is committed to upholding these rights.

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you. We will respond to your request within one month.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller without hindrance.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. You also have the absolute right to object to processing for direct marketing purposes.

Right to Withdraw Consent

Where we process your personal data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: when you have given explicit consent for specific processing activities
  • Contract: when processing is necessary to fulfill our contractual obligations to you
  • Legal obligation: when we must process data to comply with legal requirements
  • Legitimate interests: when processing is necessary for our legitimate business interests, provided your rights do not override those interests

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, please contact us at [email protected]

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully or failed to respect your rights.

International Data Transfers

We are based in Australia. If we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, or sooner if required by law.