GDPR Policy

Last Updated: January 2025

Introduction

This GDPR Policy explains how echoslumen.com complies with the General Data Protection Regulation (GDPR) and protects the rights of individuals in the European Union. This policy supplements our Privacy Policy and provides additional information for EU residents.

echoslumen.com is committed to protecting your personal data and respecting your privacy rights under GDPR.

Data Controller Information

The data controller responsible for your personal information is:

Legal Basis for Processing

We process your personal data under the following legal bases as defined by GDPR:

Consent (Article 6(1)(a))

We process data based on your explicit consent when you:

You can withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Contract Performance (Article 6(1)(b))

We process data necessary to provide our services and fulfill our obligations to you.

Legitimate Interests (Article 6(1)(f))

We process data for our legitimate interests in:

Legal Obligation (Article 6(1)(c))

We process data when required to comply with legal obligations under EU or member state law.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

1. Right to Access (Article 15)

You have the right to obtain confirmation about whether we process your personal data and to access that data. You can request:

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed. Contact us to update your information.

3. Right to Erasure (Article 17)

You have the right to request deletion of your personal data when:

Note that we may retain certain data if required by law or for legitimate business purposes.

4. Right to Restriction of Processing (Article 18)

You have the right to restrict processing of your personal data when:

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can request that we transmit this data directly to another controller where technically feasible.

6. Right to Object (Article 21)

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests.

7. Right Not to Be Subject to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects. We do not engage in such automated decision-making.

8. Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension and reasons.

We may request additional information to verify your identity before processing your request.

Data We Collect

We collect and process the following categories of personal data:

Identity Data

Technical Data

Usage Data

Communication Data

How We Use Your Data

We use your personal data for the following purposes:

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

After the retention period expires, we will securely delete or anonymise your data.

Data Sharing and Transfers

Third-Party Recipients

We may share your data with:

All third parties are required to maintain appropriate security measures and process data only as instructed.

International Transfers

As we are based in Australia, your data may be transferred outside the EU. We ensure adequate protection through:

You can request a copy of the safeguards we have in place by contacting support@echoslumen.com.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

In the event of a data breach, we will notify affected individuals and relevant supervisory authorities within 72 hours as required by GDPR Article 33.

Cookies and Tracking

We use cookies and similar tracking technologies. You can manage your cookie preferences through our cookie consent banner.

Types of Cookies We Use

Managing Cookies

You can:

Note that disabling essential cookies may affect website functionality.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13.

For users aged 13-16, we require parental consent where required by applicable member state law.

If we become aware that we have collected data from a child without appropriate consent, we will delete it promptly.

Automated Processing and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects concerning you.

Any automated processing we conduct (such as analytics) does not result in decisions that affect your rights or create legal obligations.

Data Protection Officer

While we are not required to appoint a Data Protection Officer under GDPR, you can contact our data protection team at:

Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with your local supervisory authority.

You can find your supervisory authority at: https://edpb.europa.eu/about-edpb/board/members_en

Changes to This Policy

We may update this GDPR Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:

We encourage you to review this policy regularly.

Contact Us

For any questions about this GDPR Policy or to exercise your rights, please contact us:

We aim to respond to all GDPR-related requests within one month.

Additional Resources

For more information about GDPR and your rights:

Commitment to Compliance

echoslumen.com is committed to full compliance with GDPR. We regularly review our data protection practices and update our policies and procedures to ensure ongoing compliance.

We respect your privacy rights and take our responsibilities as a data controller seriously.