GDPR Compliance

Last updated: September 2024

Our Commitment

Peak Panther is committed to ensuring compliance with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA). This page outlines your rights under GDPR and how we process your personal data.

Data Controller

Peak Panther acts as the data controller for personal information collected through our website and services. Our contact details are:

Peak Panther
42 Studio Lane
Surry Hills NSW 2010
Australia
[email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have given explicit consent for processing for specific purposes
• Contractual Necessity: Processing necessary to perform a contract with you, such as course enrollment
• Legitimate Interests: Processing necessary for our legitimate business interests, balanced against your rights
• Legal Obligation: Processing necessary to comply with legal requirements

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by a further two months, and we will inform you of any such extension.

International Data Transfers

As we are based in Australia, personal data collected from individuals in the EEA may be transferred to and processed in Australia. We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the nature of the data and the purposes of processing.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR requirements.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, workplace, or the place of the alleged infringement.

Updates to This Page

We may update this GDPR compliance information from time to time. Changes will be posted on this page with an updated revision date.