GDPR Compliance

Last updated: January 2024

Scope of This Notice

This notice provides additional information for individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland regarding how we process personal data in compliance with the General Data Protection Regulation (GDPR) and equivalent legislation.

Data Controller

Cove Field acts as the data controller for personal data collected through our website and services. Our contact details are:

Cove Field
Level 28, 123 Pitt Street
Sydney NSW 2000, Australia
Email: [email protected]

Legal Bases for Processing

We process personal data under the following legal bases:

• Consent: Where you have provided explicit consent for specific processing activities
• Contract: Where processing is necessary to perform a contract with you or take pre-contractual steps at your request
• Legal Obligation: Where processing is required to comply with applicable laws and regulations
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of Access

You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is processed.

Right to Rectification

You may request that we correct inaccurate personal data or complete incomplete data we hold about you.

Right to Erasure

In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be subject to legal retention requirements.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of data you have disputed.

Right to Data Portability

Where technically feasible, you may request to receive your personal data in a structured, commonly used, machine-readable format or have it transmitted to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

International Data Transfers

As we are based in Australia, personal data from the EEA may be transferred to and processed in Australia. When transferring personal data internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by the European Commission
• Ensuring the recipient country provides adequate protection as determined by the European Commission
• Obtaining your explicit consent for specific transfers where appropriate

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account legal, regulatory, and operational requirements. When data is no longer required, it is securely deleted or anonymised.

Data Protection Officer

For enquiries related to GDPR compliance or to exercise your data protection rights, please contact:

Email: [email protected]

Supervisory Authority

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with a supervisory authority in your country of residence. For EEA residents, a list of supervisory authorities is available on the European Data Protection Board website.

Changes to This Notice

We may update this GDPR notice from time to time. Material changes will be communicated through our website or by direct notification where appropriate.