Data Protection

Our Commitment to Data Protection

ash-bison Pty Ltd is committed to protecting your personal data and respecting your privacy rights. This page provides additional information about how we handle personal data, particularly for visitors from the European Economic Area (EEA) under the General Data Protection Regulation (GDPR).

Data Controller

ash-bison Pty Ltd is the data controller responsible for your personal data.

Your Data Protection Rights

Under data protection law, you have rights including:

Right of Access

You have the right to request copies of the personal data we hold about you. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten".

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us using the details above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

If your request is complex or we receive a large number of requests, we may extend this period by a further two months. We will inform you of any such extension within one month of receiving your request.

Legal Basis for Processing

We will only process your personal data when we have a lawful basis to do so. The legal bases we rely on include:

• Performance of a contract: Processing your data is necessary to provide our rental services to you.
• Legal obligation: We may need to process your data to comply with laws and regulations.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests.
• Consent: Where you have given us explicit consent to process your data for a specific purpose.

International Data Transfers

As we are based in Australia, your data may be transferred to, and processed in, Australia. Australia is not currently considered by the European Commission to provide an adequate level of data protection.

When we transfer data from the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules where applicable
• Other mechanisms approved under data protection law

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorised use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Applicable legal requirements

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you without human intervention.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with a supervisory authority. For EEA residents, this is the data protection authority in your country of residence. In Australia, you may contact the Office of the Australian Information Commissioner (OAIC).

Updates to This Information

We may update this data protection information from time to time. Any changes will be posted on this page with an updated revision date.