GDPR Compliance Statement

Overview

While Predibison operates primarily within Australia and is governed by Australian privacy legislation, we recognize that some clients or website visitors may be located in the European Union. This statement outlines our approach to data protection principles aligned with the General Data Protection Regulation where applicable.

Lawful Basis for Processing

When we process personal data of individuals in the EU, we rely on the following lawful bases:

• Consent: Where you have provided explicit consent for specific processing activities
• Contract: Where processing is necessary to fulfill service agreements for fuel analysis
• Legitimate Interests: Where processing serves our legitimate business interests while respecting your rights and freedoms
• Legal Obligation: Where processing is required to comply with applicable legal requirements

Individual Rights

Individuals whose data is processed in accordance with GDPR principles have the following rights:

• Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data
• Right to Rectification: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You may request limitation of how we process your data in specific situations
• Right to Data Portability: You may request transfer of your data in a structured, commonly used format
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
• Rights Related to Automated Decision-Making: You have rights regarding automated decision-making and profiling, though we do not currently employ such processes

Data Protection Principles

We process personal data in accordance with the following principles:

• Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and with transparency regarding processing activities
• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in incompatible ways
• Data Minimization: We collect only data adequate, relevant, and necessary for the purposes stated
• Accuracy: We take reasonable steps to ensure personal data is accurate and kept up to date
• Storage Limitation: Data is retained only as long as necessary for the purposes for which it was collected
• Integrity and Confidentiality: We implement appropriate security measures to protect personal data
• Accountability: We maintain records demonstrating compliance with data protection principles

International Data Transfers

Our data processing activities occur primarily within Australia. If personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or verification of adequate data protection frameworks in the destination jurisdiction.

Data Breach Notification

In the event of a data breach that poses risks to individual rights and freedoms, we will notify affected individuals and relevant supervisory authorities within the timeframes required by applicable regulations. Notifications will include information about the nature of the breach, likely consequences, and measures taken to address it.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the details provided below. We will respond to requests within one month, though this period may be extended by two additional months for complex requests. We will inform you of any extension and the reasons for delay.

We may require verification of your identity before processing certain requests to ensure data is disclosed only to authorized individuals.

Supervisory Authority

If you are located in the EU and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with the supervisory authority in your jurisdiction. Contact details for EU data protection authorities can be found on the European Data Protection Board website.

Contact Information

For questions regarding data protection practices or to exercise your rights, please contact:

Predibison
Level 12, 480 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]

Updates to This Statement

This GDPR compliance statement may be updated periodically to reflect changes in our practices or regulatory requirements. Material changes will be communicated through website notification or direct communication with affected individuals where appropriate.