Information for European Union residents regarding data protection
This page provides additional information for individuals located in the European Economic Area (EEA) or the United Kingdom regarding how Peak-lark processes personal data in accordance with the General Data Protection Regulation (GDPR).
Peak-lark acts as the data controller for personal information collected through this website. Our contact details are:
Peak-lark
Level 14, 225 George Street
Sydney NSW 2000, Australia
Email: [email protected]
We process personal data of EEA and UK residents based on the following legal grounds under GDPR:
Where you have provided explicit consent for specific processing activities, such as receiving marketing communications.
Where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.
Where processing is necessary to comply with legal requirements applicable to us.
Where processing is necessary for our legitimate interests, provided these are not overridden by your rights. Our legitimate interests include improving our services, preventing fraud, and ensuring network security.
As a data subject under GDPR, you have the following rights:
As we are based in Australia, personal data collected from EEA or UK residents may be transferred to and processed in Australia. Australia has been granted adequacy status by the European Commission, meaning it provides an adequate level of data protection.
Where we engage service providers located in other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account:
When data is no longer required, we securely delete or anonymise it.
We do not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.
Given the nature and scale of our data processing activities, we have not appointed a formal Data Protection Officer. However, privacy enquiries can be directed to our privacy contact at [email protected].
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would typically be the data protection authority in your country of residence. For UK residents, this would be the Information Commissioner's Office (ICO).
We encourage you to contact us first so we can attempt to resolve your concerns directly.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by up to two additional months, in which case we will inform you.
We may request verification of your identity before processing your request to ensure the security of your personal data.
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically.