Data controller information
Mesa-bear acts as the data controller for personal information collected through this website. We are responsible for ensuring that your personal data is processed in accordance with applicable data protection laws.
Legal basis for processing
We process your personal data under the following legal bases:
- Legitimate interests: Processing necessary for responding to inquiries and providing requested information about our services
- Contract performance: Processing necessary to fulfill contractual obligations when you engage our services
- Legal obligation: Processing required to comply with legal and regulatory requirements
- Consent: Where you have provided explicit consent for specific processing activities
Your rights under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data
- Right to rectification: You can request correction of inaccurate or incomplete personal data
- Right to erasure: You can request deletion of your personal data in certain circumstances
- Right to restriction: You can request that we restrict processing of your personal data in certain situations
- Right to data portability: You can request to receive your personal data in a structured, commonly used format
- Right to object: You can object to processing of your personal data based on legitimate interests
- Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time
Data retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Inquiry data: Retained for 24 months after last contact, unless you become a client
- Client data: Retained for the duration of the professional relationship plus 7 years to meet legal and professional obligations
- Cookie data: Retained according to the timeframes specified in our Cookies Policy
After the retention period expires, personal data is securely deleted or anonymized.
International data transfers
Your personal data is processed and stored in Australia. If data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions recognizing equivalent levels of data protection
- Other legally recognized transfer mechanisms
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Data security measures
We implement appropriate technical and organizational measures to protect personal data, including:
- Encryption of data in transit and at rest
- Access controls limiting data access to authorized personnel
- Regular security assessments and updates
- Staff training on data protection obligations
- Incident response procedures for potential data breaches
Data breach notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and no later than 72 hours after becoming aware of the breach, where feasible.
Exercising your rights
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request". Please include:
- Your full name and contact details
- Description of the right you wish to exercise
- Any relevant details to help us locate your information
We will respond to your request within one month, or inform you if we require additional time to process your request.
Right to lodge a complaint
If you believe we have not processed your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. For individuals in the EU, you can find your supervisory authority through the European Data Protection Board website.
Contact information
For questions about our GDPR compliance or to exercise your rights, please contact us at [email protected]