Your data protection rights
Last updated: January 2024
bold-point is committed to protecting the privacy and security of personal data. This page provides information about how we comply with the General Data Protection Regulation (GDPR) for visitors from the European Union and European Economic Area.
Although bold-point is based in Australia, we recognise that we may process personal data of individuals located in the EU/EEA. We are committed to ensuring that any such processing complies with GDPR requirements.
For the purposes of GDPR, bold-point acts as the data controller for personal information collected through our website and services. Our contact details are:
bold-point
42 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data under the following legal bases as defined by GDPR:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or newsletters.
Where processing is necessary for the performance of a contract with you, such as providing our culinary services or responding to booking enquiries.
Where processing is necessary for our legitimate interests and those interests are not overridden by your rights. This includes improving our services and website functionality.
Where processing is necessary to comply with legal requirements.
If you are located in the EU/EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including:
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by up to two months, but we will inform you of any extension within the first month.
We may need to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it.
As bold-point is based in Australia, any personal data collected from EU/EEA residents may be transferred to Australia. Australia is not considered to have an adequacy decision from the European Commission. Where we transfer data, we ensure appropriate safeguards are in place, such as standard contractual clauses.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it. If the breach is likely to result in a high risk to you, we will also notify you directly.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16 without parental consent.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities can be found on the European Commission website.
However, we encourage you to contact us first so we can try to resolve your concerns directly.
We may update this GDPR information from time to time. We will notify you of significant changes by posting a notice on our website or by other appropriate means.
For any questions about GDPR or to exercise your rights, please contact:
bold-point
42 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]