fjord-starling

1. Introduction

While Fjord-starling is an Australian company primarily subject to Australian Privacy Principles, we recognize the importance of GDPR compliance for any European Union residents who may interact with our website. This document outlines our commitment to data protection standards consistent with GDPR requirements.

2. Data Controller

Fjord-starling acts as the data controller for personal information collected through this website.

Contact details:
Email: [email protected]
Address: Unit 14, 287 Pacific Highway, North Sydney NSW 2060, Australia

3. Lawful Basis for Processing

We process personal data based on the following lawful grounds:

Consent: When you submit forms or agree to communications
Contract: To fulfill service requests and installation agreements
Legitimate Interests: To improve our services and respond to inquiries
Legal Obligation: To comply with applicable laws and regulations

4. Your Rights Under GDPR

If you are an EU resident, you have the following rights:

Right of Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Request transfer of your data to another service
Right to Object: Object to processing based on legitimate interests
Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling

5. Data We Collect

We collect the following categories of personal data:

Contact information (name, email, postal code)
Property details (for system sizing and installation)
Energy usage information (to recommend appropriate solutions)
Communication records (emails, inquiries, support requests)
Technical data (IP address, browser type, cookies)

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined or as required by law. Specific retention periods:

Inquiry forms: 2 years from last contact
Customer records: Duration of warranty period plus 1 year
Installation documentation: 10 years (legal requirement)
Marketing consent: Until consent is withdrawn

7. Data Sharing and Transfers

We do not sell personal data. We may share data with:

Installation partners (within Australia)
Service providers bound by confidentiality agreements
Legal authorities when required by law

If data is transferred outside the EU, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

8. Security Measures

We implement technical and organizational measures to protect personal data, including:

Encrypted data transmission (SSL/TLS)
Access controls and authentication
Regular security assessments
Employee training on data protection

9. Cookies and Tracking

We use cookies to enhance user experience. You can control cookie preferences through browser settings or our cookie banner. See our Cookies Policy for detailed information.

10. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours where required by law.

11. Withdrawing Consent

You may withdraw consent for data processing at any time by contacting us. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

12. Exercising Your Rights

To exercise any of your GDPR rights, contact us at:

Email: [email protected]
Subject line: "GDPR Request"

We will respond to requests within one month. Complex requests may require up to three months, in which case we will inform you of the extension.

13. Supervisory Authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority in the EU.

14. Updates to This Policy

We may update this GDPR compliance statement periodically. Changes will be posted on this page with an updated revision date.

GDPR Compliance