GDPR Compliance

General Data Protection Regulation

Crisp-glacier is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area and other jurisdictions where applicable.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to deliver services you have requested
• Legal Obligation: When we must process data to comply with applicable laws and regulations
• Legitimate Interest: When processing serves our legitimate business interests while respecting your privacy rights

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data along with information about the processing.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

Under certain circumstances, you may request deletion of your personal data. This right is not absolute and may be limited by legal retention obligations.

Right to Restriction

You may request restriction of processing in specific situations, such as when you contest data accuracy or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant impacts.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, you may contact our data protection contact:

Email: [email protected]

Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws.

Data Breach Notification

In the event of a personal data breach that poses risks to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware of the breach.

How to Exercise Your Rights

To exercise any of your GDPR rights, please submit a written request to:

Crisp-glacier
Level 14, 283 George Street
Sydney NSW 2000, Australia
Email: [email protected]

We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

• Inquiry data: 2 years from last contact
• Active service accounts: Duration of service plus 7 years
• Transaction records: 7 years as required by financial regulations
• Marketing consent: Until withdrawn or after 3 years of inactivity

Cookies and Tracking Technologies

We use cookies and similar technologies in accordance with GDPR requirements. You can manage cookie preferences through our cookie banner and browser settings. See our Cookies Policy for detailed information.