GDPR Information

Last updated: August 2026

This page provides additional information for individuals located in the European Economic Area (EEA) regarding their rights under the General Data Protection Regulation (GDPR). This information supplements our Privacy Policy.

Data Controller

cartocogli is the data controller responsible for your personal data. Our contact details are:

cartocogli
42 Artisan Lane
Fitzroy, VIC 3065
Australia

Email: [email protected]

Your Rights Under GDPR

If you are located in the EEA, you have the following rights concerning your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request, free of charge in most circumstances.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you. We will respond to such requests within one month.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently make such automated decisions.

Legal Basis for Processing

We process personal data of EEA residents on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.

Data Transfers Outside the EEA

As we are based in Australia, your personal data may be transferred to and processed outside the EEA. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other appropriate safeguards as permitted by applicable law

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our obligations.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the details provided. We may request specific information from you to help us confirm your identity and ensure your right to access your personal data. We will respond to all legitimate requests within one month.

Complaints

If you are not satisfied with our response to your request or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.

Changes to This Information

We may update this GDPR information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.