← Back to Home

GDPR Rights & Data Protection

Your Rights Under Australian Privacy Principles & GDPR

1. Data Controller Information

Data Controller: Artisan Treasures (floshstudio.com)
Address: 83 Toorak Road, Victoria 3141, Australia
Email: support@floshstudio.com
Data Protection Officer: info@floshstudio.com

2. Your Data Protection Rights

Under the Australian Privacy Principles and GDPR (where applicable), you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service to cover administrative costs.

How to exercise: Submit a data access request using the form below or email us directly.

Response time: We will respond within 30 days of receiving your request.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

How to exercise: Contact us with details of the information you believe needs correction.

Response time: We will make corrections within 30 days of verification.

Right to Erasure (Right to be Forgotten)

You have the right to request that we erase your personal data, under certain conditions such as when the data is no longer necessary for the original purpose.

Limitations: We may need to retain some information for legal compliance, warranty obligations, or legitimate business interests.

How to exercise: Submit a deletion request specifying what data you want removed.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.

Effect: We will store your data but not process it further without your consent.

How to exercise: Contact us explaining why you want processing restricted.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Format: Data will be provided in a structured, commonly used, and machine-readable format.

How to exercise: Request data portability through our contact form or email.

Right to Object

You have the right to object to our processing of your personal data, under certain conditions including processing for direct marketing purposes.

Marketing: You can opt-out of marketing communications at any time.

How to exercise: Use unsubscribe links in emails or contact us directly.

3. Cookie Preferences

Manage Your Cookie Preferences

You can control which cookies we use on our website. Note that disabling certain cookies may affect website functionality.

Necessary Cookies

Required for website functionality. Cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website.

Marketing Cookies

Used to track visitors across websites for marketing purposes.

4. How to Withdraw Consent

Where we process your data based on your consent, you have the right to withdraw that consent at any time:

  • Email Marketing: Use the unsubscribe link in any email or contact us directly
  • Website Cookies: Use the cookie preference center above
  • Data Processing: Contact us to withdraw consent for specific data processing activities
  • Workshop Communications: Opt-out of workshop notifications through your account or by contacting us

5. Data Breach Notification

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach. The notification will include:

  • Nature of the personal data breach
  • Likely consequences of the breach
  • Measures taken or proposed to address the breach
  • Contact details for further information

6. International Data Transfers

When we transfer your data outside Australia, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions by the Australian Privacy Commissioner
  • Certification schemes and codes of conduct
  • Explicit consent for specific transfers

7. Automated Decision-Making

We do not use automated decision-making or profiling that would significantly affect you. Any automated processing we use (such as website analytics) is for operational purposes only and does not impact your rights or services.

8. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for any new processing activities that may pose high risks to your privacy. These assessments help us identify and mitigate potential privacy risks.

9. Submit a Data Rights Request

Data Rights Request Form

10. Complaints and Escalation

If you're not satisfied with how we handle your data rights request, you can:

  • Contact our Data Protection Officer: info@floshstudio.com
  • Lodge a complaint with the Australian Privacy Commissioner: www.oaic.gov.au
  • For EU residents: Contact your local supervisory authority
  • Seek legal advice: Consult with privacy law specialists

11. Contact Information

Data Protection Inquiries:
Email: support@floshstudio.com
Phone: Available upon request
Post: 83 Toorak Road, Victoria 3141, Australia

Response Times:
Data rights requests: Within 30 days
General privacy inquiries: Within 5 business days
Urgent matters: Within 24 hours

Last Updated: January 1, 2025