Information for European Economic Area visitors about data protection rights.
Last updated: January 2024
The General Data Protection Regulation (GDPR) provides individuals in the European Economic Area (EEA) with specific rights regarding their personal data. This page explains how we comply with GDPR requirements when processing data of EEA residents.
For the purposes of GDPR, cosmic-snow acts as the data controller for personal information collected through this website and our booking services.
cosmic-snow
42 Harbour Drive
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data of EEA residents under the following legal bases:
Processing necessary to fulfil a rental booking or other service you have requested from us.
Processing required to comply with laws applicable to our business, including tax regulations and road safety requirements.
Processing for our legitimate business interests, such as improving our services, preventing fraud, and maintaining security, where these interests are not overridden by your rights.
Where required, we obtain your explicit consent before processing certain types of data, such as marketing communications.
As an EEA resident, you have the following rights:
You can request a copy of the personal data we hold about you. We will provide this information within one month of your request.
You can ask us to correct any inaccurate personal data or complete incomplete data we hold about you.
You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.
You can ask us to limit how we use your data while we address a concern you have raised about accuracy or our processing activities.
You can request your personal data in a structured, commonly used format to transfer to another service provider.
You can object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request.
We will respond to all legitimate requests within one month. If your request is complex, we may extend this period by up to two additional months, but we will inform you of any such extension.
As we are based in Australia, personal data collected from EEA residents is transferred outside the EEA. We ensure appropriate safeguards are in place for such transfers, which may include:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Rental transaction records are typically retained for seven years to comply with legal and regulatory requirements.
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
We may update this GDPR information from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.
This information supplements our main Privacy Policy and is provided specifically for visitors from the European Economic Area. For complete information about our data practices, please also review our full Privacy Policy.