GDPR Compliance Statement

Last Updated: July 14, 2026

Overview

Although crater-elk operates primarily in Australia, we recognize that some visitors to our website may be located in the European Union. This document outlines our compliance with the General Data Protection Regulation (GDPR) for EU residents.

Legal Basis for Processing

When we process personal data of EU residents, we do so under one or more of the following legal bases:

• Consent: You have explicitly agreed to our processing your personal information for specific purposes
• Contractual Necessity: Processing is necessary to fulfill a contract with you or take steps at your request prior to entering a contract
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Legal Obligation: Processing is required to comply with applicable laws

Your Rights Under GDPR

If you are located in the EU, you have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your data protection rights.

Data Processing Activities

What We Collect

• Contact information: name, email address
• Technical data: IP address, browser type, device information
• Usage data: pages visited, interaction with website features
• Communication data: inquiry content, service preferences

How We Use It

• Responding to inquiries about solar energy solutions
• Providing quotes and consultation services
• Improving website functionality and user experience
• Complying with legal obligations

How Long We Keep It

• Inquiry data: 2 years from last contact
• Customer records: Duration of service relationship plus 7 years
• Marketing data: Until consent is withdrawn

International Data Transfers

Personal data collected from EU residents may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients are subject to adequate data protection standards

Data Security Measures

We implement technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Staff training on data protection practices
• Incident response procedures

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Third-Party Data Sharing

We do not sell personal data to third parties. We may share data with:

• Service providers who assist with business operations, subject to data processing agreements
• Legal authorities when required by law

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, contact us at:

Email: [email protected]
Address: 127 Collins Street, Melbourne, Victoria 3000, Australia

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.