GDPR Compliance
Last Updated: September 10, 2026
Overview
ocean-voyage is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Australian Privacy Principles.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: You have given explicit consent for processing your personal data for specific purposes
- Contract: Processing is necessary for fulfilling service agreements
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving services
Data Controller
ocean-voyage Research Institute
Level 8, 142 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another organization
- Right to Object: Object to processing of your personal data
- Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving your request.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Typically, this means:
- Service request data: 3 years from last contact
- Purchased material access records: 5 years for financial compliance
- Cookie consent records: 12 months
Data Security
We implement appropriate technical and organizational measures including encryption, access controls, and regular security assessments to protect your personal data.
Data Transfers
Personal data is processed and stored within Australia. If data is transferred outside Australia, we ensure appropriate safeguards are in place.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992
Updates to This Notice
We may update this GDPR compliance notice periodically. Changes will be posted on this page with an updated revision date.