Your data protection rights under the General Data Protection Regulation.
Last updated: January 2024
keen-pine is committed to protecting the privacy and security of your personal data. This page outlines how we comply with the General Data Protection Regulation (GDPR) and similar data protection laws, and explains your rights regarding your personal information.
For the purposes of data protection legislation, keen-pine is the data controller responsible for your personal data.
Contact details:
Email: [email protected]
Address: 47 Industrial Drive, Richmond, VIC 3121, Australia
We process your personal data under the following legal bases:
Processing necessary to perform our automotive services when you book an appointment or bring your vehicle for repair.
Processing necessary for our legitimate business interests, such as improving our services and communicating with customers, where these do not override your rights.
Processing required to comply with legal obligations, such as maintaining records for warranty purposes or regulatory compliance.
Where you have given explicit consent to process your data for specific purposes, such as receiving marketing communications.
Under data protection law, you have the following rights:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month.
You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for the purpose it was collected, or when you withdraw consent.
You have the right to request that we limit the way we use your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive a copy of your personal data in a structured, commonly used format and to transfer it to another organisation where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or significant effects on you.
To exercise any of these rights, please contact us at:
Email: [email protected]
We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request. If your request is complex or we receive multiple requests, we may extend the response period by two months, in which case we will inform you.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
We primarily store and process your data within Australia. If we transfer data outside Australia, we ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures are regularly reviewed and updated to maintain security standards.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.
If you are not satisfied with our response to a request or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority if you are located in the European Economic Area.
Office of the Australian Information Commissioner:
Website: www.oaic.gov.au
We may update this GDPR compliance information periodically. Any changes will be posted on this page with a revised effective date.