Data Protection - ruby-summit

Last Updated: January 2024

Our Commitment to Data Protection

Ruby-summit is committed to protecting your personal data and respecting your privacy rights. This page provides information about how we handle personal data in compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area and similar frameworks worldwide.

Data Controller

Ruby-summit acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.

Contact details:
Ruby-summit
Level 12, 45 Clarence Street
Sydney NSW 2000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
Contract: Where processing is necessary for the performance of a contract with you, such as providing language education services.
Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
Legal Obligation: Where processing is necessary for compliance with legal obligations.

Your Data Protection Rights

Under data protection laws, you may have the following rights:

Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete personal data.
Right to Erasure: You can request deletion of your personal data in certain circumstances.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Object: You can object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details above. We will respond to your request within 30 days.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the nature of the data and the purposes of processing:

Enquiry data: Retained for 2 years from the date of enquiry
Student records: Retained for 7 years after course completion
Financial records: Retained as required by Australian tax law

International Data Transfers

As an Australian-based organisation, we primarily store and process data within Australia. If we transfer personal data outside Australia, we ensure appropriate safeguards are in place to protect your data, including standard contractual clauses or other approved transfer mechanisms.

Data Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

Encryption of data in transit and at rest
Access controls limiting data access to authorised personnel
Regular security assessments and updates
Staff training on data protection practices

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC). In the European Union, you may contact your local data protection authority.

Updates to This Information

We may update this data protection information periodically. Any significant changes will be communicated through our website or direct notification where appropriate.