GDPR Compliance

Last Updated: August 17, 2026

While hawk-ware operates primarily in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for European visitors and clients. This page outlines our GDPR-compliant data practices.

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you explicitly agree to data processing through form submissions
  • Contract Performance: When processing is necessary to fulfill service agreements
  • Legitimate Interests: For business operations, fraud prevention, and security
  • Legal Obligations: When required by Australian or international law

Data Subject Rights

If you are an EU resident, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of your personal data we hold
  • Right to Rectification: Request correction of inaccurate information
  • Right to Erasure: Request deletion of your data under certain conditions
  • Right to Restriction: Request limited processing of your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Rights Related to Automated Decision-Making: Protection from solely automated decisions

Data Processing Activities

We engage in the following data processing activities:

  • Collection of contact information through web forms
  • Storage of project specifications and enquiry details
  • Email communication for service delivery
  • Analytics tracking for website improvement
  • Cookie-based user experience enhancement

International Data Transfers

Your data is primarily stored and processed in Australia. If data transfer outside Australia occurs, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by relevant authorities
  • Adequacy decisions recognizing equivalent data protection
  • Explicit consent for transfers when required

Data Protection Officer

For GDPR-related enquiries, you may contact our Data Protection Officer at:

Email: [email protected]
Address: Unit 7, 142 Enterprise Drive, Bundamba, QLD 4304, Australia

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing conducted prior to withdrawal.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

  • Your local supervisory authority in the EU
  • The Office of the Australian Information Commissioner (OAIC)

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the information promptly.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.