Last Updated: July 23, 2026
Introduction
While glen-serval operates primarily in Australia, we recognize that individuals from European Economic Area countries may visit our website. This document outlines our approach to data protection principles consistent with the General Data Protection Regulation framework.
For comprehensive information about our privacy practices under Australian law, please refer to our Privacy Policy.
Legal Basis for Processing
When we process personal data, we do so based on one or more of the following legal grounds:
- Consent: You have explicitly agreed to our processing your personal data for specific purposes
- Contract Performance: Processing is necessary to fulfill service agreements or respond to service requests
- Legal Obligation: We must process data to comply with legal requirements
- Legitimate Interests: Processing is necessary for legitimate business operations, provided this does not override your fundamental rights and freedoms
Data We Collect and Why
Service Request Information
Data Collected: Name, email address, vehicle information, service preferences
Legal Basis: Contract performance, consent
Purpose: Processing service requests, scheduling appointments, providing automotive services
Retention Period: Duration of service relationship plus legal retention requirements
Website Usage Data
Data Collected: IP address, browser information, pages visited
Legal Basis: Legitimate interests
Purpose: Website security, functionality improvement, technical troubleshooting
Retention Period: Temporarily stored for technical operations
Your Rights Under GDPR
If GDPR applies to you, you have the following rights regarding your personal data:
Right to Access
You have the right to request confirmation of whether we process your personal data and to receive a copy of that data. We will provide this information in a commonly used electronic format.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete data. We will respond to rectification requests without undue delay.
Right to Erasure
Also known as the "right to be forgotten," you may request deletion of your personal data when:
- The data is no longer necessary for the purposes it was collected
- You withdraw consent and no other legal basis exists for processing
- You object to processing and no overriding legitimate grounds exist
- The data has been unlawfully processed
- Legal obligations require erasure
This right is not absolute and may be limited by legal retention requirements or other legitimate grounds.
Right to Restriction of Processing
You may request that we limit how we use your personal data when:
- You contest the accuracy of the data
- Processing is unlawful but you prefer restriction to erasure
- We no longer need the data but you require it for legal claims
- You have objected to processing pending verification of legitimate grounds
Right to Data Portability
Where processing is based on consent or contract performance and carried out by automated means, you may request to receive your personal data in a structured, commonly used, machine-readable format. You may also request direct transmission to another controller where technically feasible.
Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for establishment, exercise, or defense of legal claims.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement, if you believe our processing violates data protection law.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with:
- Clear identification of which right you wish to exercise
- Sufficient information to verify your identity
- Specific details about the data or processing in question
We will respond to requests without undue delay and within one month of receipt. This period may be extended by two additional months where necessary, considering the complexity and number of requests. We will inform you of any extension within the initial one-month period.
Data Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Pseudonymization and encryption where appropriate
- Measures to ensure ongoing confidentiality, integrity, availability, and resilience of processing systems
- Capability to restore availability and access to personal data in a timely manner following incidents
- Regular testing and evaluation of security measure effectiveness
Data Transfers
Personal data is primarily processed and stored within Australia. If data is transferred to countries outside the European Economic Area, we ensure appropriate safeguards are in place, such as:
- European Commission adequacy decisions
- Standard contractual clauses approved by the European Commission
- Other legally approved transfer mechanisms
Automated Decision-Making
We do not employ automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
Data Protection Officer
For questions specifically related to GDPR compliance and data protection matters, you may contact us at:
glen-serval
Unit 7, 142 Industrial Drive
Melbourne VIC 3000
Australia
Email: [email protected]
Changes to This Information
We may update this GDPR compliance information periodically. Material changes will be communicated through website notice, and the "Last Updated" date will reflect the most recent revision.