Last Updated: 27 September 2023

 

1. Introduction

 

Welcome to ULTIMO/Studios! At ULTIMO/Studios, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, share, and protect your personal data when you visit our website at [www.ultimostudios.org] (the "Website") and use our services.

 

By accessing or using our Website and services, you consent to the practices described in this Privacy Policy.

 

2. Information We Collect

 

We collect various types of personal data to provide and improve our services. The types of personal data we may collect include:

 

• Identity Data: Information that can be used to identify you, such as your name and email address.

• Usage Data: Information about how you use our Website, including your IP address, browser type, and operating system.

• Cookies and Tracking Technologies: We may use cookies and similar technologies to collect information about your interactions with our Website.

• Third-Party Data: We may receive information from third-party sources, such as social media platforms, when you interact with our content.

 

3. Lawful Basis for Processing

 

We process your personal data under the following lawful bases:

 

• Contractual Necessity: To perform the service you have signed up for.

• Legitimate Interests: Pursuant to our legitimate interests, provided they do not override your interests or fundamental rights and freedoms.

• Consent: With your explicit consent.

• Legal Obligations: To comply with legal obligations.

 

4. How We Use Your Personal Data

 

We use your personal data for various purposes, including:

• Providing and improving our services.

• Communicating with you, including responding to your inquiries.

• Personalizing your experience on our Website.

• Analyzing usage patterns and trends.

• Marketing and promoting our products and services.

• Complying with legal obligations.

​

5. How We Share Your Personal Data

 

We may share your personal data with third parties in the following circumstances:

 

• With your consent.

• To our service providers who help us with various aspects of our business.

• To comply with legal obligations.

• In connection with a business transfer or merger.

• To protect our rights, privacy, safety, or property, or that of our users and others.

 

6. Your Rights Under GDPR

 

Under the GDPR, you have the following rights regarding your personal data:

 

• The right to access your personal data.

• The right to rectify inaccurate personal data.

• The right to erasure (the "right to be forgotten").

• The right to restrict processing.

• The right to data portability.

• The right to object to processing.

• The right not to be subject to automated decision-making, including profiling.

 

7. Security

We take data security seriously and have implemented robust measures to safeguard your personal data. We are committed to protecting your personal data from unauthorized access, disclosure, alteration, or destruction. Here are some of the security measures we have in place:

 

• Encryption: We use industry-standard encryption protocols to secure the transmission of data between your device and our servers. This includes the use of Secure Sockets Layer (SSL) technology to encrypt data during transmission.

• Access Control: Access to your personal data is restricted to authorized personnel only. We employ strict access controls and user authentication mechanisms to ensure that only those with a legitimate need can access and process your data.

• Regular Security Audits: We conduct regular security audits and assessments of our systems to identify and address vulnerabilities. This includes penetration testing and vulnerability scanning.

• Data Minimization: We collect and retain only the data necessary to provide our services. We do not store personal data longer than required for the purposes specified in this Privacy Policy.

• Employee Training: Our employees are trained on data protection and security best practices. They are aware of the importance of maintaining the confidentiality and integrity of your personal data.

• Incident Response Plan: We have an incident response plan in place to promptly address and mitigate any security incidents or data breaches. In the event of a breach, we will comply with our legal obligations to notify you and the relevant authorities.

 

 

While we take these measures to protect your data, it's important to understand that no method of transmission or storage is entirely secure. Therefore, we cannot guarantee the absolute security of your personal data. We encourage you to also take precautions to protect your data, such as choosing strong, unique passwords and keeping them confidential.

 

If you become aware of any security issues or have concerns about the security of your personal data, please contact us immediately using the contact information provided in Section 9 below.

 

By using our services, you acknowledge that the transmission of information over the internet is inherently risky, and you accept these risks. We are committed to continuously improving our security measures to enhance the protection of your data.

​

8. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Privacy Policy on our Website and revise the "Last Updated" date accordingly.

 

                     

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your GDPR rights, please contact us at:

 

Attention: Privacy Officer

ULTIMO/Studios

PO Box 63

Ultimo, NSW, 2007

Australia

 

Email: privacy@ultimostudios.com