Information on this site is advertising in nature

GDPR Compliance

Last Updated: November 2026

Our Commitment to GDPR

Ovulesoste is committed to compliance with the General Data Protection Regulation (GDPR) and respects the data protection rights of all individuals, regardless of location. This document outlines how we fulfill our obligations under GDPR principles.

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you voluntarily provide information through enrollment forms or communications
  • Contractual Necessity: To fulfill training service agreements and provide requested certifications
  • Legal Obligation: To comply with regulatory requirements for training records and certifications
  • Legitimate Interest: To improve our services and communicate relevant program information

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements for training and certification records.

Right to Restriction of Processing

You may request limitation on how we process your data in certain circumstances.

Right to Data Portability

You may request transfer of your data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal effects concerning you.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

  • Encryption of data transmission and storage
  • Regular security assessments and updates
  • Access controls limiting data access to authorized personnel
  • Staff training on data protection principles
  • Incident response procedures for data breaches

International Data Transfers

If personal data is transferred outside Australia, we ensure appropriate safeguards are in place through standard contractual clauses or other legally approved mechanisms.

Data Retention

Personal data is retained only as long as necessary for the purposes stated, or as required by law. Training and certification records are maintained according to regulatory requirements and industry standards.

Third-Party Processing

When we engage third-party service providers who process personal data on our behalf, we ensure they maintain GDPR-compliant practices through contractual agreements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 247 Industrial Boulevard, Brisbane, QLD 4000, Australia

We will respond to requests within one month, as required by GDPR. In complex cases, this period may be extended by two additional months with notification.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Updates to This Statement

This GDPR compliance statement may be updated to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.