Verse-spring
Information on this site is advertising in nature

GDPR Compliance

Last Updated: November 3, 2026

Introduction

Verse-spring is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page explains how we process personal data in accordance with GDPR requirements.

Data Controller

Verse-spring acts as the data controller for personal information collected through our website and services.

Contact Details:
Verse-spring
Level 8, 142 Exhibition Street
Melbourne VIC 3000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: You have given explicit consent for processing your personal data for specific purposes.
  • Contractual Necessity: Processing is necessary to perform a contract with you or to take steps before entering into a contract.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
  • Legal Obligation: Processing is necessary to comply with legal obligations.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if requests are manifestly unfounded or excessive.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purposes it was collected
  • You withdraw consent and there is no other legal ground for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects. We do not currently engage in automated decision-making processes.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will notify you accordingly.

Data Collection and Use

We collect and process the following categories of personal data:

  • Identity Data: Name, professional title
  • Contact Data: Email address, correspondence address
  • Technical Data: IP address, browser type, device information
  • Usage Data: Information about how you use our website and services
  • Project Data: Information related to research requests and inquiries

Data Sharing

We share personal data only in the following circumstances:

  • With service providers who process data on our behalf under strict confidentiality agreements
  • When required by law or to protect our legal rights
  • With your explicit consent

We do not sell or rent personal data to third parties.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Providing requested services
  • Complying with legal obligations
  • Resolving disputes
  • Enforcing agreements

When data is no longer required, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Staff training on data protection

International Data Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally approved transfer mechanisms

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Complaints

If you believe we have not processed your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where an alleged infringement occurred.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website.

Contact Us

For questions about GDPR compliance or to exercise your rights, contact us at [email protected].