Information for European Union residents regarding data protection rights.
Last updated: May 2026
Luster Echo respects the privacy of individuals in the European Union (EU) and European Economic Area (EEA) and is committed to complying with the General Data Protection Regulation (GDPR). This page provides additional information about how we handle personal data of EU/EEA residents.
This notice supplements our general Privacy Policy and should be read in conjunction with it.
For the purposes of GDPR, Luster Echo acts as the data controller for personal data collected through our website and in the course of providing our environmental consulting services.
Luster Echo
42 Botanical Gardens Road
Melbourne VIC 3000
Australia
Email: [email protected]
We process personal data of EU/EEA residents on the following legal bases:
As an EU/EEA resident, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you, along with information about how we use it.
You have the right to request correction of any inaccurate personal data we hold about you.
You have the right to request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.
You have the right to request that we restrict processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
As Luster Echo is based in Australia, personal data collected from EU/EEA residents may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection.
Where we transfer data to other countries, we ensure appropriate safeguards are in place to protect your personal data in accordance with GDPR requirements.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws. When personal data is no longer needed, we securely delete or anonymise it.
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month, though this may be extended by two further months for complex requests.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority. This should be the authority in the EU/EEA member state where you live, work, or where the alleged infringement occurred.
We encourage you to contact us first so we can address your concerns directly.
For any questions about our GDPR compliance or to exercise your rights, please contact:
Luster Echo
42 Botanical Gardens Road
Melbourne VIC 3000
Australia
Email: [email protected]