GDPR Compliance

Last Updated: November 3, 2026

1. Overview

While Verse-snow operates primarily within Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for European Union residents who may access our services. This document outlines how we comply with GDPR principles and protect the rights of EU data subjects.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for fulfilling our contractual obligations to provide consulting services
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

3. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

3.1 Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

3.2 Right to Rectification

You have the right to request correction of inaccurate personal data and to complete incomplete data.

3.3 Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes it was collected.

3.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions.

3.5 Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.

3.6 Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.

3.7 Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

4. Data Processing Activities

We collect and process the following categories of personal data:

• Identity data: name, email address
• Vehicle data: make, model, year, powertrain type
• Usage data: driving patterns, route information, charging infrastructure access
• Technical data: IP address, browser type, device information
• Communication data: consultation requests, correspondence

5. International Data Transfers

As we operate from Australia, any data you provide may be transferred to and stored in Australia. We ensure appropriate safeguards are in place for international data transfers, including implementing standard contractual clauses approved by the European Commission where applicable.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Consultation records: 5 years after service completion
• Communication records: 3 years after last contact
• Marketing consent data: until consent is withdrawn
• Website analytics data: 26 months

7. Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection principles
• Incident response procedures

8. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in high risk, we will also notify affected individuals without undue delay.

9. Third-Party Data Processors

We work with carefully selected third-party service providers who process personal data on our behalf. All processors are bound by data processing agreements that ensure GDPR compliance and implement appropriate security measures.

10. Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: Level 14, 234 Collins Street, Melbourne VIC 3000, Australia

We will respond to your request within one month. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.

11. Supervisory Authority

If you are located in the EU and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority.

12. Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our data processing practices or legal requirements. Significant changes will be communicated through our website and, where appropriate, via email.