This page explains your rights under the General Data Protection Regulation (GDPR) when you use our website celebrattropi.com. While Crown Elara Resort & Casino is based in Australia, we serve international guests and are committed to meeting GDPR standards for all visitors from the European Union and European Economic Area.
The data controller for the personal data collected through this website is:
We process your personal data based on one or more of the following legal grounds:
Under the GDPR, you have the following rights regarding your personal data. Below is a detailed explanation of each right.
You have the right to request a copy of the personal data we hold about you. This is sometimes called a "Subject Access Request." We will provide the data in a clear, readable format within 30 days of your request.
To make a request, email [email protected] with the subject line "Data Access Request." We may ask you to verify your identity before we release any data.
If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. We will make the correction without undue delay.
Email [email protected] with the details of the data you want corrected.
Also known as the "right to be forgotten," you can ask us to delete your personal data in certain circumstances. These include:
Note: We may need to keep some data to comply with legal obligations (e.g., financial records). We will inform you if this applies.
You can ask us to restrict (i.e., limit) how we process your data in certain cases. For example:
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format (e.g., CSV or JSON). You can also ask us to transmit that data directly to another controller, where technically feasible.
This right applies to data processed based on consent or contractual necessity, and processed by automated means.
You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. Upon receiving your objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
You can object to direct marketing at any time, and we will stop immediately.
If you have given consent for us to process your data (e.g., by submitting our contact form, opting into push notifications, or accepting analytics cookies), you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
You can manage your cookie preferences by:
You can stop receiving push notifications by:
If you have submitted a contact form and wish to withdraw your consent for us to store and process that data, email [email protected]. We will delete your form data within 30 days.
For a full list of the data we collect and how we use it, please see our Privacy Policy. In summary:
We retain personal data only as long as needed:
Some of our service providers (e.g., OneSignal for push notifications) may process data outside the EU/EEA. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.
Crown Elara Resort & Casino does not currently have a designated Data Protection Officer (DPO) as we are not required to under GDPR Article 37. However, all data protection queries can be directed to our privacy team at [email protected].
To exercise any of your GDPR rights, contact us by:
Please include your full name and the email address associated with your enquiry or account. We will respond within 30 days. If your request is complex, we may extend this by an additional 60 days, and we will notify you of the extension.
If you believe that we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority. For EU/EEA residents, this is the data protection authority in your country of residence. A list of authorities can be found at edpb.europa.eu.
For Australian residents, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We would appreciate the chance to address your concerns before you contact a supervisory authority. Please reach out to us at [email protected] first.
We may update this GDPR information page from time to time. Any changes will be posted here with an updated "Last Updated" date. We recommend checking this page regularly.