Back to Home

GDPR Policy

Last Updated: 1 January 2024 | Effective Date: 1 January 2024

This policy explains how Queensway Grand Casino Resort complies with the General Data Protection Regulation (GDPR) for visitors from the European Union and European Economic Area. We take data protection seriously for all our guests, regardless of location.

1. Data Controller

The data controller for personal data collected through boardingrestaur.com is:

  • Organisation: Queensway Grand Casino Resort
  • Address: 4 Queenscliff Road, Newcastle, NSW 2300, Australia
  • Email: support@boardingrestaur.com
  • Website: boardingrestaur.com

As the data controller, we decide how and why your personal data is processed. We are responsible for ensuring that processing complies with the GDPR.

2. Your GDPR Rights

If you are located in the EU or EEA, you have the following rights under the GDPR. We extend these rights to all visitors as a matter of best practice.

Right of Access

You can request a copy of all personal data we hold about you. We will provide this within 30 days of your request, free of charge.

Right to Correction

If any data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. We will update your records promptly.

Right to Deletion

You can ask us to delete your personal data. We will do so unless we have a legal reason to keep it (such as regulatory compliance).

Right to Restriction

You can ask us to limit how we process your data. For example, while a complaint is being investigated, we will restrict processing.

Right to Portability

You can request your data in a structured, commonly used, machine-readable format. You can also ask us to transfer it to another controller.

Right to Object

You can object to processing based on legitimate interests or direct marketing. We will stop processing unless we have compelling legal grounds.

3. How to Exercise Your Rights

To exercise any of the rights listed above, you can:

  • Send an email to support@boardingrestaur.com with the subject line "GDPR Request"
  • Write to us at: Queensway Grand Casino Resort, 4 Queenscliff Road, Newcastle, NSW 2300, Australia

We will verify your identity before processing your request. We will respond within 30 days. If your request is complex, we may extend this by up to 60 days, but we will let you know.

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent (Article 6(1)(a)): When you submit a contact form, accept cookies, or opt in to push notifications. You give clear, affirmative consent for each of these.
  • Legitimate Interest (Article 6(1)(f)): For website analytics and security. We have assessed that these interests do not override your rights.
  • Legal Obligation (Article 6(1)(c)): When we are required to process data to comply with Australian law or gaming regulations.

5. Consent and How to Withdraw It

Where we rely on consent, you have the right to withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing done before withdrawal.

5.1 How to Withdraw Consent

  • Email consent: Send an email to support@boardingrestaur.com asking to be removed from our mailing list.
  • Push notifications: You can disable push notifications through your browser settings at any time.
  • Cookies: You can manage or withdraw cookie consent by clearing your browser cookies and revisiting the site. The cookie consent banner will appear again.

6. Managing Cookies

Our cookie consent tool allows you to choose which types of cookies you accept:

  • Essential cookies: Cannot be disabled. They are needed for the site to work.
  • Analytics cookies: You can opt out via the cookie consent banner or by clearing cookies in your browser.
  • Marketing cookies: Disabled by default. Only enabled if you give explicit consent.

To reset your cookie preferences, clear your browser cookies for boardingrestaur.com. When you visit again, the consent banner will reappear.

You can also manage cookies through your browser settings:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Cookies and Site Permissions

7. Data Processing Activities

7.1 Contact Form Submissions

When you fill in our contact form, we collect your name, email, phone (optional), and area of interest. This data is processed to respond to your enquiry. Legal basis: Consent.

7.2 Push Notifications

We use OneSignal to send push notifications. When you opt in, your email and browser data is shared with OneSignal. Legal basis: Consent. You can opt out at any time through your browser.

7.3 Website Analytics

We collect anonymised usage data to understand how visitors use our site. This includes pages viewed, time on site, and device type. No personally identifiable information is included in analytics. Legal basis: Legitimate Interest.

8. Data Transfers Outside the EU

As an Australian-based organisation, your data is stored in Australia. Some of our service providers (such as OneSignal) may process data in the United States. Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses or the service provider's certification under an approved framework.

9. Data Retention

We retain personal data only as long as necessary:

  • Contact form submissions: Up to 24 months after last interaction
  • Push notification data: Until you unsubscribe
  • Cookie consent records: 12 months
  • Analytics data: Up to 26 months (anonymised)

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours
  • Notify affected individuals without undue delay if the breach is high risk
  • Document all breaches and the steps taken in response

11. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:

  • Your local EU/EEA data protection authority (supervisory authority)
  • The Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

We encourage you to contact us first at support@boardingrestaur.com so we can try to resolve your concern directly.

12. Children

Our services are not directed at anyone under 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a person under 18, we will delete it immediately.

13. Updates to This Policy

We may update this GDPR policy from time to time. All changes will be posted on this page with an updated date. We recommend checking this page regularly.

14. Contact the Data Controller

For any questions about this GDPR policy or your data rights:

  • Email: support@boardingrestaur.com
  • Address: Queensway Grand Casino Resort, 4 Queenscliff Road, Newcastle, NSW 2300, Australia
  • Website: boardingrestaur.com