Privacy Policy
This policy explains how personal information is handled in connection with Astral Base (astralbase.online). It is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) in mind, and, because the publisher is established in France, with the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The organisation responsible for personal information handled through this site is BHP CONSULTING:
BHP CONSULTING89 Rue de Charenton, 75012 Paris, France
Company number: 929692184
VAT: FR62929692184
Email: info@astralbase.online
2. What is collected
The short answer is very little. The site has no forms, no accounts, no comments, no newsletter, no analytics, no advertising tags and no cookies. Specifically:
- Through the site's pages: nothing. No page asks you for information, and no script on the site records what you do.
- Server logs: when your browser requests a page, the hosting provider's web server automatically records the request. Each log entry contains your IP address, your browser's user agent string (which describes the browser and operating system), the address of the page requested, the date and time, and the response status. Your browser may also send the address of the page that linked you here, which can be logged with the request.
- Email: if you write to info@astralbase.online, we receive your email address, your name if you include it, and whatever you choose to put in the message.
The site loads no fonts, scripts or images from any other host, so no third party receives a request from your browser when you view a page here.
When you follow an affiliate link, you leave this site. The affiliate network and the vendor then handle your information under their own privacy policies, not this one.
3. Why it is collected, and on what basis
- Server logs are kept to deliver pages, keep the site secure, detect abuse and diagnose faults. Under the GDPR, the basis is our legitimate interest in operating a secure and working website.
- Emails are kept so that we can reply and keep a record of corrections and requests. Under the GDPR, the basis is our legitimate interest in answering correspondence, or, where you ask us to act on a privacy right, our legal obligation to respond.
We do not use either category for marketing, profiling or advertising, and we do not sell personal information.
4. How long it is kept
- Server logs: 30 days, after which they are deleted. A log entry relating to a specific security incident may be kept for as long as the incident is being investigated, and no longer than 12 months.
- Emails: 24 months after our last exchange with you, unless you ask us to delete them sooner and there is no reason we must keep them.
5. Who it is disclosed to
Server logs are created and stored by the web hosting provider that serves this site, which processes them on our behalf. Emails are stored by our email service provider. Neither may use the information for its own purposes. We do not disclose personal information to anyone else unless the law requires it.
Disclosure outside Australia (APP 8). BHP CONSULTING is established in France, and the site is operated from outside Australia. Personal information handled through the site, including server logs and emails, is therefore held and processed by recipients outside Australia, including in France and the European Union. We take reasonable steps to ensure those recipients handle it consistently with the APPs.
6. How it is protected
The site is served over HTTPS, so pages and requests are encrypted in transit. Access to server logs and to the contact mailbox is limited to the publisher and protected by passwords and multi-factor authentication. Because the site collects nothing through its pages, there is no database of visitor information to protect.
7. Your rights under the APPs
You can ask us for access to personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. In practice the only information we could link to you is your emails to us, and possibly server log entries if you tell us your IP address and the time of your visit.
To make a request or a complaint, email info@astralbase.online. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, which explains the process on its page about privacy complaints.
8. Data breaches
If a data breach involving personal information we hold were likely to cause serious harm, we would notify the individuals affected and the OAIC as described under the Notifiable Data Breaches scheme, and, where the GDPR applies, the relevant supervisory authority.
9. Children
The site is not directed at people under 16, and it collects nothing from anyone through its pages, including children. If a person under 16 emails us, we will use the message only to reply.
10. GDPR and UK GDPR
Because BHP CONSULTING is established in the European Union, the GDPR applies to its handling of personal information. The basis relied on is legitimate interests, as described in section 3: for server logs, keeping the site secure and working; for emails, answering correspondence. Consent is not relied on, because the site sets no cookies and collects nothing that would require it.
You have the right to access your personal data, to have it rectified, to have it erased, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests. To exercise any of these, email info@astralbase.online. You also have the right to lodge a complaint with a supervisory authority; in France, that is the CNIL. If you are in the United Kingdom, the same rights apply under the UK GDPR and you may complain to the Information Commissioner's Office.
11. Changes to this policy
If we change this policy, we will publish the new version on this page with a new effective date. If a change would mean collecting information we do not collect now, such as introducing cookies, the policy will be updated before that collection starts, not after.