GDPR Compliance

Last updated: January 15, 2024

This page provides information about how Penni Bifer Pte Ltd handles personal data of individuals located in the European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR).

Data Controller

Penni Bifer Pte Ltd acts as the data controller for personal information collected through our website and direct communications. Our contact details are:

Penni Bifer Pte Ltd
71 Robinson Road, #14-01
Singapore 068895
Email: [email protected]

Legal Basis for Processing

We process personal data of EEA residents under the following legal bases:

• Consent: When you voluntarily submit information through our contact forms or subscribe to communications
• Contractual necessity: When processing is required to fulfill service agreements
• Legitimate interests: For business operations, security, and improving our services, balanced against your rights
• Legal obligation: When required to comply with applicable laws

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You may request a copy of the personal data we hold about you, along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You may request that we limit the processing of your personal data in certain situations.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

International Data Transfers

As we are based in Singapore, personal data collected from EEA residents may be transferred to and processed in Singapore. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules where applicable
• Adequacy decisions for Singapore's data protection framework

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically:

• Contact inquiries: 3 years from last interaction
• Client data: Duration of engagement plus 7 years for legal compliance
• Marketing data: Until consent is withdrawn

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Protection Officer

For GDPR-related inquiries or to exercise your rights, please contact:

Data Protection Officer
Email: [email protected]

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority in the EEA.

Updates to This Notice

We may update this GDPR notice periodically. Material changes will be communicated through our website or direct notification where appropriate.