GDPR Compliance

Dext Rautop is committed to compliance with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA). This page outlines our approach to GDPR compliance and your rights under this regulation.

Our Role Under GDPR

When you interact with our website or engage our services, Dext Rautop acts as a data controller for the personal information we collect directly from you. We determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with GDPR requirements.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.

Your Rights Under GDPR

As an individual located in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you and to verify the lawfulness of our processing.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on our legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

International Data Transfers

As we are based in Singapore, personal data collected from individuals in the EEA may be transferred outside the EEA. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with an adequacy decision from the European Commission
• Other legally recognized transfer mechanisms

Data Protection Officer

For questions regarding our GDPR compliance or to exercise your data protection rights, please contact our Data Protection team at:

Email: [email protected]

Supervisory Authority

If you are located in the EEA and believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Exercising Your Rights

To exercise any of your rights under GDPR, please submit a request to us at [email protected]. We will respond to your request within one month of receipt. In some cases, we may extend this period by two additional months where necessary, taking into account the complexity of your request.

We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.