GDPR Compliance

Last Updated: January 2024

1. Overview

Lettte Telep is committed to complying with the General Data Protection Regulation (GDPR) for all individuals whose personal data we process, regardless of their location. This page explains your rights under GDPR and how we protect your data.

2. Data Controller

Lettte Telep acts as the data controller for personal information collected through our website and educational services. Our contact details are:

Email: [email protected]
Address: 68 Orchard Road, #04-15 Plaza Singapura, Singapore 238839

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit enquiries or marketing preferences
• Contract: When necessary to provide educational services you have enrolled in
• Legal Obligation: When required to comply with applicable laws
• Legitimate Interest: When improving our services or protecting our organisation

4. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete data
• Right to Erasure: You may request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You may request limitation of how we use your data
• Right to Data Portability: You may request your data in a structured, machine-readable format
• Right to Object: You may object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing

5. Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, this may be extended by two months, and we will inform you of any extension.

We may request verification of your identity before processing your request. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

6. Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries deemed adequate by the European Commission
• Binding corporate rules where applicable

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected. Retention periods vary based on data type:

• Enquiry data: 2 years from last contact
• Student records: 7 years after enrolment ends
• Financial records: As required by applicable law

8. Data Security

We implement technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

9. Data Breaches

In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the relevant supervisory authority within 72 hours. Where the breach is likely to result in high risk, we will also notify affected individuals directly.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Singapore, this is the Personal Data Protection Commission (PDPC). EU residents may contact their local data protection authority.

11. Updates

This GDPR information may be updated periodically. We will post changes on this page with an updated revision date.