GDPR Compliance

Last updated: May 25, 2026

1. Our Commitment to GDPR

Ferma Dimin is committed to protecting the personal data and privacy rights of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland in accordance with the General Data Protection Regulation (GDPR).

This page outlines how we comply with GDPR requirements and your rights under this regulation.

2. Data Controller Information

Data Controller: Ferma Dimin Education Centre
Address: 18 Cross Street, #08-11, China Square Central, Singapore 048423
Email: [email protected]
Data Protection Officer: [email protected]

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities (e.g., marketing communications)
  • Contract: To fulfill our contractual obligations when you enroll in our programs
  • Legal Obligation: To comply with legal and regulatory requirements
  • Legitimate Interests: For our legitimate business interests, such as improving our services, fraud prevention, and network security

4. Your Rights Under GDPR

As a data subject, you have the following rights:

4.1 Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

4.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

4.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances, such as when:

  • The data is no longer necessary for the purposes it was collected
  • You withdraw your consent and there is no other legal basis for processing
  • You object to the processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

Note: We may retain certain information where legally required or for legitimate business purposes.

4.4 Right to Restriction of Processing

You can request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

4.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit that data to another controller.

4.6 Right to Object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes.

4.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

5. How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: [email protected]
  • Subject line: "GDPR Data Subject Request"
  • Include: Your full name, email address, and specific request

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.

6. Data Processing Activities

6.1 Categories of Personal Data

We process the following categories of personal data:

  • Identity data (name, date of birth, identification documents)
  • Contact data (email, mailing address)
  • Financial data (payment information, billing details)
  • Educational data (academic background, course performance)
  • Employment data (work experience, career goals)
  • Technical data (IP address, browser type, device information)

6.2 Purposes of Processing

We process personal data for:

  • Providing educational services and program delivery
  • Student enrollment and account management
  • Payment processing and financial administration
  • Communication and customer support
  • Career placement and job support services
  • Compliance with legal and regulatory obligations
  • Website analytics and service improvement

7. Data Sharing and Transfers

We may share your personal data with:

  • Service providers operating on our behalf (payment processors, email services, cloud hosting)
  • Professional advisors (lawyers, accountants, auditors)
  • Regulatory authorities and law enforcement when required by law
  • Partner companies for job placement (only with your explicit consent)

7.1 International Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection standards
  • Other legally recognized transfer mechanisms

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:

  • Student records: 7 years after program completion
  • Financial records: 7 years for tax and accounting purposes
  • Marketing consent: Until consent is withdrawn
  • Website analytics: 26 months

9. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection and security
  • Incident response and breach notification procedures

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
  • Inform affected individuals without undue delay if the breach poses a high risk
  • Provide information about the nature of the breach and measures taken to address it

11. Cookies and Tracking

We use cookies and similar tracking technologies in accordance with GDPR requirements. For detailed information, please see our Cookies Policy.

You can manage your cookie preferences through our cookie banner or your browser settings.

12. Marketing Communications

We will only send you marketing communications if:

  • You have given us explicit consent, or
  • You are an existing student and we are marketing similar services (with an easy opt-out option)

You can opt out of marketing communications at any time by:

13. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.

For the EU, you can find your local data protection authority at: https://edpb.europa.eu/about-edpb/board/members_en

14. Updates to This Statement

We may update this GDPR compliance statement from time to time. We will notify you of any significant changes and update the "Last updated" date at the top of this page.

15. Contact Information

For questions about our GDPR compliance or to exercise your rights, please contact:

Data Protection Officer
Email: [email protected]
Address: Ferma Dimin Education Centre, 18 Cross Street, #08-11, China Square Central, Singapore 048423