GDPR Compliance Statement

Last Updated: May 26, 2026

Our Commitment to GDPR

Fumis Blesm is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR). This statement outlines how we comply with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual Necessity: To fulfill our obligations in providing educational services
• Legitimate Interest: To improve our services and communicate relevant updates
• Consent: For marketing communications and optional data processing
• Legal Obligation: To comply with applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format.

Right to Object

You can object to processing of your personal data for direct marketing or other purposes based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Protection Principles

We adhere to the following GDPR data protection principles:

• Lawfulness, Fairness, and Transparency: We process data lawfully and transparently
• Purpose Limitation: We collect data for specified, explicit purposes
• Data Minimization: We only collect data that is necessary
• Accuracy: We keep personal data accurate and up to date
• Storage Limitation: We retain data only as long as necessary
• Integrity and Confidentiality: We implement appropriate security measures
• Accountability: We take responsibility for our data processing activities

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Other legally approved transfer mechanisms

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Data Protection Officer

For GDPR-related inquiries or to exercise your rights, please contact us at:

Email: [email protected]
Subject: GDPR Request
Address: 156 Cecil Street, Level 12, Singapore 069544

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The "Last Updated" date indicates when this statement was last revised.