GDPR Compliance

Last Updated: May 13, 2026

1. Overview

Infre Smart Realty is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Singapore data protection laws.

This document outlines our commitment to GDPR compliance and explains your rights regarding your personal data.

2. Data Controller Information

The data controller responsible for your personal information is:

Infre Smart Realty
123 Robinson Road, #15-02
Singapore 068901
Email: [email protected]

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: You have given explicit consent for processing your personal data for specific purposes
  • Contractual Necessity: Processing is necessary for the performance of a contract with you
  • Legal Obligation: Processing is necessary to comply with legal requirements
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

4. Your GDPR Rights

Under GDPR, you have the following rights:

4.1 Right to Access

You have the right to request access to the personal data we hold about you and receive a copy of it.

4.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

4.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

4.4 Right to Restrict Processing

You can request that we limit the processing of your personal data in certain circumstances.

4.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

4.6 Right to Object

You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

4.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects.

4.8 Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time.

5. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request."

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you accordingly.

You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive.

6. Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Employee training on data protection
  • Incident response procedures

7. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

8. International Data Transfers

If we transfer your personal data outside Singapore, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention periods vary based on:

  • The nature of the data
  • The purpose of collection
  • Legal and regulatory requirements
  • Legitimate business needs

10. Third-Party Processing

When we engage third-party service providers to process personal data on our behalf, we ensure they comply with GDPR requirements through appropriate contractual arrangements.

11. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority.

In Singapore, you can contact the Personal Data Protection Commission (PDPC).

12. Updates to This Document

We may update this GDPR compliance document from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when this document was last revised.

13. Contact Us

For questions about GDPR compliance or to exercise your rights, please contact us:

Email: [email protected]
Address: 123 Robinson Road, #15-02, Singapore 068901