GDPR Compliance

Last Updated: May 25, 2026

Our Commitment to Data Protection

Usmine Depop is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals in the European Economic Area (EEA) and other regions with similar data protection laws.

Data Controller

For the purposes of GDPR, Usmine Depop acts as the data controller for personal data collected through our website and services.

Data Controller Contact:
Usmine Depop
Marina Bay Financial Centre
8 Marina Boulevard, Level 25
Singapore 018981
Email: [email protected]

Lawful Basis for Processing

We process personal data only when we have a lawful basis to do so under GDPR Article 6:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request access to your personal data and receive information about how we process it.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected or when you withdraw consent.

Right to Restriction of Processing

You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests, direct marketing, or for research and statistical purposes.

Right to Withdraw Consent

When processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

• Email: [email protected]
• Subject line: "GDPR Data Subject Request"

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of such extension.

Data Processing Activities

What Personal Data We Collect

• Contact information (name, email address, company details)
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, time spent, interaction patterns)
• Communication data (inquiry content, correspondence history)

Purpose of Processing

• Providing and managing our services
• Responding to inquiries and customer support
• Marketing and business development communications
• Website improvement and analytics
• Legal compliance and fraud prevention

Data Recipients

We may share your personal data with:

• Service providers who support our business operations
• Professional advisors (legal, financial, technical consultants)
• Regulatory authorities when legally required

All data processors are bound by data processing agreements ensuring GDPR compliance.

International Data Transfers

When we transfer personal data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other appropriate safeguards as permitted by GDPR

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law. Retention periods vary based on:

• The nature of the data and purpose of processing
• Legal, regulatory, or contractual obligations
• Legitimate business needs and your preferences

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security testing and vulnerability assessments
• Access controls and authentication systems
• Employee training on data protection and security
• Incident response and breach notification procedures

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware
• Inform affected individuals without undue delay if the breach poses a high risk
• Document all data breaches and remedial actions taken

Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you without human intervention.

Children's Data

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

Updates to This Notice

We may update this GDPR compliance notice periodically. Significant changes will be communicated through our website or direct notification.

Contact Information

For any questions regarding GDPR compliance or data protection practices:

Data Protection Officer
Email: [email protected]
Address: Marina Bay Financial Centre, 8 Marina Boulevard, Level 25, Singapore 018981