TUMCREATE Privacy Policy

1. Introduction

This Privacy Policy describes how TUM CREATE LTD. (“we”, “us”, or “our”) collects, uses, discloses, and protects personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

This Policy applies to personal data in our possession or under our control, including personal data collected through our website, services, communications, and events organised or hosted by us.

2. Collection of Personal Data

We may collect personal data that you provide to us voluntarily or that is generated through your interaction with us. This may include, where applicable:

• Name, contact details, job title, and organisational affiliation
• Registration and attendance information for events hosted or co-hosted by us
• Payment or billing information (where applicable)
• Communications or enquiries submitted to us
• Technical data collected through website usage (e.g. IP address, cookies)
• Any other information you provide to us

For events, we may collect information required for administration, logistics, participation management, safety, accessibility, or regulatory purposes.

3. Use of Personal Data

We may use personal data for purposes including:

• Providing and managing our services and operations
• Processing registrations and administering events
• Communicating with you, including sending newsletters or updates regarding events, programmes, or services
• Responding to enquiries or requests
• Processing payments and maintaining records
• Improving our website, services, and event experience
• Complying with legal or regulatory requirements
• Any other purpose reasonably related to the above

We will use personal data only for purposes that a reasonable person would consider appropriate in the circumstances or for which consent has been obtained where required.

4. Disclosure of Personal Data

We may disclose personal data where necessary for the purposes described above, including to:

• Service providers supporting our operations (e.g. event platforms, IT vendors, payment processors)
• Event partners, co-organisers, or venues where required for event administration
• Professional advisers or auditors
• Regulatory authorities or public agencies where required by law
• Other parties with your consent or where permitted under applicable law

We require third parties handling personal data on our behalf to provide appropriate protection and confidentiality.

5. Consent and Withdrawal of Consent

By providing your personal data to us, including when registering for an event, you consent to our collection, use, and disclosure of that data for the purposes described in this Policy. In some cases, we may also rely on deemed consent under the PDPA where the collection, use, or disclosure is reasonably necessary for your interaction with us, such as administering your event participation.

You may withdraw consent at any time by contacting us using the details below. Withdrawal of consent may affect our ability to provide certain services or event participation where personal data is necessary.

6. Access and Correction of Personal Data

You may request access to or correction of your personal data in our possession by contacting us. We may require reasonable time and verification to process such requests.

7. Protection and Retention of Personal Data

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, or disposal.

Personal data is retained only as long as necessary to fulfil the purposes for which it was collected or as required by applicable laws and regulations.

If a data breach occurs, we will assess whether it is notifiable under the PDPA. Where notification is required, we will inform the Personal Data Protection Commission and, where applicable, affected individuals in accordance with the PDPA.

8. Transfer of Personal Data

We may transfer personal data outside Singapore where necessary for the purposes described in this Policy, including to our home university, the Technical University of Munich (TUM), and to overseas service providers or partners in connection with our operations, research activities, and event organisation.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the receiving organisation provides a standard of protection comparable to that required under the Singapore Personal Data Protection Act 2012 (PDPA).

9. Cookies and Website Tracking

Our website may use cookies or similar technologies to enhance user experience, analyse website usage, and improve services. You may manage or disable cookies through your browser settings, though this may affect website functionality.

10. Events, Photography and Recordings

Events organised, hosted, or co-hosted by us may be photographed, filmed, or recorded for documentation, publicity, reporting, or archival purposes.

By attending our events, you acknowledge that you may be photographed, filmed, or recorded, and that such materials may be used in publications, websites, social media, promotional materials, or communications related to our activities.

If you have concerns about being recorded, please inform event organisers where feasible.

Where necessary, we may also collect event-related information such as dietary, accessibility, or health requirements for logistical or safety purposes.

11. Research Studies and Surveys

Where we conduct research studies, surveys, or related programmes, we may collect and use personal data for research, analysis, reporting, and the improvement of our activities, in accordance with applicable laws and ethical requirements.

Where required, we will obtain consent for participation. Personal data may be anonymised or aggregated for research, reporting, or publication purposes where individuals are not identifiable. We will implement appropriate safeguards to protect personal data collected for research purposes. Additional information may be provided to participants at the point of data collection where specific study requirements apply.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with the revised effective date.

13. Contact / Data Protection Officer

If you have questions, requests, or concerns about this Privacy Policy or our handling of personal data, please contact our Data Protection Officer at dpo@tum-create.edu.sg.

14. Last Updated

Effective date: 11 May 2026

Last updated: 11 May 2026