Privacy Policy
We are aware of the importance of data protection. This document describes what
personal information we receive and collect when you use this site. We hope this information will help
you make informed decisions about the personal information you provide to us.
1. Responsible persons
Data Controller:
Seali
Phone: +356-991-123-60,
Email:sealchartering1@gmail.com
(hereinafter also referred to as "we", "us" or
"our")
2. Basic concepts
GDPR:
Regulation (EU) 2016/679 of the European Parliament and of
the Council on the protection of natural persons with regard to the processing of personal data and on
the free movement of such data, and repealing Directive 95/46/EC, effective from 25 May
2018.
Personal information:
Personal data, within the
meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of
natural persons with regard to the processing of personal data and on the free movement of such data and
repealing Directive 95/46/EC (hereinafter referred to as GDPR), means any information about an
identified or identifiable natural person (i.e. the data subject = you).
Special
personal data:
Special personal data means data concerning racial or ethnic origin,
political opinions, religious or philosophical beliefs or trade union membership; the processing of
genetic data, biometric data for the purpose of uniquely identifying a natural person and data
concerning the health or sex life or sexual orientation of a natural person.
Data
subject = You:
Data subject means an identified or identifiable natural person, where
an identifiable natural person is a natural person who can be identified, directly or indirectly, in
particular by reference to an identifier such as a name, an identification number, location data, a
network identifier or to one or more specific elements of the physical, physiological, genetic, mental,
economic, cultural or social identity of that natural
person.
Administrator:
Within the meaning of Article 4(7) of the GDPR,
a controller is a natural or legal person, public authority, agency or other body which, alone or
jointly with others, determines the purposes and means of the processing of personal data. We act as a
controller in relation to your personal data.
Processor:
A processor
within the meaning of Article 4(8) of the GDPR is a natural or legal person, public authority, agency or
other body that processes personal data for the controller.
Risk processing:
Risky processing means processing that
is likely to pose a risk to the rights and freedoms of data subjects, the processing is not occasional,
or involves the processing of special personal data or personal data relating to criminal convictions
and offences referred to in Article 10 of the GDPR
Automated individual
decision-making, including profiling:
Automated individual decision-making, including
profiling, generally means any form of decision based on automated processing of personal data, i.e.
without human intervention, based, inter alia, on the evaluation of certain personal aspects relating to
the data subject, in particular for the purpose of analysing or estimating, or analysing or predicting
aspects relating to his or her performance at work, economic situation, health, personal preferences,
interests, reliability, behaviour, location or movements.
3. Categories of subjects, personal data processed, purpose, legal basis and duration
of processing
Categories
of data subjects
Purpose of
the processing of personal data
Legal basis
of processed personal data
Processing
time
Categories of data subjects
Visitors to the website
Purpose of the processing of personal data
Statistics before anonymizing data, displaying ads for our services or goods
Legal basis of processed personal data
The legal
basis is our legitimate interest in a) improving our services and focusing on what you are
really interested in; b) offering you similar services or goods that match your needs, based
on your access to our website.
Identification data (first name, last name),
contact data (address, e-mail, telephone), IP address and cookies.
Processing time
For this
purpose, personal data may be processed for a period of 6 months.
Categories of data subjects
Visitors to the website
Purpose of the processing of personal data
Sending a response to a website visitor's query
Legal basis of processed personal data
The legal
basis is the performance of the contract or your consent
Identification data
(name, surname), contact data (address, e-mail, telephone), IP address and cookies, enquiry
made via the form.
Processing time
For
this purpose, personal data may be processed until the enquiry from the contact form has
been processed, but no longer than 30 days or the period for which your
consent to processing lasts.
Categories of data subjects
Newsletter Subscribers
Purpose of processing personal data
Regular
sending of commercial communications by e-mail
Legal basis of processed personal data
The legal
basis is the consent you gave us when you registered for the
newsletter.
Identification data (name and surname), contact details (e-mail).
Processing time
For this
purpose, personal data may be processed until the consent is withdrawn.
4. Period of processing of personal data
We only retain personal data for as long as is necessary for the purpose of processing -
see table above. After this period, personal data may only be kept for the purposes of the National
Statistical Service, for scientific purposes and for archiving purposes.
5. Recipients of personal data and transfer of personal data outside the European Union
In justified cases, we may also transfer your personal data to other entities
(hereinafter referred to as recipients).Personal data may be transferred to the following
recipients:Processors who process your personal data according to our instructions, in particular in the
area of contact with the public, electronic data management or accounting;Public authorities and other
entities if required by applicable law;Other entities in the event of an unexpected event in which the
provision of data is necessary to protect life, health, property or other public interest or if it is
necessary to protect our rights, property or safety. We may use Google's reCAPTCHA
("reCAPTCHA") feature on our website. This application is provided by Google Inc, 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google). It is used for
automated verification of whether data entry on our website has been made by a human or by an automated
program by tracking the behaviour of website visitors according to various characteristics. For example,
the IP address, the time spent by the visitor on the website or the mouse movements made by the user.
The processing of data is carried out on the basis of the provisions of Article 6(1)(f) of the GDPR, as
we have a legitimate interest in protecting our website from abuse by automated robots and from spam.
For the same reason, data is also transferred to Google.Further information about Google reCAPTCHA and
Google's data protection policy can be found here: https://policies.google.com/privacy?hl=en and
https://www.google.com/recaptcha/intro/android.html
6. Cookies
When you visit a website, one or more cookies are sent to your computer. When you
register on the website, additional cookies may be sent to your computer so that you do not have to
re-enter your username (and possibly password) on your next visit. You can delete them at the end of
your session if you are using a public computer and do not want to reveal your pseudonym to other
computer users (in which case you should also clear your browser cache).We use cookies to improve the
quality of our service by maintaining user preferences and tracking trends in user behaviour, such as
searches. Most browsers are initially set up to accept cookies, but you can choose to reject cookies
altogether or set up notifications to send cookies. However, some features of the site may not work
properly without cookies.
7. Personal data processing principles
Legality
We process your personal data in accordance with
applicable law, in particular the GDPR.
Consent of the data subject
We
only process personal data in the manner and to the extent that you have given your consent, if consent
is the title of the processing.
Minimisation and restriction of the processing of
personal data
We only process personal data to the extent necessary to achieve the
purpose of processing and for no longer than necessary to achieve the purpose of
processing.
Accuracy of the personal data processed
We process
personal data with an emphasis on accuracy, using available measures. And using reasonable means, we
process up-to-date personal data.
Transparency
Through this Policy and
the contact person, you have the opportunity to learn about the way we process your personal data, as
well as its scope and content.
Purpose limitation
We only process
personal data to the extent necessary to fulfil the stated purpose and in accordance with that
purpose.
Security
We process personal data in a manner that ensures
its appropriate security, including protection by appropriate technical or organisational measures
against unauthorised or unlawful processing and against accidental loss, destruction or damage.
8. Automated individual decision-making and profiling
The processing of personal data does not involve automated individual decision-making,
even on the basis of profiling.
9. Your rights as a data subject
Right of access to personal data
You have the right to request
access to personal data relating to you from us. In particular, you have the right to obtain
confirmation from us as to whether or not personal data relating to you is being processed by us, and to
be provided with further information about the data processed and the manner of processing within the
meaning of the relevant provisions of the GDPR (purpose of processing, categories of personal data,
recipients, intended storage period, existence of your right to request rectification, erasure,
restriction of processing or right to object, source of personal data and right to lodge a complaint).
If you request it, we will provide you with a copy of the personal data we process about you free of
charge. In the event of a repeated request, we may charge a reasonable fee for providing a copy,
corresponding to the administrative costs of processing.
To obtain access to your personal data,
please use your user account or the contacts listed in this policy.
Right to
withdraw consent to the processing of personal data where the processing is based on
consent
You have the right to withdraw your consent to the processing of personal data
processed by us on the basis of that consent at any time.
You can withdraw your consent by using
your user account or the contacts listed in this policy.
Right to rectification,
restriction or erasure
If you find that the personal data we hold about you is
inaccurate, you can request that we correct the data without undue delay. You may also request that we
complete the data we hold about you if this is reasonable in the particular circumstances of the
case.
You can request the rectification, restriction of processing or erasure of data by using your
user account or the contacts listed in this policy.
Right to erasure of personal
data
You have the right to request that we delete the personal data we process about
you without undue delay in the following cases:
- If you withdraw your consent to the processing of your personal data and there is
no other legitimate reason on our part for processing it that overrides your right to erasure;
- if you object to the processing of personal data (see below);
- Your personal data is no longer needed for the purposes for which we collected or
otherwise processed it;
- The personal data has been unlawfully processed by us;
- The personal data was collected by us in connection with the offer of information
society services to a person under the age of 18;
- Personal data must be deleted to comply with a legal obligation under European
Union law law that applies to us.
You can request deletion in these cases by using your user account or the contacts
listed in this Policy.
The right to request the erasure of personal data is not given in a situation
where the processing is necessary
- For the exercise of the right to freedom of expression and information;
- To fulfil our legal obligations;for reasons of public interest in the field of
public health;
- For archiving purposes in the public interest, for scientific or historical
research purposes or for statistical purposes, where the erasure of the data is likely to prevent or
seriously jeopardise the fulfilment of the purposes of that processing;
- It has jeopardised the achievement of the objectives of that treatment;
- To establish, exercise or defend legal claims.
You can find out if there are reasons why you cannot exercise your right to erasure by
contacting your user account or the contacts listed in this Policy.
Right to restriction of processing of personal data
You have the right to have us restrict the processing of your personal data where:
- You deny the accuracy of the personal data. In this case, the restriction applies
for the time necessary for us to verify the accuracy of the personal data.
- The processing is unlawful and you refuse the erasure of your personal data and
instead request a restriction on its use.
- We no longer need your personal data for the purposes for which we processed it,
but you require it for the establishment, exercise or defence of legal claims;
- You object to the processing (see below). In this case, the restriction applies
for a period of time until it is verified that the legitimate grounds on our side outweigh your
legitimate grounds.
At the time of restriction of processing of personal data, we may only process your
personal data (except for storage) with your consent or for the establishment, exercise or defence of
our legal claims, for the protection of the rights of another natural or legal person or for reasons of
important public interest of the Union or a Member State. As stated above, you can request a restriction
of processing through your user account or the contacts listed in this Policy.
Right to restriction of processing of personal data
You have the right to object to the processing of your personal data in the following
cases:
- Where personal data is processed for a reason where the processing is necessary
for the performance of a task carried out in the public interest or in the exercise of official
authority vested in us or for the purposes of our legitimate interests, and you object to the
processing, we may not further process the personal data unless we can demonstrate compelling
legitimate grounds for the processing which override your interests, rights and freedoms or for the
establishment, exercise or defence of our legal claims.
- If personal data is processed for direct marketing purposes and you object to the
processing, we will no longer process the personal data for these purposes.
- If your personal data is processed for scientific or historical research purposes
or for statistical purposes, we will not process it further unless the processing is necessary for
the performance of a task carried out for reasons of public interest.
You may submit an objection through your user account or the contacts listed in this
Policy.
Right to data portability
Where we process your personal data
on the basis of your consent or because it is necessary for the performance of a contract between us,
you have the right to obtain from us the personal data relating to you that you have provided to us in a
structured, commonly used and machine-readable format, if the personal data is so processed by us. You
have the right to transfer this data to another data controller or to request that we provide this data
directly to another data controller, if technically feasible. You can obtain your personal data through
your user account or the contacts listed in this policy.
The right not to be subject
to any decision based solely on automated processing, including profiling
We do not
use personal data to make automated decisions.
The right to receive information
about a breach of security of your personal data
If a breach of our security is likely
to result in a high risk to your rights and freedoms, we will notify you of the breach without undue
delay. If appropriate technical or organisational measures have been applied to the processing of your
personal data, for example, to ensure that it is incomprehensible to an unauthorised person, or if we
have taken additional measures to ensure that the high risk does not occur, we do not have to provide
you with information about the breach.