INFORMATION NOTICE FOR THIRD PARTIES
M/Maritime Corp. (henceforth “the Company”) hereby informs you about the processing of your personal data it undertakes, in accordance with the provisions of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (henceforth “GDPR”), the relevant applicable provisions of the Greek legislation and shipping practice requirements.
1. DATA PROCESSING
1.1 The Company processes personal data collected either from you directly and/or from the Company and/or a third party (e.g. your employer et. al.). More specifically, the Company may process passport, identity and contact information, banking and tax details, training and education data, prior and current employment information, location data (as far as you may board on a vessel managed by the Company), travel information, CCTV footage of your entry into and exit from the Company’s premises, information about your entry into or exit from the vessels it manages and/or its premises, communications with the Company submitted through e-mails or through its website, as well as any other personal data necessary in connection with the data processing purposes described below.
1.2 The aforementioned data are stored and processed by the Company for a specific time period, determined by the following criteria:
(a) The compliance of the Company with its legal obligations towards the competent authorities, and/or third parties;
(b) Any applicable law and/or regulatory provisions on data retention periods;
(c) The duration of the legal consequences stemming from your or your employer’s contractual relationship or other relationship with the Company, if any; and/or
(d) Other legal interests of the Company.
2. DATA PROCESSING PURPOSES
The Company processes your data in order to comply with its legal and contractual obligations, to be provided with services, to assess its contractual partners, as well as to conduct business-related communications.
3. THIRD PARTY DATA TRANSFERS
3.1 Your data will be accessible to authorised personnel of the Company, as well as to third parties, such as the competent authorities, local agents, travel agents, airlines and other agents employed by the Company, technical contractors, investigators and other legal entities employed by the Company, accountants, auditors, lawyers and legal counsels, the P&I Club employed by the Company, as well as the latter’s correspondents, IT companies providing technical or cloud services or i-storage platforms, banks and the companies owning the vessels managed by the Company.
3.2 The Company may also transfer some or all of your data for the above purposes to persons located in third countries, non-members of the European Economic Area (EEA). In case where such countries have not been granted with an adequacy decision by the European Commission, any transfer shall take place under the appropriate safeguards in accordance with the GDPR, such as Standard Contractual Clauses approved by the Commission or by the competent national authority, or appropriate contractual clauses between the Company and the recipient of such data.
4. YOUR RIGHTS
You have the right to:
(a) the right to request access to your data and to information relating to the processing of your data by the Company,
(b) the right to request corrections and/or completion of your personal data,
(c) the right to request the Company to delete your data,
(d) the right to request the restriction of the scope of processing, the way that the Company is processing your data, as well as the purposes for which the Company is processing them, (e) the right to receive the personal data you provide to the Company in a structured, commonly used and machine-readable format, transmit them to another data controller, and/or request the Company to directly transmit them to another data controller, if technically feasible, (f) the right to object to the processing of your personal data, on grounds relating to your particular situation, and (g) the right to file a complaint before the competent data protection authority. So far as the processing relies upon your consent, you have the right to withdraw such consent at any time. To exercise your rights, please contact the Company as illustrated below at 6.
5. LEGAL BASIS FOR PROCESSING AND OBLIGATION TO PROVIDE DATA
5.1 The processing of your personal data is based upon the following legal bases:
(a) it is necessary for the Company to comply with its legal obligations; and/or
(b) it is necessary for the Company to fulfill its obligations and/ or satisfy its rights from an agreement between you and the Company, if any, and/ or
(c) it is necessary for purposes of legitimate interests pursued by the Company, such as its interest to ensure the safety of its premises and of the vessels it manages, as well as its interest to comply with its legal and contractual obligations and to conduct business-related communications; and/or
(d) it is necessary to protect your or a third party’s vital interests.
5.2 The provision of the above personal data is required either by law or by contract. Thus, if you do not provide us with this data, the continuation of the Company’s relationship with you may not be possible.
6. COMMUNICATION
You can communicate with the Company as follows:
M/Maritime Corp.
ELISA GEROUKI
Corporate Communications Manager
24 Erythreas Road, Tatoi 136 77, GR
+30 214 1006600
+30 6951007343
elisa.gerouki@m-maritime.com