GCC Marine Services Ltd can use seafarers personal data as described in this Data Privacy Policy, in order to make its services available, to respond to their enquiries, and to the extent it is legally permissible or required or to assist in legal or criminal investigations. We can further anonymise and aggregate data gathered for statistical purposes to expand our product portfolio and improve our services.
We can store seafarer’s personal data or otherwise pass it on to our affiliates or further trustworthy business partners, who perform services in our name, or other types of service provision.
We have conducted contracts with these parties especially for Personal Data Control so as to ensure that seafarer’s personal data is processed on the basis of our instructions and in compliance with this Data Privacy Policy, and other suitable measures regarding confidentiality and security and Availability. We pass on seafarer’s personal data to these parties and/ or other third parties exclusively to the required extent in order to perform services that you have requested or authorised and to protect yours and our rights, property or security or, if we are obligated to do so based on applicable laws, orders by courts or other authorities. In any case of data breach or any disclosure we will assist by any means in order to assist in legal or criminal investigations or court proceedings. GCC Marine Services Ltd as well as related parties as authorities, customers and associates to whom we may pass on seafarer’s personal data, might possibly be based outside of our home country, and potentially also in countries with data protection laws that can differ from those applicable in our country where we are. In such cases, we will ensure that suitable measures for the protection of seafarer’s personal data are taken by introducing suitable legal mechanisms.
The personal data of seafarer’s will be deleted or blocked as soon as the purpose for storing it ceases to apply. The Personal Data will be deleted when a storage period expires that is prescribed by and as it is defined within the Register of Activities for Personal Data, unless there is a necessity for the continued storage of the data for a contract conclusion or contract fulfilment.