PRIVACY STATEMENT
NOTICE ON THE PROCESSING OF PERSONAL DATA
TFX SHIP BROKING
Introduction
The protection of natural persons with regard to the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union and Article 16(1) of the Treaty on the Functioning of the European Union (TFEU) enshrine the right of every person to the protection of personal data concerning them.
Since 25 May 2018, Regulation (EU) 2016/679 on the Protection of Personal Data (GDPR) has applied, establishing a strict framework for the processing of personal data and its free movement (hereinafter the "Regulation").
TFX SHIP BROKING, with registered offices at Ajeltake Road, P.O. Box 1405, 96960 Majuro, Marshall Islands (hereinafter the "Company"), attaches paramount importance to the protection of personal data. In this context, we process personal data in accordance with the Regulation and applicable national legislation, always implementing appropriate technical and organisational measures for their protection.
The data we may process include, by way of example: full name, contact details, email address, telephone number, business address, information from social media accounts we manage, Tax Identification Number (TIN), etc.
Contact
For any matter relating to the processing of your personal data, you may contact the Company's Data Contact Officer at the following email address: snp@tfxshipbroking.com
Legal bases for processing personal data
We process your personal data only where a legal basis exists, in accordance with Article 6 of the Regulation. Specifically:
(a) Performance of a contract / provision of services: Providing, supporting and improving the services you entrust to us, communicating with you and managing our relationship, including responding to your requests, queries, or complaints.
(b) Communication and information: Sending Press Releases, Annual Reports, and Newsletters regarding our activities, as well as personalised updates upon your consent.
(c) Compliance with legal obligations: Compliance with our legal obligations arising from applicable legislation, including indicatively tax, accounting, employment, maritime and regulatory obligations, as well as obligations imposed by judicial or administrative authorities.
(d) Legitimate interests: Safeguarding and protecting the legitimate interests of the Company and third parties (employees, associates, visitors, clients), including through closed-circuit television (CCTV) and security cameras for the protection of persons and premises. Recorded material is retained for a limited period in accordance with applicable legislation and is automatically deleted, unless its retention is required for the investigation of a security incident.
When do we use your personal data?
The Company uses your personal data, among other occasions, when you subscribe to our mailing lists through the relevant form on our website, in order to send you informational material about our activities and services.
To whom is your data disclosed?
Your personal data may be disclosed, where required, to the following categories of recipients:
Government authorities and law enforcement bodies: judicial, prosecutorial, administrative, and tax authorities.
Associates and service providers: e.g. advertising agencies, IT companies, legal advisors. In each such case, we remain the data controller and enter into a specific data processing agreement in accordance with Article 28 of the Regulation.
Retention period
The retention period for your personal data is determined on the basis of the nature and purpose of the processing, as well as applicable legal obligations:
Where processing is required by law, data are retained for as long as the relevant provisions stipulate.
Where processing is carried out in the context of a contract, data are retained for as long as necessary for the performance of the contract and for the establishment, exercise, or defence of legal claims.
Where processing is carried out for information or commercial promotion purposes, data are retained until your consent is withdrawn.
Your rights
Every natural person whose data are processed by us has the following rights:
Right of access (Article 15 of the Regulation): The right to be informed and to verify the lawfulness of processing, as well as to receive a copy of the data concerning you.
Right to rectification (Article 16 of the Regulation): The right to correct, update, or supplement inaccurate or incomplete data.
Right to erasure (Article 17 of the Regulation): The right to request the erasure of your personal data, where the conditions set out in the Regulation are met.
Right to restriction of processing (Article 18 of the Regulation): The right to request the restriction of processing under specific conditions.
Right to object (Article 21 of the Regulation): The right to object at any time to the processing of your data, in particular for the purposes of direct marketing.
Right to data portability (Article 20 of the Regulation): The right to receive your data in a structured, commonly used, and machine-readable format, and to transmit them to another controller.
Right to withdraw consent (Article 7 of the Regulation): The right to freely withdraw at any time the consent you have provided, without affecting the lawfulness of processing carried out prior to the withdrawal.
To exercise any of the above rights, you may contact our Data Contact Officer at: snp@tfxshipbroking.com. We will respond to your request within thirty (30) calendar days.
Right to lodge a complaint with the Supervisory Authority
You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (hereinafter the "Supervisory Authority") regarding matters relating to the processing of your personal data.
For further information, you may visit the Supervisory Authority's website or contact its representatives:
Website: www.dpa.gr
Call Centre: +30 210 6475 600
Fax: +30 210 6475 628
Email: contact@dpa.gr
Security of processing
We implement appropriate technical and organisational measures, in accordance with Article 32 of the Regulation, with the aim of ensuring the secure processing of personal data and preventing accidental loss, destruction, unauthorised access, disclosure, or modification thereof.
Cookie Policy
The Company's website uses cookies. For detailed information on the types of cookies we use, their purpose, and how to delete or block them, please refer to the Cookie Policy of this website.
Personal data of minors
This website and the Company's services are intended exclusively for persons who have reached the age of eighteen (18). Should it be established during the data collection process that a user is a minor, the Company will not process their personal data and will delete them immediately.