PRIVACY POLICY
Your privacy is very important to us, so we have prepared all the necessary information for you to
understand what happens to your personal information when you use our website.
- DEFINITIONS
Whenever the following provisions refer to:
| Controller | it should be understood as Global Ship Services sp. z o.o. with its registered office in Poznań (address: Kopanina Street 28/32, 60- 105 Poznań), entered in the Register of Entrepreneurs of the National Court Register under the number 0001101676. The Controller is the entity responsible for determining the purposes of collecting and processing personal data, as well as the methods of such processing; |
| GDPR | shall mean Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation); |
| Policy | should be understood as this privacy policy; |
| Service | it should be understood as the website operated and managed by the Controller at https://globalshipservices.com/; |
| User | mean any natural person visiting the Site or using one or more of the services or functionalities described in the Policy. |
- DATA AND INFORMATION COLLECTED
2.1. The User is not required to provide his/her personal data (such as name, surname, age, date of birth) in order to use the Service.
Nonetheless, in connection with the User’s use of the Website, the Controller may collect personal data within the meaning of Section 2.3 below,
to the extent necessary to provide individual services.
2.2. The Controller may collect information about the computer, phone, tablet or other device used by the User to browse the Service. The following
data and information may be collected through the User’s device:
2.2.1. types and versions of browsers used,
2.2.2. information about the operating system used by the system accessing the Service,
2.2.3. information about the website from which the User was redirected to the Service (so-called links),
2.2.4. information about web subpages,
2.2.5. date and time of access to the Service,
2.2.6. Internet protocol address (IP address),
2.2.7. data and information about the ISP of the accessing system,
2.2.8. geolocation information, if the User has consented to the service provider’s access to geolocation, with geolocation information being used to
provide the User with more customized offers of products and services,
2.2.9. information about the User’s activity on the Website, and
2.2.10. any other similar data and information that can be used in case of attacks on the Controller’s information systems.
2.3. The information specified in Section 2.2 above generally does not constitute and does not contain data concerning the User’s identity, but when
combined with other information in the Controller’s possession, it may constitute Personal Data within the meaning of Article 4(1) of the GDPR
(hereinafter „Personal Data”). All further provisions of this Policy refer precisely to Personal Data so understood. - PURPOSES AND LEGAL BASIS OF DATA PROCESSING IN THE SERVICE
3.1. Personal Data of all Users, including IP address or other identifiers and informationcollected through cookies or other similar technologies, is (or
may be) processed by theController:
3.1.1. for the purpose of providing services electronically in terms of providing Users with accessto content collected on the Website – in which case
the legal basis for processing is thenecessity of processing for the performance of the contract (Article 6(1)(b) GDPR);
3.1.2. for analytical and statistical purposes, in which case the legal basis for processing is thelegitimate interest of the Controller (Article 6(1)(f)
GDPR), consisting of conducting analysesof Users’ activities, as well as their preferences in order to improve the functionalities usedand services
provided;
3.1.3. to detect, prevent and respond to potential or actual security incidents and to monitor andprotect against other malicious or illegal activities on
the Service, in which case the legalbasis for the processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR) inmaintaining and
ensuring the safe use of the Service;
3.1.4. for the purpose of possible establishment and investigation of claims or defense againstclaims, in which case the legal basis for the processing is
the legitimate interest of theController (Article 6(1)(f) GDPR) consisting in the protection of your rights.
3.2. In the case of correspondence addressed to the Controller via e-mail that is not related tothe services provided to the sender or to any other
agreement concluded with the sender,the Personal Data contained in such correspondence is processed solely for the purpose ofcommunication
and resolution of the matter to which the correspondence relates. The legalbasis for the processing is then the legitimate interest of the
Controller (Article 6(1)(f) of theGDPR), consisting of correspondence addressed to it in connection with its businessactivities. - COOKIES
4.1. Cookies (so-called „cookies”) are IT data, in particular small text files, placed and stored on Users’ devices (e.g. computer, phone, tablet), sent by
the websites they visit. Cookies are then sent back to the visited website on each subsequent visit or to another website that recognizes cookies
and, based on this, can function better and be better tailored to the User’s preferences. Cookies are used to improve the operation of the Website,
to provide Users with services provided electronically and to improve the quality of such services. The use of cookies on the Website is not
intended to identify Users. The Policy regulates data processing related to the use of its own cookies.
4.2. The Service uses only necessary cookies, primarily to provide Users with the services andfunctionalities of the Service that the User wants to use.
They are necessary for the operation of the Service and cannot be disabled on our systems.
4.3. The legal basis for the processing of data in connection with the use of necessary cookies is the necessity of the processing for the performance of
the contract (Article 6(1)(b) of the DPA).
4.4. The User may block all cookies by activating a setting in his/her web browser to reject the setting for all or some cookies. However, if the User
blocks all cookies (including essential cookies) through his/her browser settings, the User may not be able to access all or part of
the Website or the Website may not function properly.
4.5. The length of time the cookies will remain on the User’s device will depend on whether they are „permanent” or „session” cookies. „Permanent”
cookies will be stored by the web browser and will remain valid until the set expiration date, unless deleted by the User before the expiration date.
„Session” cookies expire at the end of the web session when the web browser is closed. - PERIOD OF PROCESSING OF PERSONAL DATA
5.1. The period of processing of Personal Data by the Controller depends on the purpose of processing. As a rule, data are processed for the duration
of the service, until the withdrawal of the consent given, or until an effective objection is made to the processing of Personal Data in cases where
the legal basis for processing is the legitimate interest of the Controller.
5.2. The period of processing of Personal Data may be extended if the processing is necessary for the establishment and investigation of possible
claims or defense against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data
shall be irreversibly deleted or anonymized. - RECIPIENTS OF PERSONAL DATA
6.1. The User’s Personal Data may be made available to entities entitled to receive them under applicable laws, including relevant state authorities.
6.2. In connection with the performance of services, Personal Data may be disclosed to external entities, including, in particular, suppliers responsible
for the operation of IT systems.
6.3. The Controller reserves the right to disclose selected information concerning the User to third parties who make a request for such information,
relying on the relevant legal basis and in accordance with the provisions of the applicable law.
6.4. The Controller has no intention to transfer Personal Data to a third country outside the European Economic Area (hereinafter „EEA”), or to an
international organization. The Controller transfers Personal Data outside the EEA only when necessary, and with an adequate degree of
protection, primarily through the use of standard contractual clauses issued by the European Commission. - USER RIGHTS
7.1. The user is entitled to:
7.1.1. to obtain confirmation from the Controller as to whether his or her Personal Data is being processed, and if it is, to obtain access to it and
information on, among other things, the scope and manner of its processing and the rights to which the User is entitled in connection with
the processing of his or her Personal Data;
7.1.2. receive a copy of the Personal Data being processed, with the first copy being free of charge, and for subsequent copies the Controller may
impose a reasonable fee based on administrative costs (Article 15(3) of the GDPR);
7.1.3. Request rectification of Personal Data concerning the User that is incorrect, or completion of incomplete data (Article 16 GDPR);
7.1.4. Request the deletion of Personal Data (Article 17 of the GDPR);
7.1.5. Request the restriction of the processing of personal data to storage only (Article 18 GDPR);
7.1.6. to receive in a structured, commonly used machine-readable format the Personal Data that the User has provided to the Controller, and to
request that the data be sent to another controller, if the data are processed on the basis of the data subject’s consent or a contract with the
data subject, and if the data are processed by automated means (Article 20 GDPR);
7.1.7. object to the processing of Personal Data by the Controller due to the User’s particular situation – when the processing is based on the
Controller’s legitimate interest (Article 21 GDPR);
7.1.8. lodge a complaint about the processing activities carried out by the Controller to the competent supervisory authority in charge of personal data
protection, i.e. the President of the Office for Personal Data Protection.
7.2. To the extent that your Personal Data is processed on the basis of your consent, you may withdraw that consent at any time.
7.3. In order to exercise the above-mentioned rights, the User should contact the Controller, using the contact information provided in the Policy, and inform him which right and to what extent he wishes to exercise it. - SECURITY OF PERSONAL DATA
8.1. The Controller conducts a risk analysis on an ongoing basis to ensure that Personal Data is processed by the Controller in a secure manner, i.e. to
ensure that only authorized persons have access to the data and only to the extent necessary due to the tasks they perform. The
Controller shall ensure that all operations on Personal Data are recorded and performed only by authorized employees and associates.
8.2. The Controller shall take all necessary measures to ensure that also its subcontractors andother cooperating entities provide a guarantee of the
application of appropriate security measures whenever they process Personal Data on behalf of the Controller. - PROTECTING CHILDREN’S PRIVACY
The Service is not designed for and is not intended for children under the age of sixteen. The
Controller does not plan to collect or store data, concerning children under the age of sixteen. - PRIVACY POLICY CHANGES
10.1. The policy is reviewed on an ongoing basis and updated as necessary.
10.2. The current version of the Policy has been adopted and is effective as of 27th Aug. 2024. - CONTACT DETAILS
Contact with the Controller is possible via e-mail address: gss@globalshipservices.com or
correspondence address: Global Ship Services Sp. z o.o., 28/32 Kopanina Street, 60-105 Poznań.