Privacy Policy
Data Processing Privacy Policy of SIA “Scandinavian Ship Services”
- General provisions
- The aim of the Data Processing Privacy Policy (hereinafter referred to as Privacy Policy) of SIA “Scandinavian Ship Services” (hereinafter referred to as Scandinavian Ship) is to provide an individual (hereinafter referred to as Data Subject) with general information about the processing of personal data, the purpose of processing, scope and protection, as well as to inform the Data Subject of his or her rights and obligations.
- When processing personal data, Scandinavian Ship complies with the applicable laws and regulations of the Republic of Latvia, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and other applicable privacy and data protection legislation.
- All terms used in the Privacy Policy are interpreted according to their meaning in the General Data Protection Regulation.
- In order to fulfil its functions and provide the offered services, Scandinavian Ship requires the collection, processing and use of certain types of information about Data Subjects.
- The Controller of the personal data processing is SIA “Scandinavian Ship Services” No. 52103025341, address: Kuginieku iela 5, Liepaja, telephone: +371 28811818, e-mail: info@scandinavianship.lv
- Collection and processing of personal data
- Scandinavian Ship obtains the Data Subject’s data directly from the Data Subject. Scandinavian Ship processes the Data Subject’s personal data in paper form, electronically or by telephone. The processing of personal data is carried out by Scandinavian Ship’s employees who are authorized to do so, as well as one of Scandinavian Ship’s processors with whom Scandinavian Ship has an agreement.
- Processing of personal data is mostly done in order for Scandinavian Ship to be able to provide recruitment services for ships crews.
- Principles of data protection
- The following principles apply when data is being processed by Scandinavian Ship:
- personal data is processed in such a manner as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage with the help of appropriate technical or organizational measures. Scandinavian Ship takes appropriate measures to ensure that personal data is processed in accordance with legal requirements;
- personal data is processed in a lawful and transparent manner and in good faith;
- personal data is collected only for specific, clear and legitimate purposes and will not be further processed in a manner incompatible with those purposes. Except in the event it is necessary to carry out the functions and duties specified in legislation.
- personal data is processed adequately and appropriately, by only processing data that is necessary to achieve the purpose of processing;
- only accurate personal data is processed, and the data shall be updated if necessary;
- personal data is stored no longer than is necessary for the purposes for which the respective personal data is processed;
- Personal data provided by the Data Subject may also be processed outside the European Union and the European Economic Area, if any of the following conditions are met:
- the Data Subject has explicitly consented to the proposed transfer after being informed of the possible risks that such a transfer could cause to the Data Subject due to an inadequate level of protection and appropriate guarantees;
- the transfer is necessary for the performance of a contract between the Data Subject and the Controller or the implementation of pre-contractual measures taken at the Data Subject’s request;
- the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the Data Subject between the Controller and another individual or legal person;
- The following principles apply when data is being processed by Scandinavian Ship:
- Purposes and legal basis of data processing
- Scandinavian Ship processes the Data Subject’s personal data only when there is a legal basis for doing so.
- In order to comply with regulatory obligations, to allow Scandinavian Ship to fulfil its functions and tasks, as well as to provide services, such as information provision to the Maritime Administration of Latvia, etc.
- Establishment, maintenance and performance of contractual obligations with the Data Subject for the purpose of concluding an employment contract.
- For the purpose of pursuing the legitimate interests of the Controller or third parties in order to provide protection against claims of and damages caused by third parties.
- In case of CV submissions, when Scandinavian Ship offers the Data Subject the possibility to store a CV for more than two years, if he or she so wishes, then the Data Subject gives his consent to the processing of data.
- Storage of personal data
- Scandinavian Ship stores personal data for the period specified in laws and regulations or until the purpose for which the data was collected has been achieved.
- The personal data provided by the Data Subject on the basis of their consent shall be stored by Scandinavian Ship until the purpose of the data collection has been achieved or the Data Subject withdraws his or her consent, or the expiry of the term specified in the consent.
- Scandinavian Ship may also store the personal data of Data Subjects until their request for data deletion, but Scandinavian Ship will not always be able to fulfil the Data Subject’s request to delete the data. Scandinavian Ship, insofar as processing is necessary for the performance of a legal obligation, shall not be entitled to delete the Data Subject’s personal data.
- Rights of the Data Subject
- Before or at the moment the personal data is collected, Scandinavian Ship will inform the Data Subject about the reasons why the Data Subject’s data is necessary. The Data Subject will be informed by means of separate information sheets, information on application forms, information contained in contracts, information signs or verbally about the reason why Scandinavian Ship requires the Data Subject’s personal data and what Scandinavian Ship will do with the Data Subject’s personal data in accordance with Article 13 of the GDPR.
- The Data Subject has the right, by submitting an application to Scandinavian Ship in person and presenting an identity document or by sending an electronically signed document:
- to approach Scandinavian Ship and request information on the processing of their personal data by Scandinavian Ship;
- to request the supplementation, correction, erasure or limitation of processing of personal data, or to object to the processing of the Data Subject’s personal data, as well as the right to data portability. Scandinavian Ship will assess the Data Subject’s request and implement the Data Subject’s rights in accordance with regulatory requirements;
- to withdraw consent to the processing of their personal data if the processing of the Data Subject’s personal data is based on the consent of the Data Subject, but does not affect the lawfulness of the processing activities performed when the consent was valid.
- to file a complaint about the unlawful processing of personal data with the Data State Inspectorate if the Data Subject has any doubts regarding this;
- to exercise all their rights as a Data Subject as defined in Chapter III of the GDPR.
- Scandinavian Ship will assess the Data Subject’s request and implement the Data Subject’s rights in accordance with regulatory requirements. Scandinavian Ship will reply to the Data Subject’s application no later than within one month; in some cases, Scandinavian Ship may extend the period by two months, the Data Subject will be duly informed by the Local Authority;
- Personal data protection specialist
- Contact details of Scandinavian Ship’s data protection specialist: telephone: +371 28664223, e-mail: dpo@scandinavianship.lv
- Data Subjects may contact the personal data protection specialist on all matters related to the processing of their personal data, which is carried out by Scandinavian Ship, and the exercise of rights provided for in the GDPR.
- Other provisions
- In the event of any questions or uncertainties regarding the processing of personal data by Scandinavian Ship, the Data Subject must contact the Scandinavian Ship by using the contact details provided in Paragraph 1 and by also contacting the data protection specialist of Scandinavian Ship.
- This Privacy Policy will be published on the Scandinavian Ship website scandinavianship.lv.
- Scandinavian Ship has the right to make changes to the Data Processing Privacy Policy without prior notice to the Data Subject and publish the latest version of the Privacy Policy on the website referred to in Paragraph 8.3, indicating the date of the current and the previous version.