Athemar

(Effective Date)

At Athemar Maritime SA we are committed to ensuring the privacy and protection of personal data in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, store, and protect personal data as part of our operations.

1. Scope of the Policy

This GDPR policy applies to the personal data we collect from customers, suppliers, employees, and any other individuals whose personal data we process in the course of providing shipping services.

2. Data Controller

Athemar Maritime SA., located at Leoforos Vouliagmenis 130, Athens 16777, is the Data Controller responsible for the personal data collected and processed in accordance with this policy. Any inquiries regarding the processing of personal data should be directed to our Data Protection Officer (DPO) at email address to be used.

Personal Data We Collect

We may collect and process the following types of personal data:

• Customers: Name, contact details (email, phone number, address), payment details, and shipping details.
• Suppliers and Partners: Name, business contact information, and banking details.
• Employees: Personal identification details (name, address, date of birth), contact information, bank details, tax information, and other employment-related data.

4. Purpose of Data Processing

We collect and process personal data only for legitimate purposes, including:

• Managing shipping operations and ensuring the safe and efficient transportation of goods.
• Communicating with customers, suppliers, and partners regarding shipments, contracts, and transactions.
• Handling payments and fulfilling contractual obligations.
• Compliance with legal obligations, including customs regulations, tax laws, and employment law.
• Internal business administration and record keeping.

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual Necessity: To perform our contractual obligations with customers, suppliers, and employees.
• Legal Obligation: To comply with legal and regulatory requirements, such as tax, customs, and employment laws.
• Legitimate Interest: To pursue the legitimate interests of our business, such as managing and improving our shipping services, except where such interests are overridden by the rights and interests of individuals.
• Consent: In cases where we rely on consent, we will obtain explicit consent for the processing of personal data and ensure that individuals can withdraw consent at any time.

6. Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Personal data may be archived or securely deleted when no longer needed.

7. Data Sharing and Transfers

We may share personal data with:

• Shipping partners, customs agents, and authorities for the purpose of fulfilling our contractual and legal obligations.
• Service providers, such as IT systems providers or payment processors, who assist in our operations.
• Government authorities or legal bodies where required by law.

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards, such as Standard Contractual Clauses (SCCs), are in place.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes physical, technical, and administrative safeguards such as:

• Secure servers and encryption of sensitive data.
• Access controls to restrict data access to authorized personnel only.
• Regular security audits and employee training on data protection practices.

9. Individual Rights

Under the GDPR, individuals have the following rights regarding their personal data:

• Right to Access: You can request access to the personal data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to legal and contractual limitations.
• Right to Restriction of Processing: You can request that we limit the processing of your personal data.
• Right to Data Portability: You can request a copy of your personal data in a commonly used and machine-readable format.
• Right to Object: You can object to the processing of your personal data in certain circumstances, such as direct marketing.

To exercise any of these rights, please contact our Data Protection Officer at [Insert Contact Information].

10. Data Breach Notification

In the event of a data breach that poses a risk to the rights and freedoms of individuals, we will notify the relevant data protection authority and affected individuals in accordance with GDPR requirements.

11. Changes to this Policy

We may update this GDPR policy from time to time to reflect changes in our business practices or legal requirements. Any updates will be communicated through appropriate channels, such as our website or email notifications.

12. Contact Information

If you have any questions or concerns about this GDPR policy or our data processing activities, please contact our Data Protection Officer:

• Name: Name of person incharge
• Email:
• Phone:
• Address: