DATA PROTECTION POLICY


This Data Protection policy provides detailed information relating to the protection of your personal data by St. Vincent and the Grenadines Maritime Administration (“we”) subject to the EU General Data Protection Regulation 2016/679 and all applicable National Data Protection Laws and Regulations.

We are responsible collecting and processing your personal data in relation to our activities. The purpose of this Data Protection Notice is to inform you which personal data is collected, the reasons, we use and share such data, how long the data is stored, your rights and how you may exercise them.
  1. WHICH PERSONAL DATA DO WE USE?

We collect and use your personal data to the extent necessary in the framework of our activities and to achieve a high standard of personalised services.

We collect different types of personal data, including but not exclusive to:

• identification information (e.g. name, ID card and passport numbers, nationality, place and date of birth, gender, photograph);
• contact information (e.g. postal address and e-mail address, phone number);
• education and employment information (e.g. level of education, employment, employer’sname);
• banking, financial and transactional data (e.g. bank account details, money transfers);

The data we use may either be directly provided by your goodself or be obtained from the following sources in order to verify or enrich our database:

• Publications/databases made available by official authorities;
• Databases made publicly available by third parties.
 


  2. SPECIFIC CASES OF PERSONAL DATA COLLECTION, INCLUDING INDIRECT COLLECTION

For various reasons, information may also be collected indirectly. This may occur for instance when your employer provides information about you or your contact details are provided by one of our clients if you are for example :
• Family members;
• Legal representatives (power of attorney);
• Company shareholders;
• Representatives of a legal entity (which may be a client);
• Staff of service providers and commercial partners
 


  3. WHY AND ON WHICH BASIS DO WE USE YOUR PERSONAL DATA?

To comply with our legal and regulatory obligations
We use your personal data to comply with various legal and regulatory obligations, including:
• banking and financial regulations with which we are in compliance
• prevention of money-laundering and financing of terrorism
• reply to an official request from a duly authorised public or judicial authority.

b. To engage in a contract with you or to take steps at your request before entering into a contract
We use your personal data to enter into and perform our contractual requirements, including:
• provide you with information regarding our services;
• assist you and answer your requests;
• evaluate if we can offer you service and under which conditions; and
• provide services to our corporate clients of whom you are an employee or a client

c. To fulfil our legitimate interest
We use your personal data in order to deploy and develop our services, to improve our risk management and to defend our legal rights, including:
• proof of transactions;
• IT management, including infrastructure management (e.g. : shared platforms) & business continuity and IT security;
 


  4. WHO DO WE SHARE YOUR PERSONAL DATA WITH ?

In order to fulfill the aforementioned tasks, we only disclose your personal data to:
• SVG Marad entities ;
• Service providers which perform services on our behalf;
• Financial or judicial authorities, state agencies or public bodies, upon request and to the extent permitted by law;
• Certain regulated professionals such as lawyers, notaries or auditors.
 


  5. TRANSFER OF YOUR PERSONAL DATA OUTSIDE THE EEA

In case of international transfers originating from the European Economic Area (EEA), where the European Commission has recognised a non-EEA country as providing an adequate level of data protection, yourpersonal data may be transferred on this basis.

For transfers to non-EEA countries whose level of protection has not been recognised by the European Commission, we will either rely on a derogation applicable to the specific situation (e.g. if the transfer is necessary to perform our contract with you, such as, when making an international payment) or implement one of the following safeguards to ensure the protection of your personal data:

• Standard contractual clauses approved by the European Commission;
• Binding corporate rules
 


  6. HOW LONG DO WE KEEP YOUR PERSONAL DATA ?

We will retain your personal data for the longest period required in order to comply with applicable laws and regulations or another period with regard to our operational requirements, such as proper account maintenance, facilitating client relationship management, and responding to legal claims or regulatory requests.

Your data will be kept for the duration of our relationship (for example, application for STCW endorsements) and kept for a maximum of 10 years after the end of this relationship according to the Saint Vincent and the Grenadines Shipping Act 2004.
 


  7. WHAT ARE YOUR RIGHTS AND HOW YOU CAN EXERCISE THEM ?

In accordance with applicable regulations, you have the following rights:
• To access: you can obtain information relating to the processing of your personal data, and a copy of such personal data.
• To rectify: where you consider that your personal data are inaccurate or incomplete, you can require that such personal data be modified accordingly.
• To erase: you can require the deletion of your personal data, to the extent permitted by law.
• To restrict: you can request the restriction of the processing of your personal data.
• To object: you can object to the processing of your personal data, on grounds relating to your particular situation. You have the absolute right to object to the processing of your personal data for direct marketing purposes.
• To withdraw your consent: where you have given your consent for the processing of your personal data, you have the right to withdraw your consent at any time.
• To data portability: where legally applicable, you have the right to have the personal data you have provided to us be returned to you or, where technically feasible, transferred to a third party.

If you wish to exercise the rights listed above, please send an e-mail to the followingaddress:
dataprotection@svg-marad.com
Please include a scan/copy of your identity card for identification purpose.
 


  8. HOW TO CONTACT US ?

If you have any questions relating to our use of yourpersonal data under this Data Protection policy, please send us an e-mail to the following address:

dataprotection@svg-marad.com