PRIVACY AND PERSONAL DATA PROTECTION POLICY

NAVMAR GROUP is a structure that is formed of several companies incorporated and organized in accordance with Romanian law, each with registered offices in Romania, Constanta city, Constanta County and registered with the Trade Registry Office attached to Constanta District Court.

Navmar Group operates and manages the website https://navmar.eu

Navmar Group collects and processes personal data in accordance with the provisions of Regulation No 679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR Regulation).

The purpose of this document is to inform you specifically and unambiguously about the purposes of personal data processing, the legal basis of processing, duration of processing, recipients of personal data collected, ways of exercising individual rights, as well as information about the secondary purpose of the processing, if data will be processed for a purpose other than the one for which they were collected by the associated controllers.

Within the framework of data processing operations, the Navmar Group takes into account the regulations in force in this matter, observes and applies the principles underlying the protection of personal data and ensures the confidentiality and security of data through appropriate organizational and technical measures, materialized in internal procedures, rules of conduct and continuous training to raise awareness and personal responsibility of its employees.

Principles of personal data processing

The Navmar Group requires the collection and use of certain personal data from customers, suppliers, business contacts, employees, seafarers, job applicants and various other types of persons who wish to enter into a business relationship with companies that are part of the group. The personal data collected will be:

processed in a legal, fair and transparent manner, in strict compliance with the principles of legality, fairness and transparency;
collected for specified, explicit and legitimate purposes and shall not be further processed in a way incompatible with those purposes; further processing for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes shall not be considered incompatible with the original purposes;
adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
accurate and, where necessary, kept up to date; we will take all necessary steps to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or corrected without delay;
kept in a form which allows identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
processed in a way that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or accidental damage, by taking appropriate technical or organisational measures.

It is important that you pay attention to this information so that you know all the aspects exposed in its content so that your information can be done properly. This document is not a consent to further processing of data and does not affect the lawfulness of processing previously carried out.

Purposes of personal data collection

Your personal data can and will only be collected for the purpose of fulfilling Navmar Group’s commercial and legal obligations, namely:

in order to provide the services offered by Navmar Group, as contracted and/or instructed, or authorised persons;
for the purpose of establishing and maintaining business relationships, including payment processing, accounting, auditing, invoicing and other support services;
for the purpose of creating a user account for recruitment and hiring purposes, thereby facilitating the process of identifying and selecting suitable candidates for available positions, in order to present those data to prospective employers as part of the recruitment/employment process, as well as to comply with any legal requirements, such as payroll, social security contributions and income tax withholdings;
to ensure compliance with our legal obligations;
to register, follow up and resolve any complaints received;
to ensure compliance with business policies, including security and internet use policies, and to prevent unauthorised access and unauthorised changes to systems;
for the purpose of updating customer records;
for marketing purposes;
to identify representatives of customers, suppliers and/or service providers.

Legal bases

The collection and processing of personal data for the purposes mentioned above is based on:

Entering into (including the steps prior to entering into), performing, managing a contract; In the event of entering into a contract between you and a Navmar Group company, it is assumed that you have read this policy and the terms and conditions of the services we offer and that you agree to them.
The legitimate interest of our company, i.e. for the purpose of issuing accounting or other supporting documents and to establish the identity of persons who benefit from the services of the Navmar Group and with whom they come into contact;
Access to and use of our website, as well as when a person voluntarily contacts us in other circumstances, for example, when looking for a job or any information about our services and activities.

The Navmar Group uses the e-mail you provided as a means of identifying the customer, so as not to cause a substitution, to limit errors in performing operations, to maintain speed of communication with you in the current check.

Personal data collected

first and last names of persons;
e-mail;
IP address when you visit our website without disabling Cookies.

Navmar Group collects the above mentioned information from its potential customers, suppliers, employees directly.

Refusal to provide personal data to the Navmar Group leads to the impossibility of offering our services and products, considering that this information is absolutely necessary for the establishment of the desired collaboration relationship.

Duration of processing of personal data

The duration of personal data processing in connection with the services offered is specific to each type of processing, taking into account the reasons mentioned above, as well as for the fulfilment of legal obligations (tax, archiving, etc.).

In order to limit the processing, Navmar Group will periodically carry out a review of the need for data processing in order to limit as much as possible the scope of your data subject to processing.

Recipients of personal data

Personal data will be disclosed strictly to our employees and carefully selected professional collaborators of the Navmar Group for the performance of their activities only in connection with the provision of the services we offer, except in the following situations:

if according to the law, Navmar Group is obliged to communicate these data to public authorities;
when this communication will be made under the law for protection of the rights and interests of the Navmar Group;
when the transmission of data is expressly requested by the data subject.

Depending on the type of processing, personal data may also be processed by:

Those who provide security and other protection to Navmar Group systems;
Those who ensure the quality level to meet customer requirements or who provide or mediate Navmar Group’s product and service offerings, as well as persons or institutions involved in the billing process (e.g. banks, IT providers).

If it is necessary to transfer and process your personal data to a country outside the European Union, the Navmar Group will ensure that the processing of personal data complies with the security requirements to which processing within the European Community is subject, which includes compliance with EU standards on the processing of personal data, thus ensuring that the requirements of personal data protection legislation are met.

For atypical cases, the Navmar Group will ask the National Supervisory Authority for Personal Data Processing for permission to transmit personal data to countries whose legislation does not provide a level of protection at least equal to that provided by European legislation.

Your rights regarding the data we process are:

a) Right of access to data

By exercising this right, you will be able to obtain, free of charge, confirmation from the Navmar Group that your personal data are or are not processed by the Navmar Group. Your request will be sent without any specific justification, but you will have to specify the postal or e-mail address where you would like to receive the requested information.

b) Right of intervention on data

The right to intervene on the data can be exercised if you find or there are reasonable grounds to believe that your personal data have been processed by the Navmar Group in breach of the obligations incumbent on the controllers in this regard.

In order to meet the legal requirements, the processing of your personal data must meet the following requirements:

be carried out in good faith, having regard to the stated purpose and the legal provisions in force;
to concern data collected for specified, explicit and legitimate purposes;
be based exclusively on adequate, relevant, accurate and up-to-date data;
to relate to data stored in a form which allows identification of data subjects for no longer than is necessary for the purposes for which the data are collected and further processed.

In the event of non-compliance by the Navmar Group with any of the obligations laid down by the legislation in force as amended and supplemented, you will have the right to request the rectification, updating, blocking, erasure or anonymization of data whose processing does not comply with the applicable law.

c) Right to object

You are the rightful owner of all data relating to you which helps to identify you and as such you have the right to object, on justified and legitimate grounds, to any processing of data relating to you. However, we remind you that the incomplete or inadequate provision of your personal data or the withdrawal of your consent to their processing by the Navmar Group will make it impossible for the Navmar Group to provide you with its services.

d) The right to apply to the courts and the A.N.S.P.D.C.P.

Should the Navmar Group violate any of your rights regarding the collection and processing of personal data, you have the right to address the National Authority for the Supervision of Personal Data Processing (A.N.S.P.D.C.P.) in order to defend your guaranteed rights.

If, as a result of non-compliance with the legal provisions, you suffer damage, you will have the possibility to apply to the courts in the area where you reside in order to remedy the damage thus caused.

Any of your requests regarding the exercise of any of the above rights will be answered by the Navmar Group within 15 days of receipt of a written, dated and signed request sent by you to the contact address of the Navmar Group.