Contact

Privacy policy

Last updated: August 2026

ΦΑΛΚΟΣ ΝΙΚΟΛΑΟΣ-ΙΩΑΝΝΗΣ ΤΟΥ ΓΕΩΡΓΙΟΥ ("OCEAN SHIPPING AGENCY") respects your personal data. This policy explains what data we collect through the website and the client portal, for what purpose, on what legal basis, and what rights you have under the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019.

Data controller

The data controller is ΦΑΛΚΟΣ ΝΙΚΟΛΑΟΣ-ΙΩΑΝΝΗΣ ΤΟΥ ΓΕΩΡΓΙΟΥ, with its registered office at 2ας Μεραρχίας 3, Πειραιάς 18535. For any matter concerning your personal data, contact us at :email.

Data we collect

We collect only the data needed to serve you:

  • Details you enter in the contact form (name, email, phone, message) and the submission timestamp.
  • Details you choose to import during social sign-in (name, email, avatar) — never automatically.
  • Email address (and optionally your name) for the newsletter, with consent timestamp and unsubscribe history.
  • Job application details submitted through the portal (profile, CV, message, policy acceptance timestamp).
  • Technical connection data (for example IP address, browser) for security and operation.
  • Data from cookies and similar technologies, according to your choices in the banner.
  • Records of correspondence about your request, where needed to serve you.

Purposes of processing

  • Responding to enquiries and providing information about our services.
  • Sending newsletters only to subscribers with a documented consent record.
  • Assessing and managing job applications submitted through the portal.
  • Operating, securing and improving the website.
  • Security, abuse prevention and technical maintenance of the website.
  • Meeting legal obligations where applicable.

Consent and opt-out

We ask for explicit, unticked-by-default consent wherever it is required:

  • Contact form — privacy and terms checkbox.
  • Social sign-in — you choose the fields (name, email, avatar), none preselected.
  • Newsletter — consent checkbox; unsubscribe link in every email.
  • Job application — checkbox accepting the privacy policy.
  • Cookies — banner with accept, reject and settings; withdraw at any time.
  • Client portal — privacy centre for data export and deletion requests (subject to approval).

Legal bases

We process data on the basis of consent (contact form, portal registration, newsletter, non-essential cookies), performance of a contract or pre-contractual steps (providing maritime services, account management), compliance with legal obligations (tax, customs and port records), and legitimate interests (system security and abuse prevention).

Retention periods

We keep data only as long as needed for its purpose or as required by law. Contact messages are kept for up to two years, job applications for up to twelve months, newsletter records until you unsubscribe, and accounting documents for the period set by tax law.

Who receives your data

Access is limited to authorised members of our staff. Data may be shared with hosting and email providers, accountants and legal advisers, and with port, customs and public authorities where this is required to carry out an order or by law. We never sell personal data.

Transfers outside the EEA

Data is hosted within the European Union. Where we use providers outside the EEA (for example Google services), transfers rely on standard contractual clauses and appropriate supplementary safeguards.

Security

We use transport encryption (HTTPS), hashed passwords, role-based access control, action logging, regular backups and prompt security updates. If a breach poses a risk, we notify the authority and affected individuals as the law requires.

Your rights

As a data subject you have the following rights:

  • Access to your data.
  • Rectification of inaccurate data.
  • Erasure where applicable.
  • Restriction of processing where applicable.
  • Portability where applicable.
  • Objection to processing based on legitimate interests where applicable.
  • Withdrawal of consent at any time, without affecting lawfulness before withdrawal.

To exercise your rights, send a request to our privacy email. We may ask you to confirm your identity. We reply within one month, with an extension where the law allows.

Automated decision-making

We do not make decisions that produce legal or similarly significant effects based solely on automated processing or profiling.

Minors

Our services are addressed to businesses and adults. We do not knowingly collect data from children under 16. If such data is found, it is deleted.

Cookies

Details on categories, duration, and consent management are in the Cookie policy.

Complaint to the authority

If you believe the processing breaches the law, you may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Ave., 115 23 Athens, www.dpa.gr).

Changes to this policy

This policy may be updated when our services or the legal framework change. The date of the last update is shown on the page.