Privacy Policy
General information
1. Fleet Management Limited is a company based in Hong Kong, 27th Floor, South Island Place 8 Wong Chuk Hang Road Hong Kong (“Company”). The Company and such of its subsidiaries, affiliates and associated companies who are engaged in the business of providing ship management services to its clients are hereinafter called “Fleet Management Group” (or “us”, “we” or “our”). The indicative list of such companies can be found here.
2. This privacy policy explains what data may be collected by us including via our website at https://www.fleetship.com/ (“Website”) or other means, what is the purpose and how this data will be processed. It also explains your rights in relation to your personal data and how to contact us in the event you have a complaint. By visiting the site, you are acknowledging and accepting this Privacy Policy. In the event of any changes to our Privacy Policy, whether required by law or otherwise, we shall post such changes on our Website or notify you via other means. Your continued use of the Website or our services or otherwise your continued dealing with us after changes have been posted to the Privacy Policy will constitute your acceptance of such changes.
3. All capitalised terms not otherwise defined in this Privacy Policy shall have the meanings ascribed to them in the Terms of this Website.
4. We respect the privacy of individuals and of the personal data collected in the course of our business operations. We are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of the Hong Kong SAR, details of which can be found on the website of the Privacy Commissioner. We have updated this Privacy Policy with the aim of complying with the EU General Data Protection Regulation (Regulation (EU)2016/679) (“GDPR”) and the Personal Information Protection Law of the People’s Republic of China (“PIPL”), always only to the extent of their applicability to us.
5. Where the Fleet Management Group controls how your personal data is collected and the purposes for which we use your personal data, the Fleet Management Group will act as the “data controller” for the purposes of the GDPR (or also known as a “personal information processor” under the PIPL).
Collection of Personal Data
6. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We obtain Personal Data which you disclose to us, both online and offline, such as when you:
- Visit our websites and/or complete one of our web forms;
- Visit our premises;
- Receive our products and/or services which you requested; or
- Communicate with us via any means and for any purpose, including but not limited to telephone, and through the use of networking websites, third-party applications or similar technologies.
7. We may also collect information from third-party sources such as sub-contractors. In certain instances, your employers may provide us with your information.
8. Some of our offices may have also installed CCTV cameras which may capture and collect video footages or images of you.
Nature of Personal Data
9. From our clients (including potential clients) as well as other counterparties (including potential counterparties) such as vendors, agents, and service providers:
The information that we may collect and hold about third parties includes:
- Identifying Data: name, surname, job title.
- Contact Data: telephone number, physical address, email address, your company contact data and any other similar data.
- Financial Data: banking information, VAT number, details about payments to and from clients/potential clients and other accounting details.
- Our correspondence with you: this includes any feedback, enquiries, complaints and comments from clients/potential clients via telephone, email or social media, or records of any online, paper or in-person correspondence and interactions between us.
- Voluntary information: other types of information that counterparties may voluntarily choose to provide to us.
10. From the users of our Website
The information that we may collect and hold about users of our Website includes:
- Technical Data: Including the IP address used to connect your computer to the Internet, your browser type and version, the full Uniform Resource Locators (URL), clickstream to, through and from our Website (including date and time) as well as other information regarding your experience on our Website such as page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
- Location Data: We may receive information about your location. We may determine your location through your IP address and, when accessing the Website through a mobile device, by using the data that we collect from this device. This includes information about the wireless networks or cell towers near your mobile device at the time of access. Our Website uses cookies to distinguish you from other users of our Website. This helps ensure that we provide you with a good experience when you browse our Website and also allows us to improve our Website. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.
We shall use the information obtained from the website to administer our Website and for internal operations, including troubleshooting and in order to keep our Website safe and secure to improve our Website to ensure that content is presented in the most effective manner for you and to ensure that content displayed on the Website is presented in a user-friendly manner.
*We do not generally collect sensitive information unless it is volunteered by you or unless we are required to do so, pursuant to applicable laws or regulations.
*We collect and process data of minors only when consent is given or authorised by the holder of parental responsibility over the minor.
11. From potential employees:
We collect personal data from candidates for recruitment purposes. Failure to provide the mandatory personal data may influence the processing and outcome of their job application.
The information that we may collect and hold about candidates includes:
- Name, surname, address, telephone number(s) and email address
- Details of qualifications, skills, experience, employment history and LinkedIn profile
- Any additional information contained in a candidate’s CV such as referee information disclosed at the interview or otherwise provided to us during the recruitment process.
We may ask for other personal data (including special categories of data and criminal records) during the candidate’s application or after we’ve made an offer, we will explain (often verbally) why and how it will be processed when it is requested.
We need to process data to decide whether to enter into a contract of employment with a particular candidate and may also process certain data to ensure that we are complying with our legal obligations. We have a legitimate interest in processing personal data during the recruitment process and in keeping records of the process in order to manage the recruitment process. Such data is required to assess and confirm a candidate’s suitability for employment and decide to whom to offer a particular role. We may also need to process the candidate`s data to respond to and defend itself against legal claims.
We may also contact the previous employers named by that candidate as referees for the purpose of obtaining employment references.
12. From Applicant Seafarers
The categories of personal data we may collect from any applicant seafarer include:
- his or her application form (including the personal data that the applicant has provided therein) which includes information such as name, contact details, nationality, date and place of birth, employment history, educational qualifications; and
- references provided by the applicant.
Personal data of any applicant seafarer will be collected and used by us to:
- assess the applicant’s suitability for being added to the roster of seafarers maintained by us, and
- determine preliminary remuneration, bonus payments (as applicable), and benefits package to be discussed with the applicant, subject to selection.
Where applicable, the legal basis for processing such information is the legitimate business interest of the Fleet Management Group for identifying seafarers who can be deployed on the vessels of its customers.
The special categories of personal data we may collect from applicant seafarers through the application form include applicant’s photograph, status of union membership, weight, height, dietary preference, medical history, criminal track record, and information on whether or not the applicant is a smoker.
Upon successful application and inclusion of applicant seafarer’s name to the roster, we will transfer the successful applicant’s personal data to the files kept by our manning department. This database is accessible to different companies belonging to the Fleet Management Group in different parts of the world including outside the EU/EEA and the People’s Republic of China (“PRC”). Some of these jurisdiction(s) may not have in place data protection laws which are substantially similar to or serve the same purposes as, your country of residence. Where we transfer the candidates’ data outside of the EU/EEA or the PRC, we will take reasonable measures to safeguard the transfer of the personal data to third parties in a manner that complies with the applicable data protection laws.
Data Accuracy
13. It is important that the data that we hold about you is accurate and up to date. In the event that your data changes please notify us so that we can update our records.
Purpose of processing
14. Any personal data submitted to us either in enquiries through this Website, by email or by other means provided via the Website or otherwise, will be collected, used, stored and processed by us only for the purposes of:
- providing requested information on our products, services, pricing and processes;
- establishing and maintaining contracts;
- provision of or availing of contracted services;
- invoicing, remittance, payments, collections;
- maintaining and improving our Website;
- providing requested services to you;
- marketing purpose;
- IT support services;
- business continuity planning;
- crew recruitment or management;
- employment-related processing;
- conducting due diligence checks to minimise risks or frauds;
- necessary for our legitimate interest wherein we have a business or commercial reason for using your information; or
- complying with our obligations under applicable laws and regulations.
Marketing purposes
15. We may process your personal data for direct marketing purposes. For example, we may send you marketing communications and news concerning Fleet Management Group’s services, event invitations and our company newsletter. You will only receive marketing communication from us if you have opt-in of receiving marketing material.
16. We respect if you do not want your personal data to be processed for direct marketing purposes and you can always inform us about this as per the section “Contact Us” found below or clicking on the opt-out link included in each marketing message. As soon as you notify us, your personal data will no longer be processed for marketing purposes.
Legal basis
17. We process your personal data on the following legal basis (to the extent relevant under applicable laws):
- It is necessary for us to comply with our legal obligations;
- Performance of a contract with you: the processing is necessary either due to a contract we have with you, or because we have asked you to take specific steps before entering into a contract.
- It is necessary for our legitimate interests, except where your interest and rights override those;
- It is necessary to protect your interests or those of someone else; and/or
- Consent: In the case where you have given clear consent for us to process your personal data for a specific purpose. For EU/EEA residents we do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you, processing the personal data of minors and use of cookies by our website or otherwise permitted by applicable data protection laws.
You have the right to withdraw consent at any time by contacting us. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent or if consent was not the basis of processing your information. If you withdraw your consent, we may not be able to provide certain products or services to you.
Storage, transfer and sharing
18. Your personal data collected by the Fleet Management Group may be transferred to, and stored and processed in, any country in which we or subsidiaries, affiliates or our associated third parties maintain facilities in order to carry out the purposes listed under paragraph 14 above. If you are a resident of the PRC and are providing the information through this Website including by filling in the forms/ reports available on the Website, you may refer here for an indicative list of these subsidiaries, affiliates or associated third parties situated outside the PRC. Such subsidiaries, affiliates or associated third parties should only keep your personal data for so long as is necessary to fulfil the relevant purposes set out in paragraph 14 above, unless a longer retention period is required under applicable law.
19. Given the international nature of the Fleet Management Group’s operations, personal data may be transferred to countries outside the EU/EEA and the PRC. Where we transfer your data outside of the EU/EEA or the PRC, we will take reasonable measures to safeguard the transfer of the personal data to third parties in a manner that complies with the applicable data protection laws.
20. We may disclose your Personal Data to third parties under the following circumstances in order to carry out the purposes listed under paragraph 14 above:
- if we sell, merge or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
- if Fleet Management Group or substantially all of its assets are acquired by a third party, in which case Personal data held by it about its customers will be transferred to the acquiring third party;
- vessel owners to whom the Fleet Management Group is providing ship management services or prospective customers of the Fleet Management Group with whom Fleet Management Group desires to or is in negotiation for rendering ship management services;
- any outsourced service provider or a professional advisor of the Fleet Management Group’s;
- as otherwise necessary, required or permitted by law or due to a request from a competent court, regulator or other authority;
- any government or law enforcement authority or agency, or in good faith to any other parties that the disclosure is necessary or advisable including and without limitation to protect the Fleet Management Group’s rights or properties; and
- any other person whom the Fleet Management Group considers appropriate to make a transfer in connection with the purposes set out in paragraph 14 above.
When using the services of any third party, the Fleet Management Group enquires if the third party will provide suitable technical and organisational measures to protect the personal data as required by the applicable law.
Retention
21. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. We will only store data for as long as is required to fulfil that purpose, or for the purpose of satisfying legal, tax, accounting or reporting requirements and as per the local laws of the country we operate in. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use and/or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and also the applicable legal requirements.
Security
22. We take the security of your information seriously. We will take all practicable steps, including the implementation of technical and physical security measures, to ensure that all personal data held by us is kept secure and safe from any loss or unauthorised disclosure, use and modification.
23. The security practices adopted by us include regular review of permissions and account access, as well as change, incident, risk, and problem processes to prevent and resolve issues. Security frameworks used by us for guidance are ISO27001 and the National Institute of Standards and Technology.
24. We enquire about the appropriate security certifications from our Cloud and IT vendors.
Your legal rights
25. We respect the rights granted to the data subjects pursuant to the applicable laws. GDPR and PIPL grant EU and PRC subjects respectively certain legal rights, a summary of which is set forth below:
- The right to access: They have the right to receive a copy of the personal data we hold on them as well as information about how it is used.
- The right to rectification: They have the right to ask the Fleet Management Group to correct personal data we hold on them where it is incorrect or incomplete.
- The right to erasure: This right entitles them to require the erasure of their personal data from Fleet Management Group’s systems and records. However, this right applies only in certain circumstances (e.g. where Fleet Management Group no longer needs the personal data for the purpose for which we collected it or where you withdraw consent to our use of your personal data and where there is no other legal basis for continuing to use it).
- The right to restrict processing: This right entitles them to restrict the processing of their personal data by us. Where this right is exercised, the Fleet Management Group is still permitted to store the personal data but other use of the data is prohibited, save in certain limited circumstances.
- The right to object to processing: They have the right to object to our use of their personal data in certain circumstances. However, the Fleet Management Group may continue to use their personal data, despite their objection, where there are compelling legitimate grounds to do so or we need to use the personal data in connection with any legal claims.
- The right to data portability: This right allows them to obtain their personal data in a format that enables them to transfer that personal data to another organisation where the Fleet Management Group is processing such personal data on the basis of consent or on the fulfilment of a contract and if processing is carried out by automated means. You may have the right to have your personal data transferred by us directly to the other organisation if this is technically feasible.
- Rights not to be subject to automated decision-making including profiling.
- The right to complain to a supervisory authority: You have the right to lodge a complaint with the relevant authority if you think that the Fleet Management Group has not processed your personal data in accordance with the applicable data protection legislation and,
- The right to withdraw consent: They have the right to withdraw their consent to the processing of their personal data by us at any time. This will not affect the lawfulness of our processing before the withdrawal.
Failure to provide personal information
26. Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you or we may not be able to perform the services as agreed. In case you fail to provide the required data, we may have to terminate that contract with you as a result, but we will notify you if this is the case at the time.
Contact us
27. If you have any questions on how we collect and treat personal data (including any complaints that you may have in relation to our handling of your personal data) or would like to exercise any of the abovementioned rights, please send your inquiries to: privacy@fleetship.com. Singapore data subjects may contact our DPO for Singapore too on this email address. If you are a resident of the EU/ EEA, you may send your inquiries to privacyeur@fleetship.com.
28. For any discrepancies and grievances relating to Personal Data collected and processed by Elegant Marine Services India Pvt Ltd and Fleet Management India Pvt Limited, you can contact:
Grievance Officer (India): Dhirendra Pareek or such other person whose details are updated on this website from time to time. Email id: dpareek@elegantship.com.
29. This Privacy Policy applies solely to us, and we accept no responsibility for the privacy practices of any other website. Please be aware of this when clicking on links to third-party websites (if any) from our site
Jurisdiction
30. All matters relating to this website are governed by the laws of Hong Kong.
31. This privacy policy is applicable to all subsidiaries, affiliates and associated companies of Fleet Management Group. An indicative list of such companies can be found here.