GDPR PRIVACY POLICY
Pursuant to art. 13 sec. 1 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27/04/2016 (GDPR), we would like to inform you that:
the Administrator of your personal data is Sebastian Cyrson, running a business under the name UNIQREW Ltd Sebastian Cyrson, based in Gdynia (81-661), at 2 Morskiego Pułku Strzelców Street 3/18, NIP (VAT ID): 5861916358, REGON (Stat. ID): 387344567.
Contact with the Data Protection Officer of the Administrator (Jacek Witt) is possible at the following e-mail address: rodo@apmar.org.pl.
- Your personal data will be processed for the purpose of:
- implementation of the recruitment and employment process on sea-going ships in international shipping with a Polish or foreign shipowner, in accordance with the provisions of the MLC 2006 Convention, the Act of August 5, 2015 on work at sea (Journal of Laws of 2015, item 1569, as amended) as amended), the Act of 20 April 2004 on employment promotion and labor market institutions (Journal of Laws of 2017, item 1065, as amended) and the Maritime Collective Agreement concluded by the Administrator with Polish trade unions of seafarers – on the basis of your consent (art.6 par.1 a) and art. 9 sec. 2a) Regulation of the European Parliament and of the Council (EU) 2016/679);
- fulfillment of legal obligations resulting from legal provisions – pursuant to art. 6 sec. 1 c) Regulation of the European Parliament and of the Council (EU) 2016/679 (settlement of the contract and payment of taxes and other levies);
- protection of the vital interests of the data subject, including, for example, in the event of accidents at sea – pursuant to art. 6 sec. 1 d) Regulation of the European Parliament and of the Council (EU) 2016/679;
- fulfillment of obligations arising from legitimate interests pursued by the Administrator or by a third party – pursuant to art. 6 sec. 1 f) Regulation of the European Parliament and of the Council (EU) 2016/679, i.e. e.g. pursuing claims.
- Scope and time of processed personal data:
“ordinary” personal data: i.e. first name; last name; date and place of birth; citizenship; PESEL number; address; bank account number for remuneration transfer; e-mail address; phone number; seaman’s book number; passport number; data on obtained qualifications, diplomas and maritime certificates and others included in the application form, as well as special categories of personal data: i.e. health information (in particular included in the health certificate); the seafarer’s trade union membership, based on the Maritime Collective Labor Agreement referred to in point 1a, as well as biometric data in the form of a photo, will be processed by the Administrator throughout the employment period, and then archived for possible future use, for a period of 5 years. - Providing personal data referred to in point 2 is voluntary, although it is necessary to conclude the contract referred to in point 1a.
- Your personal data is not subject to automated decision making or simple profiling.
- Your personal data may be transferred to the following entities:
- governmental administration (in particular: authorities competent for immigration at the ports of arrival, Port State Control and Flag State Control),
- providers of medical and health care services, established in the territory of a country belonging to the EU / EEA and a country ensuring an adequate level of protection of personal data processing operations according to the decision of the European Commission issued pursuant to art. 45 sec. 3 GDPR as well as countries that have not obtained a decision of the European Commission regarding the appropriate level of protection of personal data processing operations,
- postal service operators, both traditional and electronic.
- In the event of an emergency (threat to life/health) to provide personal data referred to in point. 2 to a third country, as defined in art. 49 GDPR (i.e. not meeting the requirements of having an appropriate level of protection according to the decision of the European Commission issued pursuant to Art.45 (3) GDPR), the Personal Data Administrator will inform you or the closest family member (Next Of Kin within the meaning of the Maritime Collective Labor Agreement) about the level of security applicable in a given country and the possibility of obtaining a copy of the data and the places where this data is made available.
- In the event of an emergency (threat to life/health) to provide personal data referred to in point. 2 to a third country, as defined in art. 49 GDPR (i.e. not meeting the requirements of having an appropriate level of protection according to the decision of the European Commission issued pursuant to Art.45 (3) GDPR), the Personal Data Administrator will inform you or the closest family member (Next Of Kin within the meaning of the Maritime Collective Labor Agreement) about the level of security applicable in a given country and the possibility of obtaining a copy of the data and the places where this data is made available.
- If you believe that the processing of personal data by the Administrator violates the provisions of the GDPR Regulation and other generally applicable legal acts, you have the right to lodge a complaint with the President of the Personal Data Protection Office (address: Stawki Street 2, 00-193 Warsaw) pursuant to art. 77 GDPR in connection with joke. 34 sec. 2 of the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000).