Privacy notice

1. Who we are

This privacy notice explains how Plain Seas collects and uses personal data through this website and in communications that start from it. Plain Seas is the controller of that data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

2. What this notice covers

This notice covers visits to plainseas.com and enquiries you send us by email or telephone. It does not cover Safety Management System documentation or other material that clients provide to us during an engagement. That material is handled under the confidentiality and data protection terms of the relevant client agreement.

3. The personal data we collect

When you contact us. If you email or telephone us, we process the information you choose to provide: typically your name, company, job title, email address, telephone number and the content of your message.

When you visit the website. When you load a page, our hosting and security provider automatically processes technical data needed to deliver the page and protect the site: your IP address, browser and device type, the page requested, and the date and time of the request.

We do not use analytics, advertising or social media tracking on this website. We do not load content from third-party services: the fonts and images are served from our own site.

4. Why we use it, and our legal basis

• To answer your enquiry and prepare a proposal — to take steps at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to business correspondence (Article 6(1)(f)).
• To deliver the website and keep it secure — our legitimate interest in operating a reliable website and protecting it against misuse and attacks (Article 6(1)(f)).
• To meet legal obligations, for example accounting and tax record-keeping once we work together (Article 6(1)(c)).

We do not use your personal data for automated decision-making or profiling, and we do not sell it.

5. Who receives your data

We share personal data only where necessary, with:

• Cloudflare, Inc., which hosts this website and protects it against attacks, acting as our processor;
• Google, which provides our email service through Google Workspace, and our other IT service providers, acting as processors under our instructions;
• our professional advisers, such as accountants and lawyers, under duties of confidentiality;
• public authorities, where we are required to by law.

6. Transfers outside the European Economic Area

Cloudflare, which hosts this website, and Google, which provides our email service, may process data in the United States. Both participate in the EU–US Data Privacy Framework. Cloudflare additionally uses the European Commission’s Standard Contractual Clauses for transfers where needed. Where any other provider transfers data outside the EEA, we require an equivalent safeguard recognised under the GDPR.

7. How long we keep it

• Enquiries that do not lead to an engagement — deleted no later than 24 months after our last contact.
• Correspondence with clients — for the duration of the relationship and afterwards for as long as Greek commercial and tax law requires, or as needed to establish or defend legal claims.
• Technical data from website visits — kept by our hosting provider only for the short period needed for delivery and security.

8. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, email info@plainseas.com. We will respond within one month.

9. Complaints

If you believe we have not handled your personal data properly, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.

10. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections to this website, restricted access to correspondence, and confidentiality obligations for everyone who handles it.

11. Changes to this notice

We may update this notice, for example if we add new services to the website. The date at the top shows when it was last changed. For information about cookies, see our cookie policy.