1. Who is responsible
SeaRoute is the brand used on this website, with Cyprus as the stated business location. The operator responsible for SeaRoute’s own processing must be identified by its full legal name and address in the final notice; those details have not yet been supplied.
For privacy enquiries, contact team@searoute.io. This address is a privacy contact and is not a claim that a statutory data protection officer has been appointed.
This notice concerns the informational website and related enquiries. It does not cover a live chartering account, payment service, vessel-tracking account or electronic bill-of-lading service. Each will need appropriate information before it is activated.
2. The current website
The contact form is inactive. SeaRoute’s page code does not send or save the names, role or text entered into it. Your browser may independently retain form values or provide autofill under your own settings.
The download button has no download or navigation action. This website has no payment flow, account-registration form, newsletter subscription, cargo upload or blockchain transaction function.
Fonts, the logo, the globe and animation libraries are served with the website. The globe does not request your location, fetch live vessel positions or send interaction events to a SeaRoute analytics service.
3. Information and purposes
Website delivery. Request data such as an IP address, requested page, time, browser information and response status may be handled by hosting and security services to deliver the site and protect it. Where SeaRoute determines this processing, the proposed basis is its legitimate interest in operating a reliable, secure website, subject to the required assessment of visitors’ interests and rights.
Email enquiries. If you choose to email us, the message may include your name, email address, role, organisation, correspondence and any attachments you provide. The proposed purposes are to answer you and manage the relevant business discussion. Ordinary business correspondence would rely on legitimate interests. Steps requested by an individual towards their own contract may instead rely on pre-contractual necessity.
Legal requests. Information needed to meet an applicable legal duty or handle a rights request would be processed on that legal basis. The final notice must reflect the operator’s actual practices and records.
You do not need to send personal information to read the site. Providing an email address and relevant context is voluntary, but without enough information we may be unable to answer an enquiry. Avoid sending sensitive or unnecessary personal data.
5. Service providers and disclosures
This website uses Cloudflare Pages for hosting and delivery. Hosting and security services may process technical request information needed to serve and protect it. Email providers also handle messages you choose to send. A provider may have its own responsibility for security processing under its own notice.
For SeaRoute’s processing, access should be limited to authorised personnel and providers who need the information for the stated purpose, with appropriate contractual terms. Information may also need to be disclosed to professional advisers or competent authorities when necessary and lawful.
The final notice must identify the relevant provider arrangements and responsibilities. This draft does not claim that a processor contract or a particular provider’s retention settings have already been verified.
6. International transfers
Hosting or email services may process information outside the European Economic Area. The countries and transfer arrangements for this deployment have not yet been confirmed.
Before finalising this notice, SeaRoute must verify and disclose any applicable transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, and explain how relevant information can be obtained. No assurance of EU-only storage is made in this draft.
7. How long information is kept
The proposed retention approach is to keep an enquiry for the time needed to resolve it and manage reasonably necessary follow-up, then delete or anonymise it unless a specific legal obligation or legal claim requires longer retention. A continuing customer relationship may require a separate retention schedule and notice.
The inactive form creates no SeaRoute submission record to retain. Hosting, access and email logs may have their own retention periods. Their actual settings, backup periods and deletion procedures still need confirmation; this draft does not invent a fixed duration or guarantee immediate deletion from all systems.
8. Your rights
Where the GDPR applies, you may request access, correction, deletion or restriction of your information, object to processing based on legitimate interests, and request portability where its conditions apply. You may withdraw any consent you have given without changing the lawfulness of earlier processing.
Send requests to team@searoute.io. A controller normally has one month to respond; a permitted extension must be explained. Identity checks should be proportionate. Rights may be subject to lawful exceptions, and a refusal must be explained.
The current website code does not make decisions about you with legal or similarly significant effects and does not profile visitors. It offers no marketing subscription.
Further information is available from the European Commission’s guide to data-protection rights.
9. Complaints
You may raise a concern with SeaRoute or complain directly to a competent data-protection authority. You do not have to contact us first.
In Cyprus, the authority is the Commissioner for Personal Data Protection. Its contact email is commissioner@dataprotection.gov.cy. Current authority details are available in the European Data Protection Board’s members directory.
Where applicable, you may also complain to the authority in your country of habitual residence or workplace, or where the alleged infringement occurred. This notice does not restrict judicial remedies.
10. Security, audience and updates
The hosted website is accessed over HTTPS. No transmission or storage system can be guaranteed completely secure. Please avoid sending passwords, identity documents or confidential voyage records through an ordinary introductory email.
SeaRoute is presented as a business service for shipping professionals and is not directed at children. If you believe a child’s information has been sent to the team, contact us so it can be assessed and addressed appropriately.
This notice must be updated as the operator’s details are confirmed and before new collection, tracking, account or transaction features are enabled. Material changes will be reflected in the dated notice and communicated separately when required.
Privacy contact: team@searoute.io
SeaRoute · Cyprus