GDPR Policy

1. Introduction

Poseidon Marine Supplies is committed to ensuring the protection of personal data and privacy in compliance with the General Data Protection Regulation (GDPR) and relevant data protection laws. This policy outlines our approach to data protection and our responsibilities regarding the processing of personal data.

2.Principles

Our data processing activities are guided by the following principles:
a) Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and transparently, ensuring individuals are informed about how their data is used.
b) Purpose Limitation: We collect and process personal data only for specified, explicit, and legitimate purposes.
c) Data Minimization: We ensure that the personal data we collect is relevant, adequate, and limited to what is necessary for the intended purposes.
d) Accuracy: We take reasonable steps to ensure the accuracy of the personal data we hold and update it when necessary.
e) Storage Limitation: We retain personal data only for as long as necessary for the purposes for which it was collected.
f) Integrity and Confidentiality: We implement appropriate security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

3.Data Protection Officer

Poseidon Marine Supplies has appointed a Data Protection Officer (DPO) who is responsible for overseeing GDPR compliance and serving as a point of contact for data subjects and supervisory authorities.

4.Data Processing Activities

We process personal data for the following purposes:
a) Employee Data: We collect and process employee data for HR and administrative purposes, ensuring confidentiality and security.
b) Customer Data: We collect and process customer data for the provision of products and services, ensuring consent where required.

c) Marketing: We may use personal data for marketing purposes with the consent of individuals or as permitted by law.

5.Subject Rights

We respect the rights of data subjects and provide mechanisms for them to exercise their rights, including:
a) The right to access their personal data.
b) The right to rectify inaccurate or incomplete data.
c) The right to erasure (the “right to be forgotten”).
d) The right to restrict processing.
e) The right to data portability.
f) The right to object to processing.

6.Data Breach Response

In the event of a data breach, we will promptly assess the impact, take necessary corrective actions, and notify the appropriate authorities and affected individuals as required by GDPR.

7.Training and Awareness

We provide regular GDPR training and awareness programs for our employees to ensure compliance with data protection requirements.

8.Review and Updates

This GDPR policy will be reviewed periodically to ensure alignment with legal requirements and best practices.

9. Conclusion

Poseidon Marine Supplies is dedicated to upholding the principles and obligations set forth in the GDPR. We consider data protection a fundamental aspect of our operations, and we are committed to continuously improving our data protection practices.

COO
Michalis Leoutsakos