3 Yacht Management Limited (the ‘Company’) is committed to protecting the privacy and security of your personal information.
This Privacy Notice describes how we collect and use personal information about you during and after your working relationship with us, in accordance with the General Data Protection Regulation (‘GDPR’).
We are required under data protection legislation to notify you of the information contained in this Privacy Notice (the ‘Notice’). This Notice does not form part of any contract to provide services.
We may update this Notice at any time.
It is important that you read this Notice, together with any other Privacy Notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information. The register office of 3 Yacht Management LTD is 31 Church Road Parkstone BF14 8UF, United Kingdom.
Personal data, or personal information, means any information about a living individual from which that living individual can be identified. It does not include data where the identity has been removed (anonymous data).
Depending on your relationship with the Company, we may collect, store, process and use the following categories of personal information about you:
There are "special categories" of more sensitive personal data which require a higher level of protection. We may also collect, store, process and use the following "special categories" of more sensitive personal information:
We may process special categories of your personal information in the following circumstances:
We will use your particularly sensitive personal information in the following ways:
We collect personal information about you through the application and on boarding process, either directly from you or a third party representative which you have appointed. We may collect additional personal information in the course of the relationship from background check agencies.
We comply with our obligations under the GDPR by keeping personal data up to date; storing and destroying it securely; not collecting or retaining excessive amounts of data; protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect your personal information.
We will process your personal information in the following lawful circumstances:
We do not need your consent when processing your personal information in accordance with this Privacy Notice. Your personal information is required to enable us to comply with our legal obligations and for our legitimate interests.
In limited circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.
We obtain all the categories of information in the list above primarily to allow us to comply with our legal obligations. In some cases, we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests. The situations in which we will process your personal information are listed below.
When you supply us with personal data about another individual you must ensure that you:
If you fail to provide certain information when requested, we may be prevented from complying with our legal obligations.
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
If we need to use your personal information for an unrelated purpose, we will provide you with an updated Privacy Notice which will explain the legal basis which allows us to do so.
Please note that we may process your personal information for another purpose without your knowledge or consent, where this is required or permitted by law.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Any data we receive will be kept strictly confidential, unless it is appropriate for us to share your
personal information with contractors, regulatory bodies, banks, background checks,
government, tax authorities, or when we are compelled to disclose it by law.
We may share your personal information with third parties where required by law, or where we have another legitimate interest in doing so.
All our third-party service providers and other entities within the EU are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
Third parties will dispose of your personal data in line with our internal procedures when it is no longer required in order to fulfil the service.
We may share your personal information with a regulator or to otherwise comply with the law.
The Company may transfer the personal information we collect about you to another country when required to do so by law.
We will never transfer your personal information to a country or territory outside of the EU which has not implemented adequate safeguards in relation to your personal information.
To ensure that your personal information receives an adequate level of protection when being transferred to another country or territory, we have implemented appropriate security measures.
We have implemented appropriate security measures designed to protect your personal data from accidently loss, use, unauthorised access, alteration and disclosure. These measures include industry standard firewalls and intrusion detection.
In additional we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. These employees or parties are limited in number, will only process your data on our instruction and are subject to a duty of confidentiality.
Details of these measures are available upon request.
Unless subject to an exemption under the General Data Protection Regulation, you have the following rights with respect to your personal information:
You will not have to pay a fee to exercise any of your rights. However if your request for access is clearly unfounded or excessive we may charge a reasonable fee. Alternatively, we may refuse to comply with the request in such circumstances.
We may require specific information from you to assist us in confirming your identity and ensure your right to access the information. This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
If you would like to exercise any of your rights please contact us at DPA@3yachtmanagement.com
You have the right to lodge a complaint to the UK Information Commissioner Office if you believe that we have not complied with the requirements of the General Data Protection Regulation.