Data protection information notice according to articles 13-14 GDPR
The controller of your personal data is OceanSky Cruises AB. You can reach us at firstname.lastname@example.org
Two kinds of personal data can be at issue: a) cookies-related data and b) other personal data that you voluntarily disclose when communicating with the data controller in terms of communication, event management, and participation.
For the other category of data (point b), such personal data can include: name, surname, email address and any other personal information that the data subject might disclose to Oceansky Cruises team when contacting them via email.
The lawful ground to process such data can be “contract” (Article 6(1)(b) if the communication is with an aim to conclude contractual relationship with the controller) or legitimate interests (Article 6(1)(f) if the communication is for other purposes, including research, teaching, press release, etc.) or consent if the data subject in his/her communication gives unambiguous indication of his/her will that his/her data are processed for the purposes strictly related to that communication. Such purposes can be only the following ones: a) possible research and scientific collaborations or conference invitations (and be contacted by the data controller for this purpose); b) possible interviews or press releases (and be contacted by the data controller for this purpose); c) teaching-related activities (information about courses, thesis supervision, etc.) (and be contacted by the data controller for this purpose). For the last letter (c), it is recommended to use institutional emails (email@example.com).
In case the data subject will disclose special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation) in his or her communications with the data controller, either the data subject will contextually give indications of will about the processing of such data or that data will be immediately erased. In the first case the processing will be based on consent (Article 9(2)(a)), in the second case the erasure will be under substantial public interest (based on the principles of lawfulness and data minimization in data processing, Article 5 GDPR) according to Article 9(2)(g).
The data are stored for the period of existence and activity of this website.
The data subject has the right to access his/her personal data and obtain all the information on the processing as mentioned in Article 15 Regulation 679/2016, hereinafter GDPR, (origin, purpose, lawful grounds, details about the data controller, recipients, duration, other data subjects’ rights, etc.).
The data subject also has the right to rectify his/her personal data, update, delete or request the limitation of processing. The content and exercise of these rights is regulated by Articles 15-18 of the GDPR. Finally, the data subject has the right to revoke the consent for the processing of his/her personal data. The revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.
The data subject has the right to lodge a complaint with the Data Protection Supervisor if he or she believes that the processing of his or her personal data is in breach of the GDPR, pursuant to and in accordance with Article 77 of that Regulation.