GDPR & Data Protection

How We Protect Your Personal Data

1. Introduction

This GDPR & Data Protection Notice explains how Ocean Line LLC (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Georgian data protection legislation.

By contacting us, submitting your application, or otherwise providing your personal data, you acknowledge that we process your personal data for the purposes described in this notice.

2. Data Controller

The data controller responsible for the processing of your personal data is:

Ocean Line LLC
Akhmed Melashvili Str 24,
Batumi, Georgia

3. Data Protection Officer & Contact for Complaints

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions and complaints in relation to this notice and our processing of personal data.

Name: RUSUDAN PALAVANDISHVILI
Position: Data Protection Officer
Phone: +995 593 769 740
Email: crew@oceanline.space, oceanlinegeorgia@gmail.com
Address: Akhmed Melashvili Str 24, Batumi, Georgia

This person is responsible for receiving and reviewing any claims, complaints, requests and inquiries related to personal data processing. You may contact the DPO at any time using the details above.

4. Categories of Personal Data We Process

We process personal data necessary to provide maritime crewing, recruitment and related services, including:

  • Identification data (name, date of birth, nationality, passport and ID details);
  • Contact details (address, phone number, email);
  • Professional and employment data (CV, rank, maritime experience, references);
  • Qualification and certification data (e.g. STCW, medical certificates, training records);
  • Financial data (bank details for salary payments where applicable);
  • Visa and travel data (visas, tickets, travel history related to employment);
  • Any other information you choose to share with us in the recruitment / crewing process.

5. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases under GDPR:

  • Recruitment and placement of seafarers on vessels – processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
  • Crew management and HR administration – performance of a contract and our legitimate interests to manage our operations (GDPR Art. 6(1)(b), 6(1)(f)).
  • Compliance with legal and regulatory obligations (e.g. maritime, immigration, tax, employment laws) – compliance with a legal obligation (GDPR Art. 6(1)(c)).
  • Communication with you about job opportunities, assignments, and support – performance of a contract and legitimate interests (GDPR Art. 6(1)(b), 6(1)(f)).
  • Record keeping, safety and security – legitimate interests in ensuring effective management, safety and security (GDPR Art. 6(1)(f)).
  • Processing based on your consent (where required, e.g. for certain marketing communications) – consent (GDPR Art. 6(1)(a)), which you may withdraw at any time.

6. Data Processing Warning

Important: Ocean Line LLC does process personal data of seafarers, ship owners, partners and other individuals in the course of providing crewing and recruitment services. All such processing is carried out in accordance with GDPR and applicable Georgian law, based on the purposes and legal grounds described in this notice.

7. Data Sharing and International Transfers

We may share your personal data with:

  • Ship owners, operators and managers for the purpose of crew recruitment and placement;
  • Maritime authorities, flag state administrations and port state control, where required;
  • Immigration and other governmental authorities in connection with visas and travel;
  • Medical facilities and insurance providers for medical examinations and coverage;
  • Professional advisers (lawyers, auditors, consultants) where necessary;
  • IT and system providers who support our business operations.

Where personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent measures) in accordance with GDPR requirements.

8. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. As a general rule:

  • Recruitment and crewing records are retained for the duration of your cooperation with us and for a reasonable period thereafter;
  • Documents required by law (e.g. accounting, tax, employment) are retained for the periods specified in applicable legislation;
  • Where processing is based on consent, data may be deleted earlier if you withdraw your consent.

9. Your Rights as a Data Subject

Subject to the conditions and applicable limitations under GDPR, you have the right to:

  • Request access to your personal data and obtain a copy;
  • Request rectification of inaccurate or incomplete data;
  • Request erasure of your data (“right to be forgotten”) where applicable;
  • Request restriction of processing in certain circumstances;
  • Object to processing based on our legitimate interests;
  • Receive your data in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible (data portability);
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal;
  • Lodge a complaint with a competent data protection authority.

To exercise any of your rights, please contact our Data Protection Officer using the details provided above.

10. Complaints

If you believe that your data protection rights have been violated, you may first contact our Data Protection Officer who is responsible for receiving and reviewing all complaints related to personal data processing. You also have the right to lodge a complaint with your local supervisory authority or any other competent data protection authority.

11. Changes to This Notice

We may update this GDPR & Data Protection Notice from time to time to reflect changes in our practices, legal requirements or other operational reasons. The updated version will always be available on this page.

Last updated: January 2025