Privacy Policy

Who we are

This policy explains how Alassia NewShips Management Inc. (“Alassia”, “we”, “us”) collects and uses personal data through this website, www.alassia.eu.

We are the data controller for the processing described here.

Registered address: 138 Dionysou Str, 151 24 Maroussi, Athens, Greece
Telephone: +30 210 61 07 050
General enquiries: admin@alassia.eu
Data protection enquiries: dpo@alassia.eu

What this policy covers, and what it does not

This policy covers personal data we process about visitors to this website.

It does not cover:

Seafarers serving on vessels under our management. A separate seafarer privacy notice applies.
Our shore employees. An internal employee privacy notice applies.

If you are unsure which notice applies to you, contact dpo@alassia.eu and we will tell you.

What we mean by processing personal data

Processing means any operation performed on personal data, whether or not by automated means. It includes collecting, recording, organising, storing, adapting, retrieving, using, disclosing, transmitting, restricting, erasing and destroying data.

What we collect, why, and on what legal basis

1. Information you send us directly

If you email one of the addresses published on our Contact page, we receive whatever you choose to include: typically your name, email address, and the content of your message, and sometimes your telephone number, employer or postal address.

Why: to read, route and respond to your enquiry.
Legal basis: our legitimate interest in responding to enquiries about our business (GDPR Article 6(1)(f)). Where your enquiry relates to a contract or a prospective contract with us, the basis is performance of a contract or steps taken at your request prior to entering one (Article 6(1)(b)).
How long we keep it: for the duration of our contractual relationship.

We do not sell your data, and we do not pass your message to third parties except where we are required to do so by law or need to in order to establish, exercise or defend a legal claim.

2. Information collected automatically when you browse

When you visit this website, technical information is collected automatically: your IP address or device identifier, device type, operating system and browser version, the pages you view, the pages you arrive from and leave to, time spent on each page, and the links you select.

Why: to deliver the website securely and reliably, and, where you have consented, to understand how the site is used so that we can improve it.
Legal basis: for data strictly necessary to deliver and secure the site, our legitimate interest (Article 6(1)(f)). For analytics and any non-essential cookies, your consent (Article 6(1)(a)), which you may withdraw at any time.
How long we keep it: as set out per cookie in our Cookies Policy.

This information is collected using cookies and similar technologies. Please read our Cookies Policy for the full inventory and for how to control them.

Our official email addresses

Our general enquiries address is admin@alassia.eu. Our departmental addresses are published on the Contact page and all end in @alassia.eu.

Any address that does not end in @alassia.eu is not ours. We are not responsible for correspondence exchanged with any other address claiming to belong to us. If you receive a message that appears to come from Alassia but not from an @alassia.eu address, please report it to admin@alassia.eu.

Who has access to your data

Within Alassia, access is limited to authorised personnel who need it to do their job and who are bound by confidentiality obligations.

Security

This website uses TLS encryption to protect data in transit. We apply technical and organisational measures appropriate to the risk, including access control, logging, backup and staff awareness training, as set out in our Cyber Security Policy and Data Protection Policy.

Links to other websites

Our website, particularly in the news section, may link to third-party websites. Those sites are not under our control and their privacy practices are not ours. We encourage you to read the privacy policy of any site you visit from here.

Social media

We maintain company profiles on LinkedIn, Instagram and X.

This policy does not apply when you interact with us through a social media platform. In that case the platform’s own privacy policy governs how your data is handled, and the platform is generally the controller for that processing. Please read the relevant platform’s policy before using it to contact us.

Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, through this website.

Your rights

You have the following rights in relation to your personal data.

Right to be informed. To be told what personal data we collect and how we use it. This policy is how we meet that obligation.
Right of access. To confirm whether we process data about you and, if so, to receive a copy in a clear and accessible form.
Right to rectification. To have inaccurate or incomplete data corrected or completed without undue delay.
Right to erasure. To have your data deleted, where the conditions set by law are met.
Right to restriction of processing. To have our processing limited to specific purposes, where the conditions set by law are met.
Right to object. To object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests, rights and freedoms, or we need to process for legal claims.
Right to data portability. To receive data you have provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where the conditions set by law are met.
Right to withdraw consent. Where we rely on your consent, to withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew.
Rights in relation to automated decision-making. Not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

How to exercise your rights

Contact dpo@alassia.eu.

We will respond within one month of receiving your request. If your request is complex or you have made several, we may extend that period by up to two further months, and we will tell you within the first month if we need to, explaining why.

Complaints

If you are not satisfied with how we have handled your data or your request, you may lodge a complaint with the Greek supervisory authority:

Hellenic Data Protection Authority
1-3 Kifissias Avenue, 115 23 Athens, Greece
www.dpa.gr

You may also complain to the supervisory authority in your country of residence or place of work.

Changes to this policy

We may update this policy. The version published here is the one in force. The “Last updated” date at the top shows when it last changed. If we make a substantial change we will make that clear on the website.

Questions

If anything here is unclear, or you would like more detail about a specific processing activity, contact dpo@alassia.eu.