Zethos Shipping

1. Introduction

Welcome to the website of Zethos Shipping ("we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy informs you how we look after your personal data when you visit our website and tells you about your privacy rights and how the law protects you.

This Privacy Policy is issued in accordance with the EU General Data Protection Regulation (GDPR) and the relevant data protection laws of the Republic of Cyprus.

2. Data Controller

The entity responsible for processing your personal data on this website is:

Note: Once formal incorporation is completed, the statutory registered corporate body in Cyprus will assume the sole data controller position.

3. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: includes first name, last name, and title (e.g., if you submit an inquiry).
• Contact Data: includes email address, telephone numbers, and corporate affiliation.
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: includes information about how you use our website.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where it is necessary for our legitimate interests (e.g., to ensure website security, run our business operations, and respond to your inquiries), provided your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• Where you have given us explicit consent (e.g., for specific communication or cookies).

5. International Transfers & Maritime Operations

As an international crude oil shipping company, our operations span global jurisdictions. While our core data controller is based in Cyprus (EU) and our operational management occurs through our branch office in Greece (EU), some data processing may occasionally involve third-party service providers or port authorities outside the European Economic Area (EEA).

If we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• We use specific Standard Contractual Clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.

6. Data Security

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data ("the right to be forgotten").
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data (data portability).
• Right to withdraw consent at any time.

If you wish to exercise any of these rights, please contact us at: privacy-policy@zethos-shipping.com

You also have the right to make a complaint at any time to the Cyprus Data Protection Commissioner (the supervisory authority for data protection issues in Cyprus) or your local EU authority.