1. Data Controller
Vessel Core OÜ (registry code 17028043), located at Tähesaju tee 21, 13917 Tallinn, Estonia, is the data controller responsible for processing your personal data. For any data-related inquiries, contact us at sales@vesselcore.eu.
2. What Data We Collect
We collect personal data that you voluntarily provide when submitting a Request for Quotation (RFQ) or contacting us:
- Full name
- Email address
- Company name
- Vessel name or IMO number
- Equipment and part details included in your RFQ
- Port and ETA information
We also automatically collect certain technical data through cookies and server logs:
- IP address
- Browser type and version
- Pages visited and time spent on the site
- Referring website
- Device information
3. How We Use Your Data
Your personal data is processed for the following purposes:
- RFQ processing: to respond to your spare parts inquiries and prepare quotations
- Communication: to follow up on your requests, provide technical information, and support ongoing supply relationships
- Service improvement: to analyse website usage patterns and improve our services
- Legal compliance: to fulfil our legal and regulatory obligations under Estonian and EU law
- Marketing: with your consent, to send relevant information about our services and capabilities
4. Legal Basis for Processing
We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
- Contractual necessity (Art. 6(1)(b)): processing required to respond to RFQs and perform contracts
- Legitimate interest (Art. 6(1)(f)): improving our services, website analytics, and business development
- Consent (Art. 6(1)(a)): for marketing communications (where applicable)
- Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and other regulatory requirements
5. Data Sharing
We do not sell your personal data. We may share data with:
- Suppliers and logistics partners: to fulfil your spare parts orders (only the data necessary for delivery)
- Service providers: hosting (Cloudflare), email services, analytics tools — all bound by data processing agreements
- Legal authorities: when required by law or to protect our legal rights
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described above:
- RFQ and transaction data: up to 7 years (legal and accounting requirements)
- Marketing consent records: until consent is withdrawn
- Website analytics data: up to 26 months
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your data (subject to legal retention obligations)
- Right to restriction: request limited processing of your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent: withdraw any consent previously given, at any time
To exercise any of these rights, contact us at sales@vesselcore.eu. We will respond within 30 days.
8. Cookies
Our website uses essential cookies required for the site to function properly. We may also use analytics cookies (such as Google Analytics) to understand how visitors interact with our site. You can manage cookie preferences through your browser settings.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS and hosted on Cloudflare infrastructure with enterprise-grade security.
10. International Transfers
Your data may be processed by service providers located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this page periodically.
12. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
- Website: www.aki.ee
- Email: info@aki.ee
- Address: Tatari 39, 10134 Tallinn, Estonia
13. Contact
For any questions about this Privacy Policy or our data practices:
- Vessel Core OÜ
- Tähesaju tee 21, 13917 Tallinn, Estonia
- Email: sales@vesselcore.eu
- Registry code: 17028043
- VAT: EE102773714