Privacy Policy
Privacy Policy
Below is detailed information about how Crewings.me (hereinafter – “Platform”, “Site”, “we” or “us”), operated by CrewingsMe LTD (legal address: 85 Great Portland Street, London, W1W 7LT, UK), processes and protects users' personal data. Our goal is to ensure transparency in the collection, use and protection of personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable norms.
General Provisions
- Purpose of the document This Privacy Policy is intended to explain to users what data we collect, how and for what purposes we process it, and how we ensure the security and protection of the collected information.
- Scope The policy applies to all services and pages located on the domain crewings.me, as well as any data interactions within the Platform, including mobile versions, apps and integrations with third-party services (where available).
- Responsibility for actions of third parties The Platform may host profiles and job postings from various maritime companies, including crewing companies and others (for example, training centers, documents processing companies, etc.). Crewings.me is not responsible for the actions, offers, content and decisions of these companies. Each employer, crewing company or partner bears independent responsibility for data processing and for the information they provide.
- Processing Principles
We adhere to the following core principles when handling personal data:
- Lawfulness, fairness and transparency
- Purpose limitation (processing only for the specified purposes)
- Data minimization (collection of only the necessary data)
- Accuracy (data updated as necessary)
- Storage limitation (not stored longer than necessary)
- Integrity and confidentiality (implementation of appropriate security measures)
1. Data Collection and Use
1.1 Collected data
We may collect and process the following categories of personal data:
- Registration data
- First and last name
- Email address
- Phone number
- Password (stored in encrypted form)
- Professional information
- Data about previous work experience and tenure (including positions, companies, dates of employment)
- List of certificates, titles and qualifications
- Level of foreign language proficiency
- Resume (CV) and other profile-provided data
- Document data
- Seaman’s passport (numbers, expiry date, country of issue)
- Maritime certificates and copies (grade, certificates of competency and etc.)
- Documents related to work authorization (if required)
- Technical data
- IP address, browser information, operating system, device settings
- Cookies and similar technologies
- Data about site interactions (date and time of visit, pages viewed, clicks)
1.2 Purposes of processing
- Providing access to the service
- User registration and authentication
- Ensuring the functionality of the personal account
- Matching relevant vacancies
- Creating job recommendations based on user-provided data
- Automatic job matching according to qualifications and work experience
- Communication with employers / crewing companies
- Transferring data about the user to potential employers with user consent
- Organizing correspondence and notifications (email, SMS, internal messaging system)
- Improving service quality
- Analyzing user experience on the site (to improve the interface and functionality)
- Collecting statistics for management decisions (e.g., popularity of sections, search query statistics)
- Compliance with legal requirements
- Fulfilling tax, labor and other legal requirements
- Fraud prevention, compliance measures
1.3 Legal grounds
- User consent We process certain categories of data on the basis of your explicit and informed consent, which you can withdraw at any time.
- Performance of a contract If you register and use the Platform services, we need to process your data to provide services to you in accordance with the User Agreement.
- Legitimate interests of the company We may process data to develop our services, maintain security and comply with internal rules. We always assess the impact on your rights and freedoms.
- Compliance with legal obligations Certain data are processed to fulfill legal requirements, prescriptions, and court acts.
2. User Rights (GDPR)
2.1 Core rights
In accordance with GDPR you have a number of rights with respect to your personal data:
- Right of access You can request a copy of your personal data and information about their processing.
- Right to rectification You have the right to request us to correct inaccurate or incomplete data.
- Right to erasure Also known as the “right to be forgotten.” You can request deletion of your data if there are no longer lawful grounds for their processing.
- Right to restriction of processing You can request temporary suspension of processing of your data in certain cases.
- Right to data portability You can request to transfer your data to another controller in a structured and commonly used format (e.g., CSV).
- Right to object You have the right to object to the processing of your personal data based on our legitimate interests at any time, provided there are no compelling legal grounds to continue such processing.
2.2 Exercising rights
- Request via the personal account In your profile there may be a dedicated form or section where you can submit a request to rectify or delete data.
- Contact the company’s DPO You can send a written request to our Data Protection Officer (DPO) by email: [email protected].
- Response time We strive to respond to any requests within 30 days of receipt. If necessary, we will notify you separately about extending this period.
3. Data Security
3.1 Technical measures
- Encryption Data transmitted between your device and our servers is protected using HTTPS (TLS). Critical data (e.g., passwords) are stored in encrypted form.
- Secure storage Access to databases is restricted; dedicated access control systems and firewalls are used.
- Regular backups We regularly create backups to restore data in case of a technical failure.
- Security monitoring We use intrusion detection systems, antivirus programs, and keep activity logs to respond promptly to incidents.
3.2 Organizational measures
- Limited employee access Access to personal data is granted only to those employees who need it to perform their duties.
- Staff training We regularly conduct training and instruction on data protection and cybersecurity.
- Internal security policies Internal regulations have been developed and implemented to establish procedures for data collection, processing and storage.
- Regular audits We periodically conduct internal and external audits to ensure GDPR compliance and security.
4. Data Transfer
4.1 Internal transfer
- Within the company Your data may be shared between different departments of CrewingsMe LTD only to the extent necessary to achieve the stated processing goals.
4.2 External transfer
- To crewing companies We may transfer your data (resume, contact details, work experience, etc.) directly to crewing companies if you have responded to their vacancy or given explicit consent to transfer.
- Data processing partners In some cases we engage external service providers (e.g., hosting providers, analytics systems, payment systems). We enter into confidentiality agreements with them and ensure that they comply with GDPR standards.
- Government authorities We may disclose data upon official requests from government authorities (e.g., law enforcement) when there are lawful grounds.
5. Data Retention
5.1 Retention periods
- Active accounts Data is stored for the entire period of the user’s account usage.
- Inactive accounts If a user has not shown activity for 12 months, we may delete or archive their account and personal data if there are no other legal grounds for further storage.
- Financial data Transaction or account data (if any) are stored for at least 7 years in accordance with accounting and taxation laws.
5.2 Deleting data
- At the user’s request If a user asks us to delete their data and we have no legal grounds for further processing, the data will be deleted.
- After the retention period We delete or anonymize data after the specified periods.
- In the absence of legal grounds If grounds for data processing are exhausted, we terminate processing and delete the data.
6. Cookies and Tracking
6.1 Types of cookies
- Necessary (Essential) Cookies without which the site cannot function (for example, session ID).
- Analytical Help understand how users interact with the site, enabling improvements to design and functionality.
- Functional Remember your preferences (for example, site language).
- Advertising (Marketing) Used to display targeted advertising and to measure the effectiveness of advertising campaigns (applied only with your consent, if required by law).
6.2 Managing cookies
- Browser settings Users can delete or block cookies at any time through their browser settings. However, disabling necessary cookies may cause some site functions to not work correctly.
- On-site management panel We may provide a special notice or banner where you can choose which cookies are allowed and which are not.
- Opting out of non-essential cookies You always have the right to opt out of analytics or advertising cookies via settings or relevant browser plugins.
7. Contacts and Inquiries
7.1 Data Protection Officer (DPO)
- Email (General GDPR questions): [email protected]
- Email (Questions related to ICO UK): [email protected]
- Address: 85 Great Portland Street, London, W1W 7LT, UK
7.2 Supervisory authorities
- Information Commissioner’s Office (ICO) in the United Kingdom, if you believe we are violating GDPR or other data protection laws. Our company is registered with the ICO as curriculum vitae service.
- If applicable, you may also contact local consumer and personal data protection authorities.
8. Limitation of Liability
- For actions of companies Crewings.me acts as a platform enabling crewing companies and other maritime organizations (training centers, documents companies, etc.) to post job offers and information about jobs, services or products. Crewings.me is not responsible for the actions of such companies. Each employer, partner or other legal entity bears independent responsibility for their business practices, the information they post, data processing and compliance with legal norms.
- Accuracy of information We do not guarantee the accuracy or up-to-dateness of information posted by companies and users on the Platform. The user independently assesses and verifies the information provided, as well as the consequences of interacting with third parties.
- Links to third-party resources The Platform may contain links to third-party websites. We do not control and are not responsible for the content and privacy policies of such resources.
- User responsibility The user is solely responsible for the truthfulness and completeness of the data they provide. Posting false or misleading information may lead to restrictions or blocking of the account.
GDPR Compliance
GDPR compliance
GDPR obligations
- Data Protection Impact Assessment (DPIA)
- We conduct regular risk assessments
- We document all data processing activities
- We implement risk minimization measures
- Data breach notification
- We commit to notifying breaches within 72 hours
- We maintain a security incident log
- We have a clear plan for responding to breaches
- International transfers
- We use Standard Contractual Clauses (SCC)
- We verify that data recipients comply with GDPR requirements
- We document all international transfers
- Record of processing activities
- We maintain a detailed record of all data operations
- We regularly update documentation
- We provide access to supervisory authorities upon request
- Registered with ICO UK as curriculum vitae service.
- ICO UK certification
- ICO Registration Number: ZB891804
- Valid from: 23 April 2025
- Valid until: 22 April 2026
- Registration category: Tier 1
Additional guarantees
- A qualified DPO with experience in the maritime industry is appointed
- Regular GDPR training for staff
- Annual external compliance audit
Policy Updates
Last updated: 25.04.2025
We reserve the right to make changes to this Privacy Policy at any time. If the changes are substantial, we will notify users by posting a prominent notice on the Site or by sending a message to the email address provided at registration. Continuing to use the Site after the changes take effect will be considered agreement to the new version of the Privacy Policy.
Final Provisions
- This Privacy Policy is drafted in accordance with GDPR and other applicable laws.
- If you have any questions or disputes regarding the interpretation or application of this Policy, the parties should strive to resolve them through negotiations.
- By using the Crewings.me Platform, you confirm that you have read and agree to the terms set out in this Privacy Policy.
If you have questions about any of the listed points, you can contact us at [email protected].
CrewingsMe LTDAddress: 85 Great Portland Street, London, W1W 7LT, UK
Дополнительные гарантии