Privacy policy

1. Controller

Nauticon Systems GmbH, Seelandstraße 1, 23569 Lübeck, Germany
Represented by: Tuba Yazici
E-mail: info@nauticon-systems.com, phone: +49 176 83179501

2. Overview

This website does not set cookies, does not use analytics, tracking or advertising services and does not embed content from other providers. Fonts, images and films are stored on our own web space. We process personal data only to provide the website and to handle your requests.

3. Visiting the website and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Each time a page is called up, IONOS processes technically necessary access data: the page or file requested, date and time, the previously visited page (referrer), browser and version, operating system, device type and the IP address. According to IONOS, the IP address is stored in shortened form in the logs and the logs are deleted after eight weeks.

The purpose is the secure and stable operation of the website, for example to fend off attacks and to find errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is this secure operation. IONOS acts on our behalf as a processor under Art. 28 GDPR.

4. SOS and contact form

When you submit the form, we receive the information you enter: urgency, position (place, latitude and longitude, or port and berth), vessel name, IMO number, vessel type, type of damage, description, name, company, call-back number, e-mail address, the selected language and up to five photos. Only the call-back number and the position or port are required; without them we cannot respond. All other details are optional.

The form sends your information as an e-mail to info@nauticon-systems.com. We do not store it on the web server. Photos are forwarded as uploaded and may contain metadata, for example time, device or location. If you do not want this, remove such data before uploading.

We use the information to assess your request, to call you back and, where applicable, to prepare an assignment. The legal basis is Art. 6(1)(b) GDPR if you yourself want to enter into a contract with us. If you are enquiring on behalf of a company, for example a shipowner, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is handling business enquiries.

We delete the information once the request has been dealt with. If it leads to an order, we keep the business correspondence for as long as commercial and tax retention periods require.

5. Protecting the form against misuse

To prevent mass misuse of the form, we allow no more than six requests per IP address per hour. For this purpose, the script creates a check value (SHA-256) from a secret random value, your IP address and the current hour and keeps a counter in a temporary file on the web server. The IP address itself is neither stored nor included in the e-mail. The script automatically deletes counter files older than two hours on the next request.

The form also detects automated submissions by means of a field that is invisible to humans and by the time taken to fill it in. Nothing is stored for this. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and overload.

6. Contact by e-mail or phone

If you contact us by e-mail or phone, we process your details, for example name, phone number, e-mail address and the content of your message, to deal with your request. Section 4 applies accordingly to the legal bases and retention.

7. Storage in your browser, no cookies

The website stores only two settings in your browser, and only when you trigger them yourself:

"calm" (localStorage): if you switch to the calm view or back to the film view, your browser remembers this choice so that the website appears that way on your next visit. The entry remains until you change the setting or delete the site data in your browser.

"rotok" (sessionStorage): if you close the hint to rotate your phone, your browser remembers this for the current session. The entry disappears when you close the tab.

Neither entry contains an identifier, and neither is sent to us. No consent is required because the storage is strictly necessary to provide the function you have expressly chosen (Section 25(2) no. 2 TDDDG). If your device is set to "reduce motion", the website automatically shows the calm view. Only your browser evaluates this setting; it is neither stored nor sent to us.

8. Recipients and processors

Within our company, only the people who handle your request receive your information. Our technical service provider for hosting and e-mail is IONOS SE, acting as a processor under Art. 28 GDPR.

9. No transfers to third countries

We do not transfer your data to countries outside the European Union or the European Economic Area.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please contact info@nauticon-systems.com.

11. Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

12. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, phone +49 431 988-1200, e-mail mail@datenschutzzentrum.de.

13. Obligation to provide data; automated decisions

You are not obliged by law or contract to provide data. However, without a call-back number and position we cannot handle a request made through the form. There is no automated decision-making, including profiling (Art. 22 GDPR).

14. Links to other websites

Our technical articles link to websites of other organisations, for example standards bodies and classification societies. The operator of such a site receives data from you, in particular your IP address, only when you click the link, and is responsible for it.