WEBSITE PRIVACY NOTICE

Latsco Group acknowledges and respects the importance of privacy of your personal data. This Privacy Notice outlines the principles relevant to the processing of your personal data, in compliance with applicable Personal Data Protection regulatory framework and our corporate Data Protection Policy.

Principles set out in this Privacy Notice are followed by all companies of Latsco Group. For the purpose of this notice, Latsco Group means Latsco Shipping Limited, Latsco (London) Limited, Latsco Marine Management Inc., their subsidiaries and branches, respectively. When we mention in the Website the "Company", "we", "us" or "our", we are referring to the relevant company in the Group responsible for processing your data.

Scope

This data protection statement applies to the following website:

• www.latsco.com

Our website is an information gateway to obtain first-hand information for Latsco Group , the services offered by it, and its fleet.

We may link to third-party websites, to which different privacy statements and terms of use may apply. These are outside of our sphere of control and none of Latsco Group companies is responsible for third party websites and privacy policies.

Data Controller

Latsco Shipping Limited, a company incorporated in Bermuda with its branch office at 7 Rue du Gabian, 98000 Monaco, is the data controller within the meaning of the GDPR, and responsible for this website.

Privacy Officer

For any query or request related to the processing of your personal data you may contact our assigned Privacy Officer:

• by sending an email at po@latsco.com, or
• by postal mail to the attention of "Privacy Officer, Latsco Marine Marine Management Inc., 4 XENIAS Str., 145-62, Kifisia-Kefalari Greece".

Information we may collect and purpose of processing

Personal data is all information that can be attributed to a specific person (e.g., name, address, telephone number, e-mail address). You can visit and use our website services without having to register or identify yourself. However, when you use our websites services, we process certain categories of personal data either based on your consent or for the protection of our legitimate interests to ensure the functionality, security and optimisation of our website services. In all cases, the lawfulness of processing is ensured in accordance with the GDPR.

Categories of personal data	Why and how do we collect the personal data?	Legal basis for processing your personal data
Information regarding the website use e.g. your IP address, browser type, from which website you were redirected to our website, as well as details of your operating system, date and duration of your visit and information on the use of our services, such as viewed pages, and click behaviour.	User information is collected automatically when you navigate to and on our website. Collection of these data is required to ensure the smooth operation of our website(s) and to be able to create a good user experience. Your data will be used, processed and used as well as stored for a limited period of time and, subject to the further descriptions in this Data Protection Statement, do not allow us to infer any natural person. Storage of your IP address is necessary to help us timely detect -and properly respond to- potential cybersecurity attacks, thus safeguarding our legitimate interest in terms of security.	We process this information based on your consent, which we ask you to provide when entering our website.
Your communications with us For example, your name, surname, contact details, emails, and letters.	When contacting any company of Latsco Group or are contacted by any company of Latsco Group. Communication details and data collected during the communication are deleted when no longer required. Retention period is determined per case, depending on statutory requirements that may apply.	We base the processing on our legitimate interest to process the contact request in the most satisfactory and efficient manner.
Personal and biographical information provided on your Curriculum Vitae (CV). Name, surname, contact details and biographical information provided on your CV. CV may sometimes include photographs.	When submitting your CV through our Careers website section. When you register your CV and Application Form, it will be made available to our Human Resources department and prospective employers in connection with the recruitment process. Personal data channelled through our online CV submission platform are processed in strict accordance with our corporate privacy and data protection policy and are kept for a maximum retention period of two (2) years, subject to any request by you for earlier deletion.	We base the processing on your documented consent, which we ask you to provide before submitting your CV through our online application form in the Careers section.

Third party processing

Personal data obtained through our website may be processed by our business partners who are committed to adhere to the strictest data privacy standards in accordance with the GDPR. Where needed, we maintain appropriate data processing agreements or terms with such partners to ensure that any personal data transfers are in compliance with GDPR requirements and based on relevant adequacy decisions of the European Commission or appropriate guarantees.

Transfer of personal data

We share your personal data with competent authorities and Latsco Group companies, following your consent and in relevance with the scope of each processing activity.

Data Security

Every effort is made to protect your personal data when you provide your information through our website. Our website has a valid trusted certificate in place and all information you provide to us is stored on secure servers. The information you transmit is encrypted using SSL technology. This is indicated by the fact that a key or lock symbol is displayed in the top address bar of your browser, which is marked with a key symbol.

Latsco Group is committed to safeguard your data integrity and confidentiality whilst at our disposal, by adopting appropriate technical and organisational security measures to prevent accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties as far as possible.

Cookies

Cookies are small text files that are automatically downloaded to our device as you browse the web. These harmless bits of text are locally stored on your device and you can easily view or delete them. In general, cookies may serve a variety of purposes, such as improving your site experience, providing insight on your activity and preferences, or even securing a website.

1. How we use Cookies

We use cookies onto our website to provide, protect, and improve our services, such as understanding user behaviour, and providing a swift and safer browsing experience. You can remove or reject cookies using your browser or device settings, but in some cases doing so may affect your ability to use our services.

2. Types of Cookies used on our website

Session Cookies: To provide you with core services of our website, these cookies are absolutely necessary for the provision of the online service you requested. When you visit our website, session cookies occur. The information collected through these cookies is not used for marketing purposes.

Performance & Analytical Cookies (Statistics): This type of cookies collects anonymous information on how visitors use the site, which enables us to improve how the site performs. We utilise Google Analytics cookies to help us understand how you arrived at our site, and highlight areas where we can improve, such as the website’s response time, retrieval of information, etc. The data stored by these cookies does not show personal details from which your individual identity can be identified.

3. List of Cookies used on our website

Cookie Name	Purpose	Type	Storage	Expiration
showCookiesMsg	Used to your cookie consent state for our domain.	Technical	Optional	1 month
laravel_session	Used to create a session ID for the user, so that the system itself can identify you as a unique and individual user, distinct from anyone else looking at the website.	Session	Necessary	Session
XSRF-TOKEN	Used to enhance security of our Services and prevent repeated attempts as intrusions of our Services	Technical	Necessary	Session
_ga	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	Third-party (Google Tag Manager Google)	Optional	2 years
_gid	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	Third-party (Google Tag Manager Google)	Optional	24 hours

4. Controlling and Opting-In and Out of Cookies

By continuing to use our website, you accept the use of Cookies marked as Necessary, as they are required in order for our website to function properly. Storage of Cookies marked as Optional is controlled by you and depends on whether or not you give consent for such cookies to be placed and read out on the website by checking the respective box in the pop-up.

You have the option to prevent the storage of Cookies on your devices. The procedure for managing Cookies and Cookie preferences is different for each browser. In most browsers the option to disable Cookies can be found under the Settings (or Tools) menu in Privacy options. For detailed instructions, check the support website for your browser. You can check the steps for managing cookies in your particular browser’s help menu.

Complaints

If you wish to file a complaint on how we handled your personal data, you may contact our Privacy Officer who will investigate the matter. If you are not satisfied with our response or you believe we are not processing your personal data in accordance with the applicable law, you have the right to lodge a complaint to the Hellenic Data Protection Authority (http://www.dpa.gr).