Who is responsible
Forewatch Intelligence, run by Lennart van Wimersma Greidanus in Rotterdam, the Netherlands, is responsible for the processing described here. For anything about your data, write to [email protected].
What we collect, and why
When you visit this site
Our hosting provider, Cloudflare, processes technical data such as your IP address, your browser type and the time of your visit. This is needed to deliver the site and to protect it against abuse. We rely on our legitimate interest in a site that works and stays secure.
When you write to us
When you send a form on this site, what you entered is emailed to us through our email delivery provider. The site itself keeps no copy. A form holds your name, company and email address and, depending on the form, your role, a topic and your message. The email also records when the form was sent and, from the connection, the country it came from. You can also simply email us.
We use it to reply and, if you ask, to arrange a screening. If you ask for a sample dossier, we email it to the address you give. We rely on the steps you ask us to take before an agreement, and on our legitimate interest in answering business enquiries.
If you become a client
We keep the contact and billing details needed to deliver the service and to invoice it. The agreement requires them, and tax law requires us to keep invoices.
Vessel and voyage details
Details about a vessel or a voyage that you share for a screening are used for that screening only. We treat them as confidential and do not share them.
A screening can name a vessel’s owners and managers. Where one of them is a person rather than a company, we use that name as it appears in the public registers and databases cited in the dossier, and for that screening only.
Verifying a dossier
When you check a dossier on the verification page, your browser reads the file and calculates its fingerprint on your device. Only the fingerprint, 64 characters, is sent to us, to look it up in the log, and not as part of the web address. The file itself is never uploaded, and we keep no record of which fingerprints are checked.
The log holds, for each dossier we issue, its fingerprint, its reference and version, and when it was issued and logged. It holds no names, no companies and no vessel details.
Who else processes your data
We do not sell your data or share it for marketing. Three kinds of service providers process data on our behalf, under agreements that bind them to our instructions: our hosting provider, Cloudflare; Resend, which delivers the forms to us by email; and our email provider. Beyond that, we share data only when the law requires it.
Transfers outside Europe
Cloudflare and Resend are based in the United States. Where data leaves the European Economic Area, they rely on the EU-U.S. Data Privacy Framework or on the European Commission’s standard contractual clauses.
How long we keep it
- Messages and form submissions from people who do not become clients: deleted no later than one year after our last contact.
- Client records: for as long as the agreement lasts. Invoices for the seven years Dutch tax law requires.
- Dossiers we issue, and the details behind them: seven years from issue, so that they can serve as evidence.
- The log of fingerprints: it holds no personal data, and is kept for as long as we trade.
- Technical data at Cloudflare: only as long as needed to deliver and secure the site.
Your rights
You can ask to see the personal data we hold about you, and to have it corrected or deleted. You can also ask us to limit how we use it, object to its use, or receive it in a common format. Email [email protected] and we answer within one month.
If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Automated decisions
We take no automated decisions about people. A screening concerns a vessel and a voyage, and its outcome follows from a fixed rule.
Security
The site is served over an encrypted connection and loads no outside code. Access to what you send us is limited to Forewatch.
Changes to this statement
When the way we handle data changes, we update this statement and the date at the top of this page.