Privacy Policy
Last updated: 20/10/2026
Varship Shipping Co. takes the protection of personal data seriously. This policy explains what personal data we collect, why, how long we keep it and what rights you have. It follows the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.
1.1 Who we are
The data controller is:
[Full registered company name] ("Varship Shipping Co.", "we")71 Posidonos Avenue, 16675, Glyfada, Greece
Phone: +30 210 8983064
Data protection contact: info@varship.gr
1.2 What personal data we collect
Through this website
Contact form: your name, email address, subject and message, plus anything else you choose to include.
Analytics (only with your consent): pages visited, time on site, approximate location (country/city), device and browser type, and a pseudonymous identifier stored in a cookie. Google Analytics 4 does not store full IP addresses for EU users.
Technical data: our server records IP addresses, browser type and the pages requested, for security and to keep the site running.
In the course of our ship management business
Seafarers and technicians boarding our vessels: name, date and place of birth, passport/ID and seaman's book copies, family status, home address, contact details, rank, sea service history, certificates of competency, medical fitness records and employment contract details.
Clients, partners and suppliers: names, job titles and business contact details of their representatives.
1.3 Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to messages sent through the contact form | Our legitimate interest in responding to enquiries (Art. 6(1)(f)), or steps before a contract at your request (Art. 6(1)(b)) |
| Website analytics | Your consent (Art. 6(1)(a)), given through the cookie banner |
| Website security and server logs | Our legitimate interest in keeping the site secure (Art. 6(1)(f)) |
| Employing and managing seafarers | Performance of the employment contract (Art. 6(1)(b)) and legal obligations under maritime and labour law (Art. 6(1)(c)) |
| Medical fitness records of seafarers | Employment and occupational health obligations (Art. 9(2)(b) and (h)) |
| Working with clients, partners and suppliers | Performance of contracts (Art. 6(1)(b)) and our legitimate business interests (Art. 6(1)(f)) |
| Establishing, exercising or defending legal claims | Our legitimate interest (Art. 6(1)(f)) |
1.4 Who we share it with
Service providers acting on our behalf: our hosting provider, our email filtering provider (SpamExperts) and Google Ireland Ltd (Google Analytics, only with your consent).
Shipping business partners, where needed to operate our vessels: manning agents, port agents, travel agencies, ship chandlers, charterers, brokers, flag administrations, classification societies and P&I clubs.
Public authorities and courts, where the law requires it or to defend our rights.
We do not sell personal data.
1.5 Transfers outside the EU/EEA
The international nature of shipping means some data, mainly seafarer data, is transferred outside the EU/EEA. Where the European Commission has not recognised a country as adequate, we use Standard Contractual Clauses or another safeguard approved under GDPR. Google may process analytics data in the United States under the EU-US Data Privacy Framework. You can ask us at info@varship.gr for details of the safeguards used.
1.6 How long we keep it
| Data | Retention |
|---|---|
| Contact form messages | [12 months] after the enquiry is closed, unless it leads to a business relationship |
| Analytics data | [14 months] (Google Analytics retention setting) |
| Server logs | [up to 90 days] |
| Seafarer and employment records | For the period required by Greek and maritime law, and up to the limitation period for legal claims |
| Client, partner and supplier records | For the duration of the relationship and the statutory limitation periods that follow |
When the retention period ends, we delete or anonymise the data.
1.7 Your rights
You have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, where GDPR Art. 17 applies (for example, when it is no longer needed or you withdraw consent).
- Restriction of processing in the cases set out in GDPR Art. 18.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
- Data portability for data you gave us, processed by automated means on the basis of consent or contract.
- Withdraw consent at any time, without affecting processing carried out before withdrawal. For analytics, use the "Cookie settings" link in the website footer.
To exercise any of these rights, email info@varship.gr. We will reply within one month.
1.8 Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encrypted (HTTPS) connections to this website.
1.9 Complaints
You can lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifissias Avenue, 11523 Athens, www.dpa.gr . We would appreciate the chance to resolve your concern first, so please contact us at info@varship.gr.
1.10 Changes to this policy
We may update this policy. The "Last updated" date at the top shows when it last changed. Significant changes will be highlighted on this website.