How we apply the EU and UK General Data Protection Regulation, and the rights it gives you.
Aquator Marine Private Limited is based in Singapore and handles personal data under Singapore’s Personal Data Protection Act 2012. Many of our clients, yards, lenders and other counterparties are in Europe and the UK. Where we process personal data of individuals in the EU, EEA or UK, we apply the General Data Protection Regulation (GDPR) as set out below. This page supplements our Privacy Policy.
Aquator Marine Private Limited (UEN 202018284M), 160 Robinson Road #14-04, Singapore 068914, is the controller of personal data collected through this website and in our advisory engagements. Contact: info@aquatormarine.com.
We process personal data on these bases: to take steps at your request before entering into an engagement, and to perform an engagement (contract); to respond to enquiries, check for conflicts and manage business relationships with clients and counterparties (legitimate interests); to meet legal, accounting and regulatory obligations (legal obligation); and, where required, with your consent, which you can withdraw at any time.
You have the right to access your personal data; to have it corrected; to have it erased; to restrict or object to its processing, including for direct marketing; to receive it in a portable format; and to withdraw consent. You also have the right to complain to your local data protection authority.
Personal data from the EU, EEA or UK is transferred to Singapore and may be handled by service providers in other countries. Where these countries are not covered by an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum.
We keep personal data only as long as needed for the purposes described in our Privacy Policy, and protect it with appropriate technical and organisational measures. Client information is treated as confidential.
To make a request, email info@aquatormarine.com with enough detail for us to identify you and the data concerned. We respond within one month, and may ask you to verify your identity before acting on a request.