The General Data Protection Regulation (GDPR) was enforced 25th May this year. GDPR has been designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens’ data privacy and to reshape the way companies handle data privacy.
GDPR not only applies to companies and organizations located within the EU, it applies to all companies that process and hold personal data information of citizens residing in EU, even if the company is based in a non-EU country.
The Philippines has the Data Privacy Act, a law that seeks to protect all forms of information, be it private, personal or sensitive. It is meant to cover both native and juridical persons involved in the processing of personal information.
A Corporate Data Privacy and Protection policy has recently been published in Docmap. This document is also available in STAR IPS for our seafarers.
Odfjell is committed to:
Odfjell has legal basis for the Company's personal data processing, in most of the cases necessary for the performance of a contract e.g. service contract or employment contract (GDPR Art. 6, 1.(b)).
Consent
The previously used general consent declaration for personal data processing is no longer sufficient. With GDPR, a consent declaration has to be given for one or more specified purposes. Odfjell will not send out general consent forms to third parties.
Contact persons for data privacy concerns
Data privacy concerns can be sent to privacy@odfjell.com. The following dedicated Data Privacy personnel has been appointed to handle data privacy concerns relating to Odfjell: