PDPL

CSS SHIPMANAGEMENT INC.

Clarification Text on the Protection and Processing of Personal Data

As CSS SHIPMANAGEMENT INC. (“the Company”), within the framework of our corporate vision focused on operational excellence, sustainability, and safety, we prioritize the security of your personal data. In accordance with the Law No. 6698 on the Protection of Personal Data (“LPPD”), we process your data in the capacity of data controller within the scope of the procedures and principles set forth below.

1. Identity of the Data Controller

Company Title: CSS SHIPMANAGEMENT INC.
Headquarters: Istanbul, Turkiye

2. Purpose of Processing Personal Data

Your personal data is processed for the purpose of carrying out our activities in the maritime transport sector and the operational management of our fleet (Dry bulk and tankers) within the following scopes:

  • Ensuring the uninterrupted continuity of ship management and logistics operations,
  • Employment, training planning, and personnel file processes of sea and shore-based staff,
  • Implementation of Health, Safety, and Environment (HSE) standards,
  • Monitoring of insurance, finance, and commercial risk management processes,
  • Management of strategic decision-making processes and rapid adaptation to customer needs.

3. Processed Personal Data

Primarily identity and contact information; seaman’s discharge book, certificates, professional experience documents, financial information, and digital/physical records regarding operational safety may be subject to processing activities.

4. Transfer of Personal Data

In line with legal obligations and the requirements of business processes, your collected data may be transferred to:

  • Port authorities, customs administrations, and relevant official authorities,
  • Our business partners such as agents, bunker suppliers, and insurance companies,
  • Authorized institutions and stakeholders abroad within the scope of operations on global trade routes, in accordance with Articles 8 and 9 of the LPPD.

5. Method and Legal Grounds for Data Collection

Your data is collected through electronic applications, contracts, and operational tracking forms. This process is based on the legal grounds of "explicitly provided for in the laws" and "being necessary for the establishment or performance of a contract."

6. Your Rights as a Data Subject

In accordance with Article 11 of the LPPD, you have the right to learn whether your data is being processed, to request correction of inaccurate data, to request deletion of data, and to claim compensation for damages incurred.