Privacy Policy

1. Who We Are

This website is run by Ocean Cloud Group BV, Parmentierplein 13, 3088 GN Rotterdam, the Netherlands ("Ocean Cloud Group", "we", "us"). We are responsible for the personal data described in this policy.

Ocean Cloud Group is a group of logistics companies: Ocean Cloud Global Logistics BV (Rotterdam), Ocean Cloud Global Logistics OOD (Plovdiv, Bulgaria), Joosten Trading Company BV (Herveld), Celsius Tank Cleaning Beringe BV (Beringe), Celsius Tankreiniging Vlissingen BV (Ritthem) and Ocean Cloud Spedition GmbH (Kutenholz, Germany). When you contact or work with one of these companies, that company handles your data in the same way.

For questions about privacy, email info@oceancloudgroup.com or call +31 10 820 1100.

2. Personal Data We Collect

We only collect the data we need. What that is depends on how you use our website or contact us:

• When you contact us by email, phone or WhatsApp: your name, company, job title, contact details and anything you tell us in your message.
• When you apply as a subcontractor by email to sc@oceancloudgroup.com: your company and contact details, information about your vehicles and equipment, and documents you send, such as licences, certificates and insurance papers.
• When you work with us as a customer or supplier: the contact details of the people we deal with, and the order, transport and invoice details we need to provide or buy services.
• When you visit our website: technical data your browser sends automatically, such as your IP address, browser and device type, the pages you visit and the time of your visit.

Our services are meant for businesses. We don't knowingly collect data from children, and we ask you not to send us sensitive data, such as health information.

3. Why We Use It and Our Legal Basis

We use personal data only for the purposes below. For each purpose, the GDPR requires a legal basis:

• Answering questions and preparing quotes – to take steps at your request before a contract, or our legitimate interest in replying to business enquiries (Article 6(1)(b) and (f) GDPR).
• Assessing subcontractor applications and working with subcontractors – to prepare and perform the contract (Article 6(1)(b)).
• Providing our transport, cleaning and storage services – to perform our contracts with customers and suppliers (Article 6(1)(b)).
• Keeping in touch with business contacts about our services – our legitimate interest in maintaining business relationships (Article 6(1)(f)). You can tell us at any time that you no longer want to hear from us.
• Showing the website correctly and keeping it secure – our legitimate interest in a working, safe website (Article 6(1)(f)).
• Meeting legal obligations, such as keeping financial records – a legal obligation (Article 6(1)(c)).

We don't sell your data, and we don't use it for automated decision-making or profiling.

4. Cookies

Our website sets one cookie of its own: gdpr_consent. It stores your choice in our cookie banner (Accept All or Reject), so the banner doesn't come back on every page. It expires after one year.

We don't use analytics, advertising or social media cookies. The one exception is the Spotify player on our About page: if you choose to load it, Spotify may set its own cookies. If we add analytics in the future, they will only run after you accept them, and we will update this policy first. To change your choice, delete the cookie in your browser settings; the banner will then appear again.

5. Services Used on Our Website

Some parts of our pages are delivered by other companies. To show them, your browser connects to their servers, which receive your IP address and the technical data mentioned above. We use these services because of our legitimate interest in a fast, working website (Article 6(1)(f)).

• Webflow (Webflow, Inc., USA) hosts our website and delivers its pages, images and scripts. Webflow processes this data on our behalf.
• Google Fonts (Google LLC, USA) delivers the Montserrat font used on our pages. Google says it limits the data it collects to what it needs to serve the fonts.
• jsDelivr (Poland) delivers open-source code for smooth scrolling and for the map on our Contact page. jsDelivr says it uses IP addresses only for statistics on the countries its users come from, and deletes them, usually within hours.
• OpenFreeMap (Hyperknot Software Kft., Hungary) delivers the map on our Contact page. It sets no cookies and doesn't store IP addresses in its regular logs.
• Esri (Environmental Systems Research Institute, Inc., USA) delivers the satellite images for the map on our Contact page.

Our pages also link to Google Maps, WhatsApp, LinkedIn and Spotify. These services only receive your data if you click a link or contact us through them, and then their own privacy policies apply. The Spotify player on our About page works the same way: it only loads after you click “Load player”, and Spotify's own privacy policy applies from that moment.

6. Who We Share Your Data With

We only share your data when it's needed:

• Our group companies, when they need it to handle your request or provide a service.
• Service providers who process data on our behalf, such as our website host and our email and IT providers. They may only use it on our instructions.
• Authorities, courts and advisers, when the law requires it or to protect our rights.

7. Data Outside the EU

Our group companies are all in the European Union (the Netherlands, Bulgaria and Germany), so the GDPR protects your data in each of them.

Webflow, Google and Esri are based in the United States. They are certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. Where a provider isn't covered by it, we rely on the European Commission's Standard Contractual Clauses.

8. How Long We Keep Your Data

• Questions and quotes: for as long as we need to handle them, and no longer than two years after our last contact, unless they lead to a contract.
• Customer and supplier records: for seven years, as Dutch tax law requires.
• Subcontractor applications: if we don't start working together, we delete your application within six months, unless you agree that we may keep it longer.
• Our cookie: one year.

When we no longer need your data, we delete or anonymize it.

9. Your Rights

Under the GDPR, you have the right to:

• See the personal data we hold about you.
• Have incorrect data corrected.
• Have your data deleted.
• Limit how we use your data.
• Receive your data in a usable format, or have it sent to another organisation.
• Object to our use of your data based on legitimate interest, and always to direct marketing.
• Withdraw your consent at any time, where we use your data based on consent.

To use these rights, email info@oceancloudgroup.com. We will answer within one month and may ask you to confirm your identity first.

If you're not happy with how we handle your data, please let us know. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority in your own country.

10. How We Protect Your Data

We take technical and organisational measures to protect your data, such as an encrypted (HTTPS) connection to this website and access only for the people who need it. No system is completely secure, so if you think your data has been misused, please contact us right away.

11. Changes to This Policy

We may update this policy, for example when we add new features to our website or change how we work. The date at the top of this page shows when it was last updated.