As a ship liner agents we may collect and process the following personal data:

• Contact information: Name, Job Title, email, phone number, company details.
• Identification data: (passport details/DOB/Proof of Address/Driver’s license/utility bills/marriage certs/Death Certificates/photographic ID/Others)
• Shipping and logistics information: Consignee, shipper, vessel and container details, shipment documentation, Customs documentation where required.
• Financial information: Bank account details, payment history, billing and invoicing information and VAT number.

• Special Category Data (where applicable)

We only process special category data (as defined in Article 9 GDPR) where:

• Explicit consent has been obtained; or
• Another lawful basis under Article 9(2) GDPR applies

We process personal data for purposes including:

• Facilitating ship agency services
• Managing bookings, shipments, and logistics documentation.
• Complying with customs, maritime, and regulatory obligations.
• Communicating with clients, suppliers, and regulatory authorities.
• Billing, invoicing, and debt collection.
• Preventing fraud and ensuring security of shipments.

We only process personal data where there is a lawful basis, such as:

• Performance of a contract (Article 6(1)(b) GDPR)
• Legal obligations (Article 6(1)(c) GDPR)
• Legitimate interests (Article 6(1)(f) GDPR), e.g., security and business operations

Consent (Article 6(1)(a) GDPR), where applicable

We may share personal data with:

• Shipping lines, port authorities, customs authorities, and other regulatory bodies.
• Freight and transport partners involved in your shipment.
• Financial institutions and insurance providers for payment and risk management.
• IT service providers, auditors, or legal advisors, where necessary to operate our business.

All third parties are required to process personal data in compliance with GDPR and Irish data protection laws.

We retain personal data only for as long as necessary to fulfil the purposes outlined above or as required by law, including maritime and customs regulations. When personal data is no longer needed, it will be securely deleted or anonymised.

Under the GDPR and Irish Data Protection Acts, you have the following rights:

• Access: Request a copy of personal data we hold about you.
• Rectification: Correct inaccurate or incomplete personal data.
• Erasure: Request deletion of personal data where applicable.
• Restriction: Limit processing in certain circumstances.
• Data Portability: Receive personal data in a structured, machine-readable format.
• Objection: Object to certain processing activities.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact our Data Protection Officer (DPO) at:
Dermot O’Connor: Email: d.ooconnor@johnsonstevens.ie (tel: 353-1-8247700)

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data Protection Commission (Ireland):
Website: https://www.dataprotection.ie

We may update this statement periodically to reflect changes in our data processing practices or legal requirements. Updated versions will be published on our website.