Privacy Policy

Last Updated: December 2025

This Privacy Policy explains how Ship System Electric Ltd. (“the Company”, “We”, “Us”) collects, uses, stores, and protects personal data when you visit our website or communicate with us regarding ship repair and maintenance, industrial or fabrication and supply services.

We process personal data strictly in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable laws of the Republic of Bulgaria.

1. Data Controller Information

It is important to distinguish between our legal registration address and our operational office where communication and data management occur.

Email for Privacy Inquiries: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. What Personal Data We Collect

We may collect and process different types of personal data, primarily for communication and business purposes within the maritime, ship repair, and industrial sectors.

A. Data you provide voluntarily

When you contact us by email, phone, or through our website, you may provide:

• Basic identification details: such as name and professional role
• Business contact information: such as email address, phone number, and company details
• Communication content: any information included in your message or inquiry

B. Data collected automatically

When you visit our website, certain information may be collected automatically, including:

• Technical information: related to your device and browser
• Usage data: about how you interact with our website
• Cookies: and similar technologies, as described in our separate Cookie Policy.

3. Use of Analytics, Measurement, and Marketing Technologies

We may use third-party analytics, measurement, and marketing technologies which operate through cookies, tags, scripts, or pixels. These tools help us:

• understand website traffic and performance
• improve user experience and service quality
• measure the effectiveness of our communication and online presence

Such technologies may process information about your device, browsing behaviour, and interaction with our website. These tools are activated only when you have provided your consent through our Cookie Banner or Cookie Management Tool.

4. Purpose and Legal Basis for Processing

We process personal data only for purposes that are lawful, transparent, and necessary for the operation of our business.

These purposes include:

• Responding to inquiries and maintaining business communication
• Entering into and fulfilling contractual obligations
• Ensuring compliance with applicable legal and regulatory requirements
• Maintaining the security, functionality, and integrity of our website and internal systems

Each processing activity is based on a lawful ground under Article 6 of the GDPR, such as:

• Performance of a contract or pre-contractual steps
• Compliance with legal obligations
• Legitimate interests related to business operations, communication, and cybersecurity

5. Cloud Services & Email Services

We use external service providers to support our website infrastructure, email communication, data storage, and IT operations. These providers may offer services such as:

• professional email hosting
• secure cloud storage
• server hosting and website infrastructure
• IT administration and security solutions
• communication tools and backup services

All external providers engaged by the Company are required to comply with GDPR requirements, operate under Data Processing Agreements (DPAs), and apply appropriate technical and organizational measures to protect personal data.

6. Data Sharing

We may share personal data with external parties only when necessary and always in accordance with applicable data protection laws. Such sharing may occur with:

• Service providers: supporting our technical, operational, or administrative activities
• Professional advisors: subject to confidentiality obligations
• Public bodies or authorities: where required by law

We do not sell or disclose personal data to third parties for marketing purposes.

7. International Data Transfers

In the course of our business operations, communication or data processing may involve parties located outside the European Economic Area (EEA). Whenever such transfers occur, they are carried out in compliance with applicable data protection laws and with appropriate safeguards (such as legally approved data transfer mechanisms) to ensure your personal data remains protected.

8. Data Retention

Personal data is retained only for as long as necessary for the relevant purpose or as required by law.

• Business inquiries: retained for a limited period based on operational needs
• Contractual and financial records: retained in accordance with statutory retention periods (typically up to 10 years under Bulgarian legislation)
• Technical and security logs: retained for a short period (up to 12 months) to ensure system integrity
• Email communication: retained according to internal retention rules and legitimate business needs

9. Your Rights Under GDPR

As a data subject, you have several rights regarding the processing of your personal data. These include the right to:

• request access to the personal data we hold about you
• request correction of inaccurate or incomplete information
• request deletion of your data when it is no longer required
• request restriction of processing in specific situations
• object to processing carried out on the basis of legitimate interest
• request the transfer of your data to another controller (“data portability”)
• withdraw your consent at any time

Right to lodge a complaint: If you believe that the processing of your personal data infringes applicable data protection laws, you have the right to file a complaint with the competent supervisory authority.

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or disclosure. These measures may include:

• secure website connections and encrypted communication
• controlled access to systems and data
• secure storage and backup procedures
• internal policies, staff training, and confidentiality obligations

11. Cookies

This Privacy Policy does not govern cookies or tracking technologies. For details on cookie types and user consent, please refer to our separate Cookie Policy.

12. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on this page, with the “Last Updated” date displayed at the top.