Privacy Policy

1. Introduction to Privacy Policy

This website (www.consulmartravel.com) is owned and operated by CONSULMAR BISSAU who is responsible for the processing of personal data referred to in this privacy policy.

Contact details :

• Ribera de Axpe, 50 – 5ª Planta – 48950 ERANDIO (Vizcaya)
• Mail: rgpd@zubicar.es

The Privacy Policy of this site aims to comply with the duty of information and transparency established in Article 12 of EU Regulation 2016/679 on the protection of personal data. Likewise in cases where the duty of information has been carried out through basic information called “first layer” in accordance with the provisions of Article 11 of the Organic Law 3/2018 on the protection of personal data and guarantee of digital rights, this privacy policy corresponds to the additional information considered as “second layer” where the additional elements required in Articles 13 and 14 of EU Regulation 2016/679 on the protection of personal data are described.

2. Processing of personal data

The operations or set of operations carried out on your personal data are identified by processing. CONSULMAR BISSAU sets out below detailed information on each processing operation in accordance with the guidelines established by the Spanish Data Protection Agency:

1. PERSONNEL SELECTION treatment whose purpose is to manage the selection of people to work in any of the companies of CONSULMAR BISSAU.
   1. Category of data: identification, work life and curriculum vitae.
   2. Legal basis: Consent of the interested party (art. 6.1.a) in the case of self-candidatures and in all other cases, pre-contractual relationship (art. 6.1.b).
   3. Validity of the data: The data remains valid for three years.
2. The purpose of this processing is the management of data of partners and administrators of the company for compliance with obligations arising from commercial and tax legislation, including the keeping of the register of partners, minutes book and the practice of inscriptions and mandatory notifications to the Commercial Registry.
   1. Category of data: identification, position held and economic.
   2. Legal basis: Processing necessary for compliance with legal obligations applicable to the data controller (art. 6.1.c).
   3. Validity of the data: The data will be kept for the duration of the position of Administrator and the status of Member, as well as the time necessary to fulfill the purpose for which they were collected and to determine any possible liabilities that may arise from such purpose and from the processing of the data.
3. ADMINISTRATIVE MANAGEMENT AND CONTACT PERSONS whose purpose is the administrative and commercial management of the contact details of persons working for clients and suppliers, both active and potential, as well as with companies and all types of organizations linked to CONSULMAR BISSAU in order to maintain business and commercial relations.
   1. Category of data: Identifying data.
   2. Legal basis: depending on the case, the legitimate interest based on the need to maintain commercial and business relations (Art. 6.1.f RGPD and Art. 19 of the LOPDGDD), the necessary for the fulfillment of legal obligations applicable to the responsible party (Art. 6.1.c).
   3. Duration of the data: The data will be kept during the maintenance of the contractual, business or interest relationship. Also, it will be considered the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of data. The provisions of commercial and tax legislation shall apply.
4. Treatment OPERATIONS whose purpose is the management of contact data of people working in customers and suppliers both active and potential, as well as in companies and all types of organizations in order to perform maritime or consignee operations.
   1. Category of data: Identifying data.
   2. Legal basis: depending on the case, the legitimate interest based on the need to maintain commercial and business relationships (Art. 6.1.f RGPD and art 19 of the LOPDGDD), the necessary for compliance with legal obligations applicable to the responsible (Art. 6.1.c).
   3. Duration of the data: The data will be kept during the maintenance of the contractual, business or interest relationship. Also, it will be considered the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of data. The provisions of commercial and tax legislation shall apply.
5. Treatment COMMUNICATION AND MARKETING Dissemination activities, events, press releases, news and any other activity for dissemination and promotion purposes.
   1. Category of data: identification, image and voice.
   2. Legal basis: as appropriate the data subject has given consent to the processing of personal data (art. 6.1.f) and legitimate interest based on the need to promote products and services to customers.
   3. Validity of the data: The data will be retained as long as the right of deletion of the data is not requested in the case of contact persons or the employee revokes his or her consent to the processing of the image or voice. Periodically, within a period not exceeding 5 years, the databases will be reviewed to maintain the quality of the information and obsolete data will be deleted.
6. VIDEO SURVEILLANCE treatment for the purpose of perimeter security of the facilities, as well as of the goods and people inside the facilities.
   1. Data category: image recorded by camera.
   2. Legal basis: Legitimate interest based on the need to maintain the security of the facilities (Art. 6.1.f RGPD and Art 22 LOPDGDD).
   3. Validity of data: The data remains valid for a maximum of30 days. At the end of this period the data will be deleted.
7. Communication of personal data to third parties

The communication of personal data may occur to the following recipients:

1. Within our group of companies, in compliance with the common mission and the established commercial and legal obligations;
2. To suppliers that provide services necessary for the management and operation of the business;
3. To legal and other professional advisors and auditors;
4. To public administrations, regulatory authorities, courts and government agencies to comply with legal or regulatory requirements;
5. To law enforcement agencies when required in the processing of video surveillance;
6. To customers and organizations required for ship bunkering operations;

International Data Transfers:

CONSULMAR BISSAU uses in its management systems the following applications involving an international transfer of personal data to the United States:

• Quickbase Inc. application owned by Quickbase Inc. and licensed under a license that includes the international transfer guarantees offered by the provider.

4. Personal data security

We endeavor to use appropriate technical and physical security measures to protect personal data that is transmitted, stored or otherwise processed, from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, in connection with our Site. These measures include computer safeguards and secured files and facilities. Our service providers are also carefully selected and must use appropriate safeguards on the Site using industry-standard SSL encryption to protect data transmissions. Most current browsers support the level of security required to use these areas.

5. Your rights under data protection legislation

You have various rights under data protection laws. These may include (as applicable):

• Any person has the right to know and obtain information about whether or not CONSULMAR BISSAU is processing personal data concerning him/her;
• the right to request access to personal data, which means to know what data we hold about you;
• the right of rectification, including the right to require us to correct inaccurate personal data;
• the right to request the restriction of the processing concerning him or her or to object to the processing of his or her personal data,
• the right to request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected;
• the right to object to the processing of your data provided that you have not given your prior consent and there are no compelling legitimate reasons or the defense of possible claims;
• the right to data portability, including obtaining personal data in a commonly used machine-readable format in certain circumstances, provided that the processing is automated;
• the right to withdraw your consent to any processing for which you have previously given such consent.

You may request your rights by writing to the e-mail address established for this purpose rgpd@zubicar.es or make any inquiry about your rights using the contact channels identified in the introduction.

In order to process the request for rights it will be necessary to verify the identity of the applicant and verify that he/she is the owner of the data, so in such communication must include name, surname, specific request of the request and the address to which you want to be notified of the response. If necessary, we may request a copy of the document proving your identity.

CONSULMAR BISSAU can send to anyone who requests it an appropriate form to help make the request for rights in accordance with the provisions of the Organic Law 3/2018 on the Protection of Personal Data and guarantee of Digital Rights.

In case you need the protection of your rights, the supervisory authority is the Spanish Data Protection Agency whose website is www.aepd.es and its address is Calle Jorge Juan 6 in Madrid, postal code 28001.

6. Links

The CONSULMAR TRAVEL web site may include hyperlinks to other sites that are not operated or controlled by CONSULMAR TRAVEL AGENCY. Therefore, CONSULMAR BISSAU does not guarantee, and is not responsible for, the legality, reliability, usefulness, accuracy and timeliness of the content of such websites or their privacy practices. Before providing your personal information to these non- CONSULMAR BISSAU websites, please be aware that their data protection compliance may differ from ours.

7. Updated and changes to this Privacy Policy

The text of this privacy policy has been updated as of December 2024.

CONSULMAR BISSAU may modify without prior notice its Privacy Policy in accordance with the legislation applicable at any given time and in accordance with the changes that occur in its privacy management system.