Last updated: 5 October 2026
01Who we are
Kyma Shipping Co. Ltd (“Kyma”, “we”, “us”) is the controller of the personal data collected through this website. Our details are:
- Legal name
- Kyma Shipping Co. Ltd
- Registered office
- Kanari 20, 183 44 Athens, Attica, Greece
- GEMI No.
- [to be completed]
- VAT No. (ΑΦΜ)
- [to be completed]
- Tax office (ΔΟΥ)
- [to be completed]
- info@kymashipping.gr
- Phone
- +30 697 569 1895
02Scope of this policy
This policy explains how we process personal data when you visit our website, send us an enquiry or apply for a position. It is issued in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Greek Law 4624/2019 and Greek Law 3471/2006 on the protection of personal data in electronic communications.
03Personal data we collect
- Enquiries: your name, company, email address, phone number, country, the service you are interested in and the content of your message.
- Job applications: identification and contact details, date of birth, nationality, country of residence, nearest airport, position and department applied for, current rank, availability, sea service, certificates of competency, passport validity, visa status, vessel type experience, your CV and any other information you choose to include.
- Technical data: when you visit the website, our hosting server automatically records technical information such as your IP address, browser type, date and time of access and the pages requested (server log files). This is necessary to deliver the website and keep it secure.
Please do not include special categories of data (for example health data, religious beliefs or criminal records) in your CV or messages, unless we specifically request them to meet a legal requirement.
04Purposes and legal bases
- To answer your enquiry and, where relevant, prepare a proposal — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in responding to business communications).
- To assess your job application and manage recruitment, including the recruitment and placement of seafarers on vessels under our management — Article 6(1)(b) GDPR (steps prior to an employment contract) and Article 6(1)(a) GDPR (your consent, given in the application form).
- To comply with our legal obligations, for example under maritime labour law (MLC 2006), flag state requirements and Greek tax and commercial law — Article 6(1)(c) GDPR.
- To operate, secure and protect the website and prevent misuse of our forms — Article 6(1)(f) GDPR (our legitimate interest in the security of our systems).
05Who receives your data
- Authorised Kyma staff who need the data to handle your enquiry or application.
- Our website hosting and email service providers, acting as processors under a data processing agreement (Article 28 GDPR).
- For seafarer applicants: shipowners and vessel operators for whom we recruit, insofar as this is necessary to propose you for a position, and authorities such as flag states, port and immigration authorities when this is required for joining a vessel.
- Public authorities, courts and professional advisers, where required by law or to establish, exercise or defend legal claims.
We do not sell your personal data and we do not use it for marketing without your consent.
06Transfers outside the EEA
Shipping is an international business. If your data has to be transferred outside the European Economic Area — for example to a shipowner, manning agent or authority in another country — we do so only where the European Commission has issued an adequacy decision, where appropriate safeguards such as the Standard Contractual Clauses are in place (Article 46 GDPR), or where a derogation under Article 49 GDPR applies.
07How long we keep your data
- Enquiries: up to 2 years after our last communication. If a business relationship follows, the retention periods required by Greek commercial and tax law apply.
- Job applications: up to 12 months after receipt, so that we can consider you for suitable future positions. If you are hired, your data becomes part of your employment record and is kept as required by law.
- Server log files: up to 6 months, unless they are needed to investigate a security incident.
08Your rights
Under the GDPR you have the following rights:
- Access to your personal data (Article 15)
- Rectification of inaccurate data (Article 16)
- Erasure (Article 17)
- Restriction of processing (Article 18)
- Data portability (Article 20)
- Objection to processing based on our legitimate interests (Article 21)
- Withdrawal of your consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 7(3))
To exercise your rights, email info@kymashipping.gr. We will reply within one month, as required by Article 12 GDPR, and we may ask you to confirm your identity.
09Right to lodge a complaint
If you believe that the processing of your personal data infringes the law, you have the right to lodge a complaint with the supervisory authority:
10Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access and spam protection on our forms. No transmission over the internet is completely secure, so please avoid sending highly sensitive information by email.
11Children
This website is not intended for children under 15, the age of digital consent in Greece (Article 21 of Law 4624/2019). We do not knowingly collect their personal data.
12Automated decisions
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
13Cookies
For information about cookies and similar technologies on this website, please read our Cookie Policy.
14Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.