Privacy Notice | NauticIQ

NauticIQ is a brand of Nautic Information Quality OÜ, registry code 17606480, Jõe tn 3-303, Kesklinna linnaosa, Tallinn, Harju maakond, 10151, Estonia. We are the controller of personal data we collect for our own public NauticIQ website at nauticiq.com and nauticiq.net. You can submit a privacy request through the contact form, by email to [email protected], or by writing to us at the postal address above.

Scope

This notice covers visits to the public NauticIQ website and enquiries about its business software. NauticIQ offers Ops for charter inspections and maintenance, Cockpit for operator administration, Base360 for operator-branded booking sites and Axis360 for agency booking products. Product workspaces and an operator's or agency's independently branded site require their own relevant privacy information. The customer or its appointing controller may determine the purposes of data processing there, with NauticIQ acting as a processor for specified activities. Our role is assessed by activity. The NauticIQ Ops mobile app is covered by its own privacy policy.

Data, purposes and legal grounds

Activity	Data	Purpose and legal ground
Site delivery and protection	IP address, request time, page requested, browser and device information, error and security events	Deliver and protect the site, diagnose faults and misuse. Our legitimate interests in operating and securing it (GDPR Article 6(1)(f)); a specific legal obligation where applicable (Article 6(1)(c)).
Enquiries and demonstration requests	Name, work contact details, organisation, message and correspondence	Answer and follow up on the request. Steps requested before a contract where the individual will be the contracting party (Article 6(1)(b)); otherwise our legitimate interests in answering business enquiries (Article 6(1)(f)).
Promotional messages, if offered	Contact details, subscription choice, consent record and unsubscribe status	Send communications the recipient has chosen and honour opt-outs. Consent (Article 6(1)(a)) and applicable electronic-marketing rules. Service replies do not enrol a person in marketing. Each promotion will offer a free, easy unsubscribe.
Optional analytics or advertising, if introduced	Device identifiers, page interactions and campaign information	Measure use or campaigns only after the required prior consent for non-essential device access and related personal-data processing (Article 6(1)(a)). These tools are outside the essential-only launch policy until reviewed.

Contact and message fields are voluntary, but we need enough information to answer an enquiry. Technical request data arises when your browser connects. General business forms should contain only relevant contact, organisation and message details. Please do not send card details, identity documents, health information, crew records or vessel inspection records through a general form.

A referring browser may send us its referring page. We do not use purchased or partner-supplied identifiable lead lists under our default policy. If we receive personal data about you from another source, we will provide the information required by GDPR Article 14, including the source and categories, at first contact and within the applicable statutory period unless a lawful exception applies.

Cookies and marketing choices

Our Cookie Notice describes the technologies and choices on this website. The launch policy is to use strictly necessary technology only. Optional analytics, advertising and audience matching must remain disabled unless their actual tools are inventoried, disclosed and subject to valid prior consent. You can withdraw any optional consent through an accessible cookie-settings control.

Recipients and international transfers

People authorised to operate and support our website may access data needed for their work. Providers may perform hosting, security, communications or other documented functions. We may disclose information when required by law or to establish, exercise or defend legal claims.

If a provider or support person accesses data outside the European Economic Area, we will use an applicable EU adequacy decision or a valid GDPR Chapter V safeguard, including supplementary measures where required. You may ask us for details of a safeguard or how to obtain a copy.

Retention

Routine website access logs are kept for 30 days, and an enquiry that does not become a customer relationship is kept for 12 months after the last meaningful contact, unless a shorter period is required. We keep a minimal record of consent or an unsubscribe for as long as needed to demonstrate or respect that choice. Evidence of a particular security incident, legal claim or statutory duty may be held separately for its documented, justified period. Residual backups expire under the documented backup cycle and are not used for ordinary processing after primary deletion.

Your rights

Subject to the GDPR conditions, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests; we will stop unless we demonstrate compelling legitimate grounds or need the information for legal claims. You may object to direct marketing at any time without a balancing test. You may withdraw consent at any time without affecting earlier lawful processing. Submit a request through the contact form above or by post. We may verify identity before releasing data. We normally respond within one month, subject to a permitted extension.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or to the authority where you live, work or believe an infringement occurred. You may also seek a judicial remedy.

Changes

We will show the effective date when this notice is published and update it when practices change. We will give direct notice or seek a new consent where required before a material change affects you.

We do not use this website for visitor profiling, lead scoring, or solely automated decisions that produce legal or similarly significant effects. This website is aimed at businesses and is not directed at children.