Legal
Privacy policy
We collect as little personal data as possible, use it only to answer you, and never sell it.
Last updated:
1. Who is responsible for your data
The data controller is NEREUS OCEAN SOLUTIONS, a company being registered in Spain, with address at Via Adamo Centurione 9, 16134 Genova, Italy. Email: info@nereusoceansolutions.com. You can write to this address about anything related to your personal data.
2. Data we collect
When you contact us. Through the contact form we collect your name, email address and message, the area of interest and type of enquiry you choose, and, if you decide to give them, your organisation and telephone number. We also record that you accepted this policy and when. If you email or call us directly, we receive the data you choose to include.
When you visit the website. To deliver the pages and protect the website against attacks, our hosting provider processes technical data such as your IP address, browser type, the page requested and the time of the request.
We do not use analytics, advertising, tracking pixels, social media plugins, embedded maps or fonts loaded from third-party servers. We do not build profiles of visitors.
3. Why we use your data and on what legal basis
- To answer your enquiry and, if you ask us to, prepare a proposal. Legal basis: your consent, given in the contact form (Article 6(1)(a) GDPR), and steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- To manage job applications and collaboration proposals you send us. Legal basis: your consent and steps taken at your request (Article 6(1)(a) and (b) GDPR).
- To keep the website secure, for example by limiting repeated form submissions and blocking malicious traffic. Legal basis: our legitimate interest in protecting the website and its users (Article 6(1)(f) GDPR).
4. How long we keep your data
We keep enquiries for up to 24 months after our last contact with you, unless a contractual relationship follows. In that case we keep the data for as long as the relationship lasts and afterwards for the periods required by law. Technical data processed by our hosting provider for security is kept only for short periods, in line with its own retention policy. The website itself does not store form submissions: each enquiry is sent to us by email and is not kept in any website database.
5. Who receives your data
We never sell your data. We share it only with service providers that act on our behalf:
- Cloudflare, Inc. hosts the website, protects it against attacks and forwards the contact form to our mailbox.
- Google (Gmail) provides the mailbox in which we receive and answer enquiries.
These providers process data only on our instructions and under data processing agreements. We may also disclose data where the law requires it.
6. International transfers
Some of these providers may process data outside the European Economic Area, for example in the United States. Where this happens, the transfer is protected by appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
7. How we protect your data
The website is served only over encrypted connections (HTTPS) and uses strict security policies that prevent it from loading code from other websites. The contact form checks every submission, limits repeated submissions and rejects automated spam. Access to the mailbox that receives enquiries is restricted to the NEREUS team and protected with strong authentication.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect processing carried out before you withdrew it.
To exercise any of these rights, email us at info@nereusoceansolutions.com. We will reply within one month. We may ask you to confirm your identity first.
9. Right to complain
If you think we have not handled your data correctly, you can complain to the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD) (www.aepd.es (opens in a new tab)), or to the supervisory authority of the European Union country where you live or work, such as the Garante per la protezione dei dati personali in Italy (www.garanteprivacy.it (opens in a new tab)). We would appreciate the chance to address your concern first.
11. Changes to this policy
We may update this policy, for example if we change providers. The date at the top shows when it last changed. If a change significantly affects how we use data you have already given us, we will tell you.