Implementing GDPR

It has now been over a month since The General Data Protection Regulation (GDPR), came into force.

GDPR is the EU’s new legal framework for the collection, controlling and processing of personal data of individuals from within the European Union (EU).  It is applicable to any company, regardless of location, that processes the personal data of EU citizens.

Within the Döhle Yachts Group, when implementing our services, our policy is to collect only the personal data necessary for agreed purposes and as required under the relevant laws.

Every effort has been made to ensure that our privacy policy is as easy to understand and as ‘jargon-free’ as possible.  For clients using our technical, compliance or yacht management services, our privacy policy can be found here on the Döhle Yachts website; crew employment and payroll clients can view our privacy policy here on the Levanto website; recruitment clients can view our privacy policy here on the Döhle Yacht Crew website.

From time to time, we may have an obligation to share information with certain public authorities and companies such as:

• Tax and VAT authorities;
• Regulatory authorities;
• Crew medical providers;
• Law enforcement agencies;
• Insurers;
• Crew travel providers;
• Ship and yacht registries; and
• Customs and port authorities.

In the event we do provide personal details to any of the above, it will be in the legitimate interest of the person and the vessel they are assigned to. We will never provide any more than the minimum data necessary to order to satisfy the requirements of the public authority or company to enable them to discharge their obligations, provide the required services or to meet their legal requirements

Regarding Data Retention, we retain your personal data only for as long as is necessary to fulfil the purposes we originally collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.  To determine the appropriate retention period for personal data, we consider the nature, scale and complexity of the personal data we hold and weigh this against the potential risk of harm from unauthorised use or disclosure of your personal data.

All personal data is stored on centralised systems which are owned and controlled by Döhle (IOM) Limited, the parent company of Döhle Yachts. These systems may be accessible by all entities within the Döhle Yachts Group; details of these companies are outlined below.

• DÖHLE PRIVATE CLIENTS LTD (Isle Of Man)
• DÖHLE YACHTS TECHNICAL SERVICES LTD (United Kingdom)
• LEVANTO INTERNATIONAL LTD (British Virgin Islands)
• LEVANTO (GUERNSEY) LTD (Guernsey)
• LEVANTO (MALTA) LTD (Malta)

Access is given to each separate Döhle Yachts Group company and person employed by the Döhle Yachts Group depending on their functions and requirements.  We may also pass on certain personal data to our shareholders and to other entities where we have outsourced services.

Legal data processing agreements govern the relationship between each entity listed above.  If you would like any additional information please do not hesitate to contact our Data Protection Officer:

DATA PROTECTION OFFICER CONTACT DETAILS:

Data Protection Officer
Döhle Group
Fort Anne
South Quay
Douglas
Isle of Man
IM2 2DN

Email address: dataprotection@doehle-iom.com