Data Protection

This Data Privacy Notice ("Notice") applies to X Shore AB, reg. no. 559000-4742 ("X Shore" "we", "us" or "our") when we process personal data of persons that visit our website or contact us for general queries or other purposes.

X Shore processes personal data in accordance with this Notice and applicable legislation, including the General Data Protection Regulation (2016/679) ("GDPR") and other applicable national data protection laws.

We will process the personal data about you that you provide to us when you contact X Shore through our website or otherwise interact with us, such as your name, email address, telephone number and other contact information. The use of such personal data is necessary for us to be able to respond to your questions, queries or to otherwise communicate with you. We kindly ask you to never provide any personal data to us that could be considered sensitive.

1. Collection of information

We collect information from you when you contact us via the webpage, by phone or sending us an email. The information collected is the data that you provide us with, including but not limited to your name, e-mail address, your phone number, home address, and/or credit card information.

Where you have chosen to pay for your order online, X Shore's payment service provider collects payment information data. X Shore does not process any payment details/personal data in this context other than date and time for completed transaction as communicated by X Shore's service provider in conjunction with confirming that you have provided payment.

Furthermore, when you visit our website, we automatically receive and save information from your computer and browser through "cookies", including your IP address, software and hardware information, operating system and browser type and the requested page.

We will also collect your contact details (e.g. name, email address and telephone number), job title and other information that you or your company have provided to us if you are an employee or other representative of a company that has, has had or enters into a commercial relationship with us or if you are a sole trader that has a commercial relationship with us (such persons are referred to as "Representatives" and such commercial partners are referred to as "Commercial Partners").

2. Purpose with the processing and legal basis

The information we collect from you is processed, i.e. kept, stored, collected, transferred, disclosed or otherwise handled, for the following purposes:

2.1 Provide our services and deliver our product

We will process your personal data in order to provide our services and deliver our products to you, including managing payment and administrating our contractual relationship.

Categories of personal data

• Name

• Contact details

• Order details

• Payment details

• Legal basis

Contract. The processing is necessary in order to perform under the purchase agreement.

If you represent a Commercial Partner, the legal basis for the processing is our legitimate interest in order to perform under the purchase agreement with the Commercial Partner.

Retention period: Personal data is processed for this purpose until your order has been delivered and for such longer period as described further down in this Notice.

In the context of online purchases, X Shore's payment service provider acts as an independent data controller for the purposes of providing the payment services. For more information on how your personal data is processed for the purposes of effectuating online payment, please refer to the relevant payment service provider's information on how it processes personal data.

2.2 Provide you with information about your boat

Your boat is continuously collecting information related to the status of the boat, location of the boat and other information related to the surroundings of the boat, e.g. water temperature. This data is processed for the purpose of being able to enable you to view real-time information related to the boat.

Categories of personal data

Location data
Boat status, e.g. reparation status
Information about the surroundings of the boat, such as water temperature is processed but does not constitute personal data.
Legal basis

Legitimate interest. The processing of personal data is necessary in order to satisfy our legitimate interest in being able to provide you with relevant information about the boat.

Retention period: Personal data is processed for this purpose and stored in logs for a period of six (6) months after the information was collected.

2.3 Handle requests or queries

We will process your personal data in order to administer and respond to requests or queries from you when you contact us by e-mail or phone.

Categories of personal data

• Name

• Contact details

• Information about your request or query.

• Legal basis

Legitimate interest. The processing of personal data is necessary in order to satisfy our legitimate interest in being able to handle and respond to your requests or queries.

Retention period: Personal data is processed for this purpose until your request or query has been handled by us.

2.4 Provide you with email marketing correspondence, e.g. via newsletters

We will process your personal data in order to provide you with email marketing correspondence (such as offers and news) relating to our products and business, e.g. by way of sending newsletters.

Categories of personal data

• Name

• Contact details

• Legal bases

Legitimate interest. If you previously have purchased a product from X Shore and/or if you are a Representative or a Commercial Partner, the processing is necessary in order to satisfy our legitimate interest in being able to provide you with marketing for the purposes of offering additional products and services or provide you with news and information relating to current product and services.

Consent.

If you are a natural person (i.e. no Representative or Commercial Partner) that has signed up to newsletters on our website and provided your consent to processing of your personal data in that context, we will apply such consent as a legal basis for processing of your personal data as needed.

Retention period: Personal data is processed for this purpose for a period of one (1) year after your purchase or until your consent is withdrawn.

2.5 Tailored marketing campaigns

We process your personal data to provide you with personalised marketing content that we believe may be of interest to you. We do this e.g. by using cookies and similar techniques which help us and our partners to display relevant advertising on different websites, based on e.g. your visits, clicks and other online activity on websites and when receiving newsletters, etc. (interest-based advertising).

To allow for third party marketing partners to provide you with personalised marketing content, we may (based on e.g. your clicks and activity when receiving newsletters) – if you have signed up for our newsletters – also share your e-mail address with such partners as part of their market segmentation on the relevant platform.

To tailor our advertising to you we are using inter alia third party pixels, meaning we may share personal data with third party marketing partners. For example, we will use the Facebook pixel. For the processing carried out when collecting and transferring your personal data to Facebook, including for the subsequent processing in order to provide tailored communication on Facebook's platform, X Shore and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") are so called joint controllers. For more information on Facebook's processing of your personal data, see the following link: https://www.facebook.com/about/privacy.

As part of the joint controllership between X Shore and Facebook, the parties have entered into an arrangement, that can be found here: https://www.facebook.com/legal/controller_addendum. In this arrangement it is inter alia stated that X Shore shall provide you with the information as included in this section and that Facebook is responsible in fulfilling your rights according to Articles 15-20 of the GDPR regarding the personal data stored by Facebook following the joint processing activity.

Categories of personal data

• E-mail address

• IP Address

• Geographic position

• User behaviour collected from cookies and similar technologies.

Legal basis

Consent. The processing necessary for us and our partners to provide you with interest-based advertising is based on your consent.

Retention period: Your personal data is retained during a period of 12 months from when you provided your last consent. Reports and statistics on an aggregated level (i.e. non-personal data) will be retained until further notice.

2.6 Statistical analysis, including to improve our products and services

We will process your personal data in order to improve our products and services and to increase your user experience.

Categories of personal data

• Name

• Information about purchases

Legal basis

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest in being able to develop our services and to increase our understanding of the markets and customers.

Retention period: Personal data will only be processed for this purpose during the brief moment when your personal data is anonymized. The analysis will only be performed using anonymized data.

2.7 Improving our website

We will process your personal data in order to improve our website and increase your user experience when browsing on our website.

Categories of personal data

• IP Address

• Log files

• User behaviour collected from cookies and similar technologies.

Legal basis

Legitimate interest. The processing is necessary in order to satisfy our legitimate interest in being able to develop our website.

Retention period: Personal data will only be processed for this purpose during the brief moment when your personal data is anonymized. The analysis will only be performed using anonymized data.

2.8 Comply with legal obligations

We will process your personal data to comply with legal obligations applicable to X Shore.

Categories of personal data

• All data collected that is necessary to fulfil each legal obligation.

Legal basis

Legal obligation. The processing is necessary in order to comply with X Shore's legal obligations, for example within the area of book-keeping and taxation.

Retention period: Personal data is retained for the period as necessary to fulfil the legal obligations applicable to X Shore.

2.9 Establish, exercise and defend legal claims

For the purpose of establish, exercise and defend legal claims (for example in connection with a dispute or legal process) we will process your personal data.

Categories of Personal data

• All data collected that is necessary to establish, exercise or defend the legal claim.

Legal basis

Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to establish, exercise or defend the legal claim, for example in connection with a dispute or legal process.

Personal data relating to criminal offences or convictions will be processed only if necessary to fulfil our legitimate interest to establish, exercise or defend legal claims.

Retention period: Your personal data is retained for the period required in order for us to establish, exercise or defend the legal claim.

3. Disclosure to third parties

We do not sell, trade, or otherwise transfer or disclose, personal data to third parties unless required to do so under applicable laws. However, we may transfer data to trusted third-party providers in order for them to provide services to us, such as provide payment services, help us develop our web page or our business or help us fulfil obligations such as delivering orders etc. Only personal data that is necessary to fulfil the purposes stated above will be provided to these third-party providers. All third-party providers must follow our instructions and applicable written data processor agreements (including confidentiality undertakings) and any other agreements that are in place between us and our third-party providers and must implement appropriate technical and organizational measures for the protection of the personal data.

We may share personal data related to the surroundings of your boat, such as water temperature, algae status and other environmental data, including information about your boat's locations (however anonymized), to public authorities for the purpose of contributing to the protection of our environment. The legal basis for such disclosure is our legitimate interest in being able to contribute to the protection of our environment.

Moreover, we may share your personal data (such as your IP Address and user behaviour) to our advertising partners in order to provide you with personalised marketing, including disclosing data for our advertising partners' subsequent processing. The disclosure of your personal data for the now mentioned purposes will only take place provided that we have received your prior consent.

Personal data may be disclosed to our professional advisors, potential buyers and their professional advisors, and be transferred to new owners of X Shore or another company having assumed a part of the X Shore's business, in the event that X Shore or part of X Shore's business are to be or are sold or integrated with any other business. Such disclosure or transfer is based on our legitimate interest to obtain professional advice, to market and sell X Shore and complete a transaction of X Shore or part of X Shore's business. The personal data that may be disclosed relates to information that professional advisors, potential buyers and potential new owners require in connection with a potential transaction.

We will share information, that may include personal data, with advisors and authorities if necessary to investigate, prevent or take action against illegal activities, suspected fraud, situations that pose a potential risk to a person's physical security, breach of our terms of use or when required under applicable law, and to the extent allowed under applicable data protection legislation.

4. Transfer to third countries

We primarily process personal data on servers within the EU/EEA.

Our international transfers of personal data are based on the EU Commission’s Standard Data Protection Clauses, (Article 46.2 GDPR), https://commission.europa.eu/law/law-topic/data-protection_en  

5. Information Protection

We will only process personal data for the purposes for which it was collected and as set out above. Personal data is not processed for any longer than what is necessary for the particular purpose or as required by applicable EU or EU member state law.

We take a variety of security measures to protect your personal data. Access to personal data is limited to employees and third-party companies on a strict need-to-know basis. The servers that stores personal data at rest are stored in a secure environment and access protected physically and logically. We use advanced encryption methods to protect data transmitted over the Internet.

6. Your Rights and how to make use of them

You may at any time exercise your rights in relation to your personal data that we process:

Right to object: You are entitled to object to certain processing of personal data, including for example processing of your personal data for marketing purposes or when we otherwise base our processing of your personal data on legitimate interest.

Right to access and rectification: You have the right to request access to the personal data relating to you. This includes e.g. the right to be informed whether or not personal data about you is being processed, and if yes, what personal data is being processed and the purpose of such processing. You also have the right to request that inaccurate or incomplete personal data that we process is corrected.

Right to erasure: You may also request that your personal data is erased if e.g. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, you object to the processing of your personal data, in accordance with your right to object as set out above and we do not have an overriding legitimate interest, if the personal data have been processed unlawfully by us, or your personal data have to be erased in order to be compliant with a legal obligation under applicable data protection legislation.

Right to Data Portability: If you request access to personal data about you that yourself have provided to us and if the personal data is being processed automatically and in accordance with a contract between you and us, you may request that the personal data is provided in a structured, commonly used and machine-readable format and you may also request that the personal data is transmitted to another controller if this is technically feasible.

Right to withdraw your consent: In cases where the processing is based on your consent, you have the right to withdraw your consent to such processing at any time.

If you have any complaints about how we process your personal data, have questions related to your rights or would like further information, please contact us at any time at the following email address: info@xshore.com.

You always have the right to lodge a complaint with the relevant supervisory authority in particular where you live, work or where an alleged infringement of the GDPR has occurred. You can find the relevant authority in your country here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. For Sweden, more information can be found at Sweden: the Swedish Authority for Privacy Protection's web page www.imy.se.

7. Cookies

We use cookies to improve access to our site. In addition, our cookies enhance the user experience by tracking and targeting the user’s interests. The information collected is digital information data such as geo-location, IP address. You can choose whether you wish to accept cookies. Most web browsers allow control of the above-listed cookies through the browser settings. By adjusting your web browser, you may avoid receiving cookies. However, this might result in the services on the Website not functioning optimally. The method used to block cookies will depend on the web browser used. Consult the “Help” or corresponding menu in your web browser for instructions. You can also often change settings in relation to a specific type of cookie. Our use of cookies is generally not linked to personally identifiable information on our site.

8. Manage personal information and contact

X Shore is the controller of the personal data for the purposes described above. If you have any questions regarding our processing of personal data, please contact us at info@xshore.com. You can also use this email address to make use of your rights and receive information further information about our processing of personal data.