GDPR Compliance

Last updated: September 1, 2026

ocean-zone is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and how you can exercise your rights.

Our Commitment to GDPR

We process personal data in accordance with GDPR principles:

• Lawfulness, fairness, and transparency: We process data lawfully, fairly, and in a transparent manner
• Purpose limitation: We collect data for specified, explicit, and legitimate purposes
• Data minimization: We collect only data that is adequate, relevant, and necessary
• Accuracy: We keep personal data accurate and up to date
• Storage limitation: We retain data only as long as necessary
• Integrity and confidentiality: We process data securely
• Accountability: We are responsible for demonstrating compliance

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal ground for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Right to Restriction of Processing

You have the right to request restriction of processing your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. Please include:

• Your full name
• Your email address
• A description of the right you wish to exercise
• Any relevant details to help us locate your data

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension and the reasons for delay.

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, you may contact our data protection team at:

[email protected]

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged infringement occurred.

In the United Kingdom, the supervisory authority is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Tel: 0303 123 1113
Website: www.ico.org.uk

Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Transfers

When we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding corporate rules

Data Processing Activities

We maintain records of our data processing activities as required by GDPR, including:

• Name and contact details of the controller
• Purposes of processing
• Categories of data subjects and personal data
• Categories of recipients of personal data
• Transfers to third countries
• Retention periods
• Security measures

Updates to This Information

We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. The updated version will be indicated by an updated "Last updated" date.