Privacy Policy
Effective date: · Last updated:
1. Data Controller
SOLASindex.com is operated by Zivot LTD, a company registered in the Republic of Cyprus.
- Registration Number: HE478555
- VAT: CY60192210F
- Address: Nicosia, Cyprus
- Privacy contact: privacy@networklayer.ai
Zivot LTD is the data controller for personal data processed through SOLASindex.com under the EU General Data Protection Regulation (GDPR) and the Cyprus Data Protection Law 125(I)/2018.
2. What Data We Collect
2.1 Website Visitors
When you visit SOLASindex.com, we collect:
- Server logs: IP address, browser type, operating system, pages visited, referring URL, and timestamps. This data is collected automatically by our hosting infrastructure.
- Analytics data: Aggregated, anonymized usage data to understand how visitors use the Platform (pages viewed, time on site, navigation patterns). We use privacy-respecting analytics that do not track individuals across sites.
2.2 Contact and Inquiry Data
When you contact us via email or a contact form, we collect the information you provide: name, email address, company name (if given), and the content of your message.
2.3 Claimed Profile Data
When a manufacturer claims their listing on SOLASindex, we collect:
- Company name and registration details (for identity verification)
- Contact person name and email address (voluntarily provided by the manufacturer)
- Any additional product data, certification numbers, or corrections the manufacturer submits
This data is provided voluntarily by the manufacturer as part of the claiming process.
2.4 Premium Account Data
Premium listing customers provide additional business information as part of the commercial agreement, including billing contact details and payment information. Payment processing is handled by third-party payment processors; we do not store payment card details.
3. Manufacturer Data Published on the Index
3.1 Company-Level Data
SOLASindex publishes company-level data about maritime equipment manufacturers: company name, registered address, website URL, product range, certification associations, and other business information. This is factual data about legal entities, sourced from publicly available manufacturer documentation. Under GDPR, data about companies (as opposed to natural persons) is not personal data and is not subject to data protection regulation.
3.2 No Personal Data Published Without Consent
SOLASindex does not publish personal data (names, direct email addresses, or direct phone numbers of individuals) on manufacturer listings without the consent of the data subject. Company-level contact information (e.g., info@company.com, general phone numbers) is not personal data under GDPR.
When a manufacturer claims their profile and voluntarily provides a contact person's name and details for display, this constitutes consent to publish that information on their listing.
4. How We Use Data
| Data | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Server logs | Security, technical diagnostics, abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Analytics data | Understanding site usage to improve the Platform | Legitimate interest (Art. 6(1)(f)) |
| Contact form submissions | Responding to your inquiry | Legitimate interest (Art. 6(1)(f)); consent where applicable |
| Claimed profile data | Managing manufacturer listings and providing the claiming service | Contract performance (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) |
| Premium account data | Providing the premium listing service and billing | Contract performance (Art. 6(1)(b)) |
| Published manufacturer data (company-level) | Operating the Index | Not personal data under GDPR |
5. Data Sharing
We do not sell, rent, or trade personal data to third parties for marketing or advertising purposes.
We may share data with:
- Infrastructure providers: Cloudflare (hosting, CDN, security). Cloudflare processes data as a data processor under our instructions.
- Payment processors: For premium listing billing only. Payment processors operate as independent data controllers under their own privacy policies.
- Legal obligations: Where required by law, regulation, or court order.
6. Data Processing Location
SOLASindex is hosted on Cloudflare infrastructure. Data is processed within the European Economic Area (EEA). Cloudflare maintains EU-compliant data processing agreements and appropriate safeguards for any data that may transit outside the EEA in the course of providing CDN and security services.
7. Cookies
SOLASindex uses only essential cookies required for the basic functioning of the website (e.g., session management, security tokens). We do not use advertising cookies, tracking cookies, or third-party marketing cookies.
No cookie consent banner is required for strictly necessary cookies under the ePrivacy Directive. If we introduce non-essential cookies in the future, we will implement a consent mechanism before deployment.
8. Data Retention
| Data | Retention Period |
|---|---|
| Server logs | 30 days |
| Analytics data | Aggregated and anonymized; no individual-level data retained |
| Contact form submissions | Until the inquiry is resolved, then deleted within 90 days |
| Claimed profile data | For the duration of the claimed listing, plus 12 months after removal |
| Premium account data | For the duration of the contract, plus 6 years for financial record-keeping as required by Cyprus law |
| Published manufacturer data | Until the manufacturer requests removal or the data is superseded |
9. Your Rights Under GDPR
If you are an individual whose personal data we process, you have the following rights:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate personal data.
- Right to erasure (Art. 17): Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to restriction (Art. 18): Request that we restrict processing of your personal data in certain circumstances.
- Right to data portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@networklayer.ai. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy), the supervisory authority in the Republic of Cyprus.
10. Manufacturers: Data Correction and Removal
If you are a manufacturer and believe your company data on SOLASindex is inaccurate:
- Correct your data: Claim your listing (free) to manage your profile directly, or email corrections@networklayer.ai.
- Request removal: Email legal@networklayer.ai with your company name and domain. We will remove your listing within 14 business days.
Note: Company-level data (company name, address, product range) is not personal data under GDPR. Removal requests for company data are handled as a matter of business courtesy, not GDPR obligation.
11. Children
SOLASindex is a professional industry platform not directed at children. We do not knowingly collect personal data from anyone under the age of 16.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the scope of the Platform. The "Last updated" date at the top indicates when the latest revision was made. Material changes will be communicated via a notice on the Platform.
13. Contact
For privacy-related questions or to exercise your data protection rights:
- Email: privacy@networklayer.ai
- Data corrections: corrections@networklayer.ai
Zivot LTD
Nicosia, Cyprus
Registration Number: HE478555
VAT: CY60192210F
Supervisory authority: Office of the Commissioner for Personal Data Protection, Republic of Cyprus (dataprotection.gov.cy)