Privacy and Cookie Statement

ShipLogic is a registered trademark of Software Foundry B.V. Your privacy is very important to us. We therefore comply with the relevant privacy laws and regulations, including the General Data Protection Regulation (hereinafter: GDPR). This means that we:

• Clearly specify our purposes before processing your personal data, through this privacy statement;

• Store as little personal data as possible and only the data necessary for our purposes;

• Explicitly ask for your consent to process your personal data where consent is required;

• Take appropriate security measures to protect your personal data. We also require parties that process personal data on our behalf to comply with these obligations;

• Respect your rights, such as your right to access, correct or delete the personal data we process about you.

Your personal data is in safe hands with us. We handle your data with care and process it in accordance with applicable privacy legislation. In this privacy statement, we explain which personal data we collect, why we process it and how we handle it.

If you have any questions about this privacy statement or would like to know which personal data we process about you, please contact Software Foundry B.V.

Your account
To access the ShipLogic application portal, you must register with the designated main user of ShipLogic within your organisation. This person will create an account for you, which you can use to log in. For this purpose, we use your:

• Email address;

• First and last name;

• IP address.

When you register, we process the personal data necessary to create your user account and provide you with access to ShipLogic. We use this data to manage and secure your account, to enable you to use the service and, where necessary, to communicate with you about the service.

Where we process this personal data on behalf of the organisation for which you use ShipLogic, that organisation acts as the data controller and Software Foundry B.V. acts as the data processor.

We do not retain personal data for longer than necessary for the purposes for which it is processed, unless a longer retention period is necessary or required by law. Where we process personal data on behalf of our customer, the agreements made with that customer regarding retention also apply.

You can view and modify certain details of your user account yourself.

Support and/or contact form
You can use the contact form to ask us questions or submit requests. For this purpose, we use your:

• First and last name;

• Telephone number;

• Email address;

• Message entered in the form.

By completing a form, you consent to our use and retention of this data until your question or comment has been fully dealt with.

The data you provide through the contact form will not be shared with third parties unless we are legally required to do so.

Access to the portal/App
The ShipLogic application portal gives you access to an administration environment in which you can manage and modify settings and data for the service. We keep a log of relevant actions you perform within the portal, including the time at which they take place. We use this information for security and monitoring purposes and to investigate and trace any problems that may occur.

For this purpose, we use your:

• Email address;

• IP address.

By using our portal, you consent to this processing. We retain this information in accordance with applicable statutory retention periods.

Location data
Some functions of our service require us to determine your location. When a function requires access to your location, we will first ask for your consent. Only if you give your consent can the relevant function use your location data.

To determine your location, we use the location services provided by your phone, tablet or computer. These services form part of the operating system or device you use. The provider of these services, such as Apple, Google or Microsoft, may also process personal data. We have no control over this processing. Please refer to the relevant provider's privacy statement for more information.

Disclosure to other companies or organisations
Except for parties we engage to provide our services, we do not disclose your personal data to other companies or organisations unless this is necessary to comply with a legal obligation or we are otherwise authorised to do so by law. This may be the case, for example, where a competent public authority requests data on a lawful basis.

Statistics
We keep statistics on the use of our website.

Cookies
Our service only uses functional cookies. These cookies are necessary for the proper and secure operation of the service, for example to manage your session and remember certain settings.

We do not use cookies for advertising or marketing purposes, nor do we use cookies to track you outside our service.

As these cookies are necessary for the operation of the service, your consent is not required. If you block these cookies through your browser, certain parts of our service may not function properly or at all.

Google Analytics
We use Google Analytics to monitor how visitors use our website. We have not permitted Google to use the Analytics information obtained for other Google services. We have configured Google Analytics to anonymise IP addresses.

Security
The security of personal data is very important to us. We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and other forms of unlawful processing. Our information security management system is certified in accordance with ISO/IEC 27001:2022. We regularly review our security measures and adapt them where necessary based on current risks and developments.

Changes to this privacy statement
We may amend this privacy statement from time to time, for example when our services or applicable laws and regulations change. The date of the most recent version can be found at the top of this privacy statement.

If a change affects the way in which we process your personal data and applicable law requires us to inform you separately, we will do so in an appropriate manner.

Your rights
If you have any questions about this privacy statement, the processing of your personal data or your privacy rights, please contact us using the contact details below.

You have the following rights:

• To receive an explanation of which personal data we hold about you and what we do with it;

• To access the specific personal data we hold about you;

• To have errors corrected;

• To have outdated personal data deleted;

• To have personal data transferred to another party;

• To withdraw your consent;

• To restrict certain processing;

• To object to certain uses of your personal data.

To prevent personal data from being disclosed to, modified by or deleted at the request of the wrong person, we may ask you to provide additional information to verify your identity.

In principle, we will respond to your request within one month. Where necessary due to the complexity or number of requests, we may extend this period by up to two additional months. In that case, we will inform you of the extension and the reasons for it within one month of receiving your request.

Submitting a complaint
If you have a complaint about the processing of your personal data, please contact us at support@shiplogic.nl. We will investigate your complaint and keep you informed about how it is being handled.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Dutch supervisory authority responsible for the protection of personal data.

Contact details
Software Foundry B.V.
Attn. ShipLogic department
Albert Plesmanweg 43-K
3088 GB Rotterdam
The Netherlands
Email: support@shiplogic.nl
Chamber of Commerce number: 5038426