Privacy Policy

The Website is an informational website. It has no user accounts, no online shop and no login area. It does not run analytics, advertising or third-party tracking, and it does not collect or store personal data on a server.

The contact form on the Website does not send anything to us directly — it opens a pre-filled message in your own email application, which you choose to send or not. We only receive your details if you decide to email or call us.

For the purposes of applicable data-protection law, the data controller is PremiumFocus Nautilus.

• Offices: Athens, Greece and Larnaca, Cyprus
• Website: nautilusmss.com
• Contact for privacy matters: info@nautilusmss.com

Information you give us

If you contact us by email or telephone — including by using the contact form, which opens your own email client — we process the information you choose to provide. This typically includes your name, email address, telephone number, the company or vessel you represent, and the content of your message.

Information collected automatically

The Website itself does not collect analytics or usage data. As with any website, our hosting provider may process limited technical information (such as IP address and basic request logs) in order to serve the site securely and reliably. This information is handled by the hosting provider as part of standard server operation.

Information stored on your device

We use a small amount of strictly necessary local storage to remember your display preferences — your selected colour theme and language, and the fact that you have seen our cookie notice. This information stays on your device, is not transmitted to us and is not used to track you. See our Cookie Policy for details.

Where you contact us, we use your information to:

• respond to your enquiry and communicate with you;
• discuss and deliver the maritime services you ask about;
• carry out and administer any engagement or contract with you or your organisation;
• comply with legal, regulatory and professional obligations; and
• establish, exercise or defend legal claims where necessary.

Under the GDPR, we rely on the following legal bases:

• Performance of a contract, or steps taken at your request before entering into a contract, when you engage our services;
• Our legitimate interests in responding to enquiries and operating our business, balanced against your rights and freedoms;
• Compliance with a legal obligation; and
• Your consent, where it is specifically requested — which you may withdraw at any time.

We do not sell your personal data and we do not share it with advertisers. We may share information only where necessary with:

• service providers acting on our behalf (for example our website host or IT and communications providers), under appropriate confidentiality and data-protection terms;
• professional advisers, insurers and partners where required to deliver a service you have requested; and
• public authorities or other parties where we are required to do so by law.

We operate from Greece and Cyprus, within the European Economic Area (EEA). Where information is processed outside the EEA — for example by a service provider — we take steps to ensure an adequate level of protection, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

We keep correspondence and related information only for as long as necessary for the purpose for which it was provided — typically to handle your enquiry and for any resulting engagement — and for any further period required to meet legal, accounting or regulatory obligations. We then delete or anonymise it.

We take reasonable technical and organisational measures to protect information against loss, misuse and unauthorised access. However, no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security.

Subject to the conditions set out in applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent; and
• lodge a complaint with a data-protection supervisory authority.

To exercise any of these rights, contact us at info@nautilusmss.com. In Greece, the supervisory authority is the Hellenic Data Protection Authority (dpa.gr); in Cyprus, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

The Website may contain links to third-party websites that we do not operate or control. This Privacy Policy does not apply to those websites, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of every website you visit.

The Website is intended for a professional, business audience and is not directed at children. We do not knowingly collect personal data relating to anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us so that we can remove it.

We may update this Privacy Policy from time to time. The current version is always published on this page with its effective date. Material changes will be made clear on the Website.

For any question about this Privacy Policy, or about how we handle information, contact us at info@nautilusmss.com, or write to us at our offices in Athens, Greece or Larnaca, Cyprus.