GDPR Compliance Statement

§1. Commitment to Global Data Protection Standards

Seaway Export affirms its commitment to safeguarding personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and all applicable international privacy frameworks. As a global logistics provider, we treat personal data not merely as a compliance obligation, but as a foundation of trust, transparency, and operational integrity.

§2. Your Rights as a Data Subject

Seaway Export empowers all individuals whose personal data we process—including clients, employees, vendors, and website visitors—with the following rights under the GDPR:

To exercise your rights, please contact our Data Protection Officer (see §4).

§3. Legal Bases for Processing

In accordance with Article 6 of the GDPR, we process personal data only when at least one of the following lawful bases applies:

• Performance of Contract: To execute transportation, logistics, customs, insurance, and communication services.
• Legal Obligation: To comply with local, national, or international laws, including customs, export control, tax, and anti-money laundering obligations.
• Legitimate Interest: To improve our services, ensure facility and platform security, and prevent fraudulent activity, provided such interests do not override your fundamental rights.
• Consent: Where no other lawful basis exists, we request clear, affirmative consent—for example, in marketing outreach or optional tracking technologies.

All processing activities are recorded in our Data Processing Inventory and reviewed quarterly.

§4. Contact: Data Protection Officer (DPO)

Our appointed Data Protection Officer (DPO) ensures regulatory compliance, manages risk assessments, and serves as your point of contact for all privacy-related inquiries.

§5. International Data Transfers

Seaway Export may transfer personal data from the European Economic Area (EEA) or the UK to countries outside those jurisdictions only when:

• The European Commission or UK ICO has issued an adequacy decision;
• We have entered into Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs); or
• Other legally recognized safeguards exist, such as binding corporate rules, derogations under Article 49 GDPR, or customer-approved mechanisms.

We maintain encryption, access controls, and system audit trails to protect transferred data from unauthorized access or compromise.

§6. Security Measures

Seaway Export applies multi-layered security controls, including:

• Transport Layer Security (TLS) and email encryption
• Role-based access controls (RBAC)
• Activity logging and intrusion detection
• ISO-aligned business continuity and data recovery policies
• Privacy risk assessments and training for all staff with data access

These controls are reviewed semi-annually and audited as part of our compliance framework.

§7. Complaints and Enforcement

If you believe your personal data has been misused, mishandled, or unlawfully processed, you may file a complaint with:

• Your local Data Protection Authority in the EEA, or
• The Data Protection Authority of the country where the issue occurred.

§8. Legal Notice and Revisions

This statement is for transparency and legal accountability. It does not create any rights or obligations beyond those imposed by law. Seaway Export reserves the right to amend this statement at any time to reflect changes in our privacy practices or regulatory environment. Changes will take effect upon publication.