Privacy Policy – Navark AB

1. Introduction

Navark AB safeguards your personal privacy. The purpose of this privacy policy is to clearly and transparently describe how we process personal data and what rights you have. The policy meets the requirements of the EU General Data Protection Regulation (GDPR) and is designed to withstand review and supervision by the Swedish Authority for Privacy Protection (IMY).

2. Data Controller

Navark AB is the data controller for the processing of your personal data. Navark AB’s operations do not require the appointment of a data protection officer.

Address: Kajpromenaden 22, 252 67 Helsingborg

Telephone: +46 (0)42-14 40 50

E-mail: info@navark.se

3. What are personal data and processing of personal data?

Personal data is any information that can be directly or indirectly linked to a natural person, such as names, contact details, images, IP addresses, and other digitally identifiable information. The processing of personal data refers to any actions taken with the data, such as collection, registration, storage, processing, transfer, or deletion, whether this is done automatically or manually.

4. What personal data Navark AB collects

We only process personal data that is relevant and necessary for the specified purposes, for example:

• Personal names and company names
• Email address and phone number
• Address and other contact details
• Personal identity number only to the extent required for identity verification, contracts, and anti-money laundering legislation in brokerage assignments
• Information about items connected to a transaction, such as the boat’s price, condition, and previous ownership history, where this can indirectly be linked to a seller or buyer
• Information voluntarily provided to us via forms, email, or in connection with business relationships

5. How we collect personal data

Personal data is collected when you:

• Contact us by email or phone
• Fills in forms on our website, for example an inquiry about whether a specific boat is for sale
• Subscribed to newsletter
• Interacting with our website (via cookies)
• Enter into a brokerage agreement with us or purchase a boat through our brokerage

6. Purpose and legal basis for processing

We process personal data only for specific, explicitly stated, and legitimate purposes.

Electronic direct marketing of similar products is carried out in accordance with GDPR and the Marketing Act.

7. Marketing and newsletters

We may use your contact details to send information and offers regarding Navark AB’s own products and services, based on legitimate interest or consent, depending on the type of communication and your relationship with us.

With your explicit and informed consent, we may also use your contact details to market products and services from other companies within the Navark Group. This consent is separate from consent for marketing from Navark AB and is obtained separately and clearly, and you may withdraw it at any time without affecting other personal data processing.

You always have the right to object to marketing and can unsubscribe at any time via the link in the mailing or by contacting us. Navark AB uses Klaviyo as the provider for newsletter distribution. Personal data may therefore be processed both within and outside the EU/EEA, but always with appropriate safeguards such as standard contractual clauses and data processing agreements. Navark AB remains ultimately responsible for the processing of your personal data.

8. Retention period and protection of personal data

Retention period

Personal data is stored only as long as necessary for the purpose of the processing or as long as required by law. As a general rule, Navark AB applies the following storage principles:

• Data related to an active or recently completed brokerage assignment: retained during the term of the assignment and thereafter in accordance with applicable accounting and anti-money laundering legislation (i.e. seven and five years, respectively).
• Data on buyer and seller prospects without completed transactions: retained for three years after the last contact, unless marketing consent has been given, to enable follow-up and relevant statistics for principals.
• Data covered by active marketing consent: retained until the consent is withdrawn, with periodic review to ensure that the data remains relevant and up to date.

Safety

Navark AB implements appropriate technical and organizational security measures to protect personal data, including encryption, access control, secure systems, and internal procedures.

9. The data subject's rights

In accordance with GDPR and IMY’s guidelines, you have the right to:

• Request access to your personal data
• Request rectification of incorrect data
• Request deletion of data
• Request restriction of personal data processing
• Object to the processing of personal data, especially in the case of direct marketing
• Request data portability

A request regarding the above will be answered within one month. Contact us by email to exercise your rights. In addition, you always have the right to lodge a complaint with IMY, which is the supervisory authority for personal data processing.

10. Recipients of personal data

We may share personal data with trusted suppliers who process data on our behalf, such as IT providers, newsletter distribution providers, and e-signature service providers. These parties act as data processors and process data in accordance with our instructions and data processing agreements.

11. Transfer to third countries

If personal data is transferred to a country outside the EU/EEA, it is ensured that the transfer is carried out in accordance with the GDPR, for example through the European Commission’s standard contractual clauses. Contact us to access the standard contractual clauses.

12. Transfer of operations

If Navark AB’s business, or parts of it, is sold, merged, or otherwise transferred, your personal data may be transferred to the acquiring party as part of this transaction, to the extent permitted by applicable law and for the purposes specified in this policy.

The acquiring party will be bound by this privacy policy, or will inform you of any material changes in how your personal data is processed. In the event of such a transfer, Navark AB ensures that the receiving party undertakes to process the data in accordance with the same purpose and level of protection as stated herein, and that any marketing consents are respected and not automatically extended to new purposes without renewed consent.

13. Amendments to this policy

Navark AB may update this privacy policy to reflect changes in our operations or applicable legislation. Material changes, such as new purposes for processing, will be clearly communicated, for example through information on our website or directly to affected data subjects where required by law.