GDPR Privacy Policy

1. Introduction and Data Controller

Faroys.com ("Platform", "we", "our") is a non-profit, volunteer-based digital solidarity and networking platform designed for seafarers and the maritime industry. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

For the purposes of the GDPR, the Data Controller is Şerif Kurhan (operating as an individual initiative).

Contact Email: info@faroys.com

2. What Personal Data We Collect

We only collect data that is necessary for the platform to function and provide you with its networking services.

Mandatory Data: Full name, email address, password, and maritime rank.
Voluntary/Optional Data: Seamanbook (Seafarer's Identity Document) number, phone number, Curriculum Vitae (CV), professional experience, and profile pictures.
Company Accounts: Company name, authorized contact person, email, physical address, and IMO Number or Tax ID (for verification purposes only).

3. Legal Basis and Purposes of Processing

Under GDPR Article 6, we process your data based on the following legal grounds:

Performance of a Contract (Art. 6(1)(b)): To create your account, provide secure login, and maintain platform functionality as per our Terms of Service.
Explicit Consent (Art. 6(1)(a)): For sharing your profile/CV with international shipowners and for sending optional promotional emails (if you opt in).

4. Data Sharing and International Transfers

FAROYS is a global maritime network. To facilitate employment connections, your profile and CV may be viewed by registered and verified maritime companies worldwide, including those located outside the European Economic Area (EEA).

By actively creating a profile and checking the consent box during registration, you explicitly consent to the transfer of your data to these international entities for employment purposes. We do not sell, rent, or trade your personal data to any third-party marketing agencies.

5. Data Retention (Storage Limitation)

We keep your personal data only for as long as your account is active. If you choose to delete your account via your profile settings, a 30-day grace period is initiated. After 30 days, your personal data, CV, and profile information will be permanently erased (hard-deleted) or fully anonymized from our active databases.

6. Cookies and Tracking Technologies

Our platform respects your digital footprint. We do not use analytical or marketing cookies (e.g., Google Analytics, Meta Pixel) that track your behavior. We only use strictly necessary session cookies required for authentication, security, and language preferences.

7. Your Rights Under GDPR (Data Subject Rights)

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access: You can request a copy of the data we hold about you.
Right to Rectification: You can update or correct your data anytime through your dashboard.
Right to Erasure ("Right to be Forgotten"): You can permanently delete your account and data.
Right to Restrict Processing: You can ask us to pause processing your data.
Right to Data Portability: You can request your data in a structured, machine-readable format.
Right to Withdraw Consent: You can withdraw your consent for promotional emails or international data sharing at any time.

To exercise any of these rights, please contact us at info@faroys.com. We will respond to your request within 30 days, free of charge.

8. Disclaimer on Third-Party Interactions

FAROYS acts solely as a digital bulletin board and hosting provider. We are not an employment agency. We do not guarantee the validity of job postings or the integrity of registered companies. Any communication, employment contract, or financial agreement made between users and companies is strictly at your own risk.