1.Data controller
Sealink, Istanbul, Türkiye, acts as the data controller for personal data processed through Sealink Bridge. Inquiries should be directed to legal@sealink.co.
2.Categories of personal data
- Account data. Name, email address, telephone number and role assignments for each user of the hub.
- Sign-in data. IP address, browser user-agent string, timestamps, multi-factor challenges and outcomes. Retained in the audit log for the purposes of security and incident forensics.
- Operational data. Vessel telemetry, ISP usage counters and hotspot session metadata. This is not personal data with respect to shore staff but may identify crew members when paired with named voucher accounts.
- Communications. Emails dispatched by the platform (sign-in alerts, password resets, invitations) and the corresponding delivery metadata.
3.Legal basis
Account, sign-in and operational data are processed on the legal bases of contract performance (GDPR Article 6(1)(b) and KVKK Article 5(2)(c)) and legitimate interest (GDPR Article 6(1)(f) and KVKK Article 5(2)(f)). Without this processing the service contracted for cannot be delivered or kept secure.
4.Recipients and disclosures
Sealink does not sell, rent or share personal data with third parties for marketing purposes. Personal data may be disclosed to (i) infrastructure sub-processors listed in the Data Processing Addendum executed with your organisation, (ii) competent authorities where required by law, and (iii) the email provider used to transmit transactional messages.
5.Retention
Account records are retained for the duration of your organisation’s Bridge subscription and for a short period thereafter to honour offboarding requests. The audit log is retained for the period configured by your fleet’s system_owner (default 365 days, configurable from the administration settings). The configured retention period is enforced by a daily background pruning task.
6.Your rights
You have the right to request access to your personal data, to obtain rectification or erasure, to restrict or object to processing, and to receive an export in a portable format. Requests should be submitted to legal@sealink.co; identity verification may be required. You also have the right to lodge a complaint with the supervisory authority of your jurisdiction — in Türkiye, the Kişisel Verileri Koruma Kurumu (kvkk.gov.tr); in the European Union, your national data protection authority.
8.Changes to this notice
We may amend this notice from time to time. The Effective date in the header always reflects the latest revision. Material amendments will be communicated to administrators by email.