Data Controller

This is a registry and privacy statement in accordance with the European Union's General Data Protection Regulation (GDPR). This document was updated on September 15, 2025.

1. Controller Name: Hanman Marine Ltd.

2. Person in charge of registry matters: Adam Hanman

3. Contact: info@hanmanmarine.com

4. Purpose of Data Use We collect personal data to: Manage customer relationships and process orders. Maintain customer relationships and develop our service.

5. Basis for Data Collection and Processing We process your data in accordance with the EU's General Data Protection Regulation (GDPR) on the following grounds: Based on your consent: We use cookies to collect information about your use of our website, such as which pages have been visited and how long you have spent on different tabs. For the performance of a contract: We collect the information you provide in a form so that we can process your contact request and serve you. Our legitimate interest: We may use the data to maintain and develop our customer relationship.

6. Data Content of the Register The information we collect through forms may include the following: Company name and business ID. Contact person's name and contact information (email address, phone number). Any specific requests regarding the service. Via Google Analytics 4: Location data, IP address, and website usage data, if you have accepted cookies.

7. Data Retention Period We store personal data only for as long as it is necessary for the purposes mentioned in this statement. Customer data is stored for the duration of the contract and for the period required by law (e.g., accounting obligations).

8. Regular Data Sources Data is primarily collected directly from you through the forms you fill out. We also use Google Analytics and Squarespace analytics tools to monitor website usage via cookies.

9. Data Disclosures and Transfers Outside the EU/EEA We do not regularly disclose your data outside the company, but we do use service providers located outside the EU, such as Google Analytics and Squarespace, which have offices in Ireland. In addition, we may use Google Ads and Meta Pixel for advertising tracking. Google services (Google Analytics, Google Ads) are managed in the EU by Google Ireland Ltd. and the Squarespace service by Squarespace Ireland Ltd. Our contractual partners are therefore located within the EU. Data protection is secured through the use of standard contractual clauses and the EU–US Data Privacy Framework.

10. Use of Cookies We use cookies on our website to improve your user experience and analyze website usage. We use Google Analytics 4 and Squarespace tracking cookies, and we may also use Google Ads and Meta Pixel advertising cookies. Cookies are classified as follows: Necessary: These are required to provide basic website functions and remember your choices (e.g., language settings). Performance and analytics: These measure visitor numbers and traffic sources. They help us improve the functionality of the website. Advertising: These allow us to show you ads that match your interests if you have given your consent. We ask for your consent to use cookies when you visit our site. You can change your cookie settings at any time by clicking the "Cookie Settings" button at the bottom of the page.

11. Data Security We protect the data carefully: Data communication is secured with an SSL connection. Electronic data is protected by a firewall, as well as by user IDs and passwords. We use two-factor authentication (2FA). Data access is restricted only to those individuals who need the data to perform their work duties.

12. Automated Decision-Making We do not engage in automated individual decision-making (GDPR Article 22).

13. Rights of the Data Subject You have several rights regarding your personal data: Right of access: You have the right to know what data we have stored about you. Right to rectification: You have the right to demand the correction of incorrect data or the updating of outdated data. Right to erasure: You have the right to request the deletion of your data. Please note that in some situations we may be obligated to retain data, for example, due to legal requirements. Right to restriction of processing: You have the right to restrict the processing of your data in certain situations. Right to object: You have the right to object to the processing of your data if the processing is based on our legitimate interest. Right to data portability: You have the right to receive your data in a commonly used format and to transfer it to another service provider. Right to withdraw consent: You have the right to withdraw your consent to the processing of your data at any time. Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (in Finland, the Data Protection Ombudsman) if you believe that the processing of your personal data does not comply with the law. You can exercise your rights by sending a written request to the person in charge of registry matters.