Privacy Policy
Information on the protection of your personal data
1. Privacy at a Glance
General Information
The protection of your personal data is important to us. The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
2. Controller
OCEANSKIN - Eric Nicolas Nieswiodek
Dreischeibenhaus 1
40211 Düsseldorf
Germany
Phone: +49 0211 5421185-0
Email: contact@oceanskin-marine.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. General Information on the Legal Bases of Data Processing
Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a GDPR serves as the legal basis. When processing personal data for the performance of a contract or for pre-contractual measures carried out at the request of the data subject, Art. 6 (1) lit. b GDPR serves as the legal basis. Where processing is necessary for the purposes of legitimate interests, Art. 6 (1) lit. f GDPR serves as the legal basis. The specific legitimate interest pursued is stated for each processing operation in this policy.
4. Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected.
5. Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of data protection violations, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for data protection in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de - Website: nrw.de
6. Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format.
7. Access, Rectification, Erasure, Restriction and Objection
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients and the purpose of the data processing, and, where applicable, a right to rectification or erasure of this data.
In addition, pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, in particular where you contest the accuracy of the data, where the processing is unlawful, where we no longer need the data for the purposes of processing but you require them for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Art. 21(1) GDPR.
Right to object pursuant to Art. 21 GDPR: Where we process your personal data on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves for the establishment, exercise or defence of legal claims.
8. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change from "http://" to "https://" in the address line of your browser and by the lock symbol in your browser bar.
9. Data Collection When Visiting This Website
Server log files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: Browser type and browser version Operating system used Referrer URL Host name of the accessing computer Time of the server request IP address This data is not merged with other data sources. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in ensuring the secure and stable operation of the website.
10. Contacting Us by Email
If you contact us by email, your details, including the contact data you provide, will be stored and processed solely for the purpose of handling your inquiry.
Where your inquiry aims at the conclusion or performance of a contract with us, processing is carried out on the basis of Art. 6 (1) lit. b GDPR (pre-contractual measures taken at your request or performance of a contract).
For other general inquiries unrelated to a specific contractual relationship, processing is carried out on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the proper handling of business inquiries and in maintaining business communication with prospective customers and business partners.
10a. Contact via WhatsApp Business
We offer you the voluntary option of contacting us through WhatsApp Business. The WhatsApp link provided on this website is a simple external hyperlink. Merely visiting our website does not establish a connection to WhatsApp or Meta. You are redirected to WhatsApp only when you actively select the link.
The provider for users in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. When you use WhatsApp, WhatsApp or Meta may process your telephone number, WhatsApp profile, message content, communication data and technical metadata such as time, device information and IP address. WhatsApp’s privacy policy also applies and is available at whatsapp.com/legal/privacy-policy-eea.
We process the information you provide to handle and respond to your inquiry. Where your inquiry concerns entering into or performing a contract, processing is based on Art. 6 (1) lit. b GDPR. Other business inquiries are processed under Art. 6 (1) lit. f GDPR; our legitimate interest is efficient and user-friendly communication. We do not use WhatsApp for promotional communication without any consent required by law.
Processing in third countries, particularly the United States, cannot be excluded. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework; EU Commission standard contractual clauses may also be used. We retain messages only for as long as required to handle your inquiry or to comply with statutory retention obligations.
Using WhatsApp is optional. You may instead contact us by email, through the contact form, or by telephone at +49 211 5421185-0.
11. Contact Form, Appointment Booking and Service Providers Used
Contact form
If you contact us via the contact form provided on the website, the personal data entered there (e.g. name, email address, telephone number, message) will be processed in order to handle and respond to your inquiry. Where your inquiry serves to initiate a contract (e.g. a request for a quote), processing is carried out on the basis of Art. 6 (1) lit. b GDPR (pre-contractual measures taken at your request). For other general inquiries, processing is carried out on the basis of Art. 6 (1) lit. f GDPR; our legitimate interest lies in the effective handling of and response to business inquiries.
Delivery of The Yacht Surface Field Guide
If you optionally request The Yacht Surface Field Guide by email, we process your name, business email address, company or yacht and role to send the requested guide once and assign the request. Processing is based on Art. 6 (1) lit. f GDPR; our legitimate interest is the user-friendly provision of professional information and the handling of business inquiries. You are not automatically subscribed to a newsletter. Data required for delivery is transmitted to Resend and retained only for as long as necessary to handle the request or comply with statutory obligations.
Appointment booking for trade fairs and events
When booking an appointment for trade fairs and events, the data entered in the booking form (name, email address, telephone number, company, yacht model, language, topic and selected appointment) is processed in order to organize, confirm and carry out the appointment you have requested. The legal basis is Art. 6 (1) lit. b GDPR, as the processing is carried out for pre-contractual measures taken at your request.
Storage and email dispatch (Resend)
The data transmitted via the forms is stored in the database of our hosting and backend service provider (Lovable Cloud). For sending notification and confirmation emails, we use the email service provider Resend (Resend Inc., USA) as a data processor; the data required for dispatch (in particular the email address and content of the message) is transmitted to Resend. A data processing agreement is in place with Resend. The transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework or the standard contractual clauses of the EU Commission. Processing by Resend takes place within the framework of the legal bases stated above for the respective form processing.
Calendar organization (Google Calendar)
For confirmed appointment bookings, the data required for appointment organization (name, contact details, appointment time, topic) is transmitted to Google Calendar (Google Ireland Limited or Google LLC, USA). The legal basis is Art. 6 (1) lit. b GDPR (organization and performance of the appointment you have requested). The transfer to the USA takes place on the basis of the EU-U.S. Data Privacy Framework or the standard contractual clauses of the EU Commission.
The data transmitted via the forms is only stored for as long as is necessary to process the inquiry or carry out the appointment, or as required by statutory retention obligations.
12. Cookies and Consent Management
This website uses cookies and comparable storage technologies. These are small text files or entries in the local storage of your device that enable basic functions of the website (e.g. your language selection and your cookie settings).
A cookie consent tool is used to manage consent to the use of cookies and comparable technologies. It stores the settings made by the user in order to take them into account on future visits to the website.
The legal basis for the use of technically necessary cookies and storage is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and functional operation of the website.
No cookies or comparable technologies requiring consent for analytics or marketing purposes are currently used. Should such technologies be used in the future, this will take place exclusively on the basis of your prior consent in accordance with Art. 6 (1) lit. a GDPR, which you can grant via the consent tool.
Consent can be revoked or adjusted at any time via the cookie settings on the website. The consent data is stored for a period of up to 12 months.
13. Hosting and Data Processing
Our website is provided using the Lovable platform (Lovable Labs Inc.). The personal data collected on this website is processed on the servers of Lovable or its infrastructure partners (such as Supabase, Vercel or AWS).
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure, fast and efficient provision of our online offering by a specialized technology service provider.
We have concluded a data processing agreement with the provider.
As Lovable Labs Inc. is a company based in the USA, the transfer of personal data to the USA is legally safeguarded on the basis of the EU-U.S. Data Privacy Framework (DPF) and, complementarily, the standard contractual clauses of the EU Commission.
14. External Services and Fonts
No analytics, tracking or marketing services requiring more extensive processing of personal data are currently used. In particular, no cookies or comparable technologies are set for analytics or marketing purposes.
The fonts used on this website are hosted locally on our server (self-hosting). When the website is accessed, no connections are established with external font providers (e.g. Google Fonts); your IP address is not transmitted to such providers.
Links to our profiles on social networks (Instagram, LinkedIn) and to WhatsApp are simple hyperlinks only. Data is only transmitted to the respective provider when you actively select them; the links do not load provider content when you merely visit our website. No social media plugins or tracking pixels are embedded.
If external services are used in the future, this will take place exclusively on the basis of corresponding consent or a legal permission.
15. Storage Duration
Personal data is only stored for as long as is necessary to achieve the respective purpose or as required by statutory retention obligations.
16. Automated Decisions
Automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
17. Third-Country Transfer
Data transfer to third countries
Through the use of the services mentioned above (Lovable Labs Inc., Resend Inc. and Google LLC, each based in the USA), personal data is transferred to the USA. To ensure an adequate level of data protection, the transfer takes place on the basis of the EU-U.S. Data Privacy Framework (DPF) or using the standard contractual clauses of the EU Commission. This ensures that the processing of your data complies with European data protection standards.
18. Use of AI Systems and Labeling
Parts of the image content on this website have been generated or edited using artificial intelligence systems. In accordance with Art. 50 of Regulation (EU) 2024/1689 (AI Act), this content is visibly labeled directly on the image and additionally marked as synthetically generated in machine-readable metadata. Details can be found in the "AI Transparency" section of our Legal Notice (Impressum).
No personal data of our website visitors is transmitted to AI providers for the generation of this content. The persons depicted are not identifiable and do not represent real customers or clients.
19. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy to reflect changed legal requirements or changes to our offering.
Last updated: October 2026