Privacy Policy
This privacy policy was last updated on 03/10/2025.
This Privacy Policy will only be valid for the personal data obtained in the website, not being applicable for the information collected by third parties in other websites, even if they are directly linked from this site.
ERSHIP S.A.U. has adapted this website to comply with the requirements of Organic Law 3/2018 of 5th December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), as well as with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE).
1. Who is responsible for your data?
> Company name: ERSHIP S.A.U. (hereinafter ERSHIP).
> Tax ID Code (CIF)/ Number(NIF): A-08015364
> E-mail: comercial@ership.com Telephone: +34 914 263 400
> Registered Office: C/ Lagasca, 88, 28001 Madrid (Spain)
> Registered in the Mercantile Registry of Madrid: Volume 8070, page 145, section 8, page M-130710.
> Joint controllers: Companies belonging to the ERSHIP GROUP included in the Joint Responibility Agreement signed between Ership, S.A.U., Alvargonzález, S.A., Ership Cádiz, S.A., Evaristo A. Casariego, S.A., Beship Brokers, S.L., Terminal Multiusos do Beato – Operações Portuárias, S.A., Manport – Gestão e Manutenção, Unipessoal Lda., Portship, Unipessoal Lda., Ership Internacional, S.A, Ership Portugal, S.A., Marship Corretagem-Maritima, S.A., J.Ronco y Cia, S.L., Agencia Marítima Portillo, S.L., Almacenes Marítimos del Sur, S.L., Agencia Marítima Portillo Cádiz, S.L., Almacenes Marítimos del Sur Cádiz, S.L., Estibadora Gaditana, A.I.E., Almacenes y Depósitos Portuarios, S.L., Agencia Marítima Portillo Sevilla, S.L., Gandía Servicios Portuarios, S.L., Vership Tanker Chartering Spain, S.L., Roner Logistics, S.L.. These companies have unified management structure and identical the objectives and means of processing, and are jointly liable under personal data protection regulations.
> Data Protection Delegate: dp-datos@ership.com
2. How do we obtain your personal data?
The personal data we process comes from
> The interested party, by telephone, e-mail or via this website.
> Complaints Channel. More information in the Complaints Channel Regulations
> Cookies as established in the cookies policy.
3. For what purpose do we process your personal data?
At ERSHIP, we process the information provided by data subjects for the following purposes:
> Contact– To get in touch regarding the offer and provision of our services and to respond to any questions or queries submitted.
> C.V.– Management of CV’s received for empleoyment applications.
> Complaints Channel– To prevent and detect any irregular, unlawful, or criminal conduct.
Other purposes for processing your personal data include:
> To ensure compliance with the terms of use and applicable law, or to support and improve the services offered by this website. This may include the development of tools and algorithms that help the website ensure the confidentiality of collected personal data.
> Collection of other non-identifying data obtained through certain cookies downloaded to the user’s device while browsing this website. See the Cookies Policy.
> To manage social media accounts where ERSHIP has a presence. The processing of data from individuals who follow ERSHIP’s official social media pages is governed by this section, as well as the applicable terms of use, privacy policies, and access regulations of each social network, which the user has previously accepted. ERSHIP will process this data to properly manage its social media presence, inform followers of our activities or services, and for any other purpose permitted by the social network regulations.
In no case do we use social media follower profiles to send individualised advertising. ERSHIP does not sell, rent, or transfer personal data that could identify the user.
Accuracy and veracity of the data
As a user, you are solely responsible for the truthfulness and accuracy of the data you provide, releasing ERSHIP from any liability in this regard. The user guarantees and is responsible, in any case, for the accuracy, currency, and authenticity of the personal data provided, undertaking to keep it properly updated.
Acceptance and consent
The user declares that they have been informed of the conditions regarding personal data protection and accepts and consents to the processing of their data by ERSHIP in the manner and for the purposes indicated in this Privacy Policy.
Commercial mails
In accordance with the LSSICE, ERSHIP does not engage in SPAM practices and does not send unsolicited commercial emails. Consequently, in each form available on the website, the user has the option to give express consent to receive any communication, which will be properly identified, regardless of any commercial information requested at a particular time.
4. How long will we keep your data?
> Clients and suppliers: For the duration of the business relationship or as long as it is considered that such a relationship can be established or re-established.
> Curriculum vitae: Eighteen (18) months if the employment or professional relationship is not formalised.
> Whistleblowing Channel: Reports received are retained to provide evidence of the operation of the crime prevention model and to monitor them if necessary. Reports that have not been acted upon are retained in anonymised form.
We also retain your data to comply with applicable legal requirements, prevent unlawful actions, resolve disputes, and for other actions permitted by law, i.e., for the legally required periods. Once the processing of your data is no longer necessary, we will delete and/or block it in accordance with our data retention and deletion policy and the legal prescription periods under current regulations. After these periods, your data will be destroyed.
5. What is the legal basis for processing your data?
In general terms, the legal basis for processing personal data provided through contact forms is your consent. The lawfulness of processing may also be based on the contractual or pre-contractual relationship between the parties, or on ERSHIP’s legitimate interest, in accordance with applicable legislation.
Consent given for processing may be revoked at any time by notifying ERSHIP under the terms established in this Policy for exercising your rights.
6. Browsing
While browsing the website, non-identifiable data may be collected, which can include IP addresses, approximate geographic location, a record of how our services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes information about browsing habits collected through third-party services as detailed in the Cookies section.
We may use this information to analyse trends, administer the site, track users’ movements around the site, and collect demographic information about our overall user base.
7. Data Secrecy and Security
ERSHIP is committed to using and processing the data obtained while respecting its confidentiality and in accordance with the purposes for which it was collected. We comply with our obligation to safeguard it and implement all measures to prevent alteration, loss, processing, or unauthorised access, in accordance with current data protection legislation.
ERSHIP will ensure that any person authorised by the company to process personal data (including employees and collaborators) is subject to confidentiality obligations.
ERSHIP cannot guarantee the absolute security of the Internet and therefore cannot ensure that data will not be accessed fraudulently by third parties.
In the event of a security breach, ERSHIP will notify the Spanish Data Protection Agency (AEPD) and affected users, when possible, without undue delay and providing relevant information regarding the breach.
8. To which recipients will your data be communicated?
As a general rule, personal data is not shared with third parties nor transferred internationally, except where legally required.
The ERSHIP website may provide access to other websites, and by clicking such links, you will be redirected to another page for which ERSHIP is not responsible. You should be aware that the owners of these external websites may collect, use, or transfer your personal data under different conditions and terms. We recommend reviewing the privacy policies, terms of use, or cookie usage of those sites when interacting with them.
ERSHIP may also contract third-party processors in accordance with applicable law, requiring them to provide adequate guarantees for data protection. These processing contracts are strictly necessary for the provision of our services, and providers are selected based on compliance with the rights safeguarded on this website.
These providers will only have access to personal information necessary for performing their functions and may not use it for other purposes. They must also process personal data in accordance with this Privacy Policy and applicable data protection legislation.
9. What are your rights when you provide us with your data?
You can exercise, free of charge, the rights granted by the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on the protection of personal data and guarantee of digital rights.
Any person has the right to revoke consent, request access to personal data concerning them, request rectification or deletion, request restriction of processing, object to processing (if there is public or legitimate interest), data portability, not to be subject to automated individual decisions, and the right to information.
To ensure the exercise of your rights, the ERSHIP GROUP has designated a Data Protection Officer (DPO). If you wish to claim any of the rights above, believe your personal information has been used inconsistently with this policy or your specified preferences, or have questions regarding our privacy policy, you may contact dp-datos@ership.com. Please include a copy of your ID, the request specifying your right, and your contact details for notifications.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) via https://www.aepd.es/en if you consider your rights have not been fulfilled.
10. Privacy policy for events
The personal data processed are those provided by attendees when completing the event registration form or previously processed by ERSHIP Group in the context of professional and/or commercial relationships. Your image and/or voice may also appear in photographs and/or videos taken during the event.
Personal information provided will be processed for the purposes of sending invitations, organising and managing the event, controlling access, and the potential subsequent use of images and videos captured. The legal basis for processing is ERSHIP Group’s legitimate interest in properly managing and conducting the event and the consent provided when confirming attendance, which includes the granting of image rights during the event.
You have the right to access your personal data being processed, request correction of inaccurate data, request deletion when the data is no longer necessary for the purposes collected, and exercise rights of objection, restriction, and portability. You also have the right to withdraw consent at any time, though such withdrawal does not affect the lawfulness of processing prior to withdrawal.
You may exercise the right to object to image capture or withdraw consent during the event by contacting the organiser to request that your image not be recorded. If you exercise your right to object or withdraw consent after the event, any images in which you appear will be destroyed immediately.
You may exercise your rughts via dp-datos@ership.com or file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you consider your rights have not been respected.
