Privacy Policy

This website is operated by SCTOS (Smart Chemical Tanker Operational Solutions), based in Rotterdam, the Netherlands. We are the controller of the personal data described in this policy. For any question about it, or to exercise your rights, write to operations@sctos.com.

When you use the contact form we receive your name, email address, company name (if you give one), your message and the type of enquiry you selected. We use them only to answer you and, if you ask us to, to prepare a quotation or carry out work for you.

The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to business enquiries (Article 6(1)(f)). Enquiries are stored in our website database for no longer than 12 months and are then deleted automatically. If an enquiry leads to an agreement, the related correspondence becomes part of our business records and is kept for as long as Dutch law requires, generally seven years.

The same applies to emails you send us directly. Our replies are sent through an email delivery service so that they reach you reliably.

To protect the contact form against spam and abuse, we limit how many requests can come from one connection. For this we do not store your IP address: we keep a one-way coded value derived from it, which cannot be turned back into the address, together with a request counter. These records are deleted automatically once they have not been used for a day. The legal basis is our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).

Our hosting provider also processes connection data, such as IP addresses, to deliver the site and protect it against attacks.

We use Google Analytics 4 to understand how the site is used, but only if you choose “Accept” in the cookie banner. Until then no analytics script is loaded and no analytics cookie is set. If you accept, Google sets the cookies _ga and _ga_<ID>, which last up to two years. The legal basis is your consent (Article 6(1)(a) GDPR). You can change your choice at any time with “Cookie settings” at the bottom of every page.

Your choice itself is remembered in your browser’s local storage, not in a cookie, and never leaves your device.

Our hosting provider also counts visits with Cloudflare Web Analytics, which uses no cookies and does not identify individual visitors. The site sets no other cookies, and its fonts and images are served from our own domain.

We use these service providers:

• Cloudflare, Inc.: website hosting, the database holding enquiries, security, cookieless visit statistics, and routing of incoming email.
• Google: our email inbox, and Google Analytics if you consent to it.
• Brevo (Sendinblue SAS, France): delivery of the emails we send.

Cloudflare and Google may process data outside the European Economic Area, including in the United States. Such transfers are covered by the EU-U.S. Data Privacy Framework or by the European Commission’s standard contractual clauses. We do not sell personal data or share it with anyone else, unless the law requires us to.

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect processing that took place before. To exercise any of these rights, write to operations@sctos.com. We reply within one month.

You also have the right to complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

We update this policy when the way we handle personal data changes. The date at the top shows when it last changed.