Lerus Group is committed to protecting the privacy of its customers and the security of their personal information. We collect information clearly and transparently and communicate how we will process the data.

This Policy sets out the following:

• The types of personal data we collect, application forms and other sources from which we collect data;
• For what purpose we use your personal data;
• Security of your personal data;
• What data we exchange and with whom;
• How to contact us.

All personal data is collected and processed in accordance with the data protection laws of Ukraine and the EU.

What personal data we collect:
Personal data is any of your information that allows us to identify you, such as your last name and first name, contact information, your certificates and diplomas data, payment details.
We collect your personal information when: (a) booking a training course through our website, (b) when you send us your application form for crewing purposes, (c) when you fill up delegate registration forms for the purpose of training.

The following are the categories of personal information we collect:

• Your name, surname, DOB and home address and your photo (for physical verification of your personality);
• Your passport numbers and SBK numbers and validity;
• Numbers and validity of your certificates, licenses and endorsements;
• Scanned copies of your passports, licenses and certificates which you send us;
• Your medical fitness data from Medical Examination Forms and/or Medical Self-Declaration forms;
• Vaccination and PCR-test status;
• Your contact details (phone numbers and e-mail addresses)
• Your feedback information, Interest in our training courses and services which will be stated by you on voluntary basis;
• Information received during our communication with you by e-mail, social networks and other communication links;

For what purpose we use your personal data
In most cases, we need your personal data in order to process your training booking, assess your professional level and suitability for crewing purpose, share this data with third-parties (Crewing Companies and Shipowners, Training and Certification Organisations (OPITO, GWO, DNV, Nautical Institute, etc.)
Please note, if you apply for the training course then your personal data will only be used for the training and certification purpose and will not be shared with Crewing Companies and Shipowners, unless you will make such request to the Lerus Crew Management.

How long we keep your data
We will not store your data for longer than is necessary for the purpose for which it was collected and used. We will also consider minimizing and anonymizing your personal information so that it is no longer associated with you and cannot identify you.
Most of data received from you for the training purpose, generated by you during training process will be stored for a period up to five years. This period may vary depending on the validity of the training stipulated by the controlling organization. Retention period is set for the purpose of external and internal auditing, authenticity verification and ability to restore certification data on your request (for example if you have lost your certificate).
Data collected from the seafarers for the crewing purpose will be stored for a period of up to 5 years.

Security of your personal data
The security and confidentiality of your personal data are our top priorities. Taking into account the nature of your personal data, we apply appropriate technical and organizational measures in accordance with applicable law and current technologies available, to ensure an adequate level of security of your data and to prevent any accidental or illegal destruction, loss, alteration, disclosure, breach or unauthorized access to this data.

All payment details are transferred and stored in accordance with the Payment Card Industry Data Security Standards (PCI DSS).

We may disclose your information to trusted third parties for the purpose set forth in this Confidentiality Policy. To protect your personal data, we require that all such third parties apply appropriate technical and operational data security measures.

If Lerus Group suffers an infringement related to your personal data and such infringement poses a high risk to your rights, we will notify you of such infringement, its likely consequences and the steps we take to protect you and others in accordance with the requirements of the GDPR.

Sharing and transfer of personal data
Your personal data will be shared to Training and Certification Bodies/Organizations (e.g. OPITO, GWO, DNV, Nautical Institute, etc.) to which relates the training you have attended at the Lerus Training Centre. This is always done according to the Standard Body requirements in order to enter your data into the corresponding database for the verification purpose.
In case if you are a seafarer looking for a job and you have shared your CV to Lerus Crew Management, then your personal data may be shared to our Contracted Shipowners in order to verify your suitability for the position you have applied to. You will be always informed directly by one of our Specialists to confirm that you agree to share your information with the corresponding Shipowner. This will be done by phone or e-mail.

Contact us
If you have additional questions about this policy or about ways we process your personal information that are not covered here, please contact us through the e-mail addresses indicated on our website at CONTACTS section.