We, Island Oil (Holdings) Limited and all our affiliated and/or subsidiary companies (hereinafter “we”) welcome you to our websites and thank you for your interest in our company. We strive to offer you the best possible service; this also includes continuous optimizing of our Internet presence and protection of your personal data. Our server will automatically record data whenever you visit our websites. We do not, however, assign any personal identity to this data, which can, for example, be the domain name and IP address of the requesting computer or the date of access, duration of your visit or the website from which you visit us. This data is generally used for system security purposes as well as to continually optimize our sites and services. Data evaluation is exclusively of a statistical nature. We will store the IP address transmitted by your web browser for a reasonable period of time strictly for the purpose of being able to recognize, limit and rectify any attacks on our websites. Thereafter, we will erase or anonymize the IP address. Any additional personal data, such as your name, address, telephone number or e-mail address, will not be gathered unless you specifically provide them to us for example by email. Your data will only be gathered, processed or used for the purposes as indicated, unless current legal regulations require us to pass them on. We will only use your data for other purposes such as marketing and market research if you have specifically consented to us doing so.

Usage Data

Whenever you visit our websites, for statistical purposes our web server will temporarily store in a log your so-called “usage data” to allow us to improve the quality of our websites. This data set consists of the:

• site from which the file was requested,

• file name,

• date and time of the request,

• data volume transmitted,

• access status (file transmitted, file not found),

• description of the type of web browser used,

• requesting computer’s IP address, shortened in such a way that it can no longer be linked to an identified individual. The above-mentioned log data will only be stored in an anonymized form

Data Transfer to Third Countries

In the case of Google Analytics (USA) the adequate level of data protection results from the company’s corresponding participation in the Privacy Shield Framework according to Article 45 Para. 1 of the General Data Protection Regulation 2016/679 (“the Regulation”).

Use of Cookies

Our websites sometimes use “cookies” to ensure that you have a user-friendly visit. Cookies are small text files which are stored on your end device and can be read. There are different kinds of cookies. “Session cookies” are deleted as soon as you close your browser, while “persistent cookies” are stored for longer than one session. Cookies can contain data which makes it possible to recognize the device being used. In some cases, cookies also contain information on certain settings; this information is not of a personal nature. We use both session and persistent cookies on our websites. These cookies do not contain personal data and we do not combine them with other data so that we can identify you personally. In addition to this, we employ an analysis tool which also uses cookies. You have the option of setting your browser to inform you whenever you receive a cookie, thus making the use of cookies transparent for you. In addition to this, you can delete cookies at any time using the corresponding browser setting to block new cookies. Please note that our websites may not be displayed perfectly and that you may not be able to use certain features if you block cookies.

Google Analytics Analysis Tool

We use Google Analytics, a web analysis service offered by Google Inc. (“Google”) to create pseudonymized usage profiles to facilitate the needs-based design of our websites. Google Analytics uses cookies which are stored on your end device and can be read by us. This allows us to recognize and count returning visitors. The information generated by the cookie concerning your use of this website is generally transmitted to a Google server in the USA, where it is stored. Activation of the IP anonymization function on this website means that Google will, however, truncate your IP address within European Union member states or other states party to the Agreement on the European Economic Area before transferring the data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. For more information about how Google uses data which is generated when using its partners’ websites and apps, visit www.google.de/policies/privacy/partners. You can block installation of cookies by selecting the corresponding setting in your browser software. However, you will not be able to use all the functions of this website to their full extent if you choose to do so.

Data Security

We take seriously our security obligations in respect of your personal data and have implemented technical and organizational measures to ensure that your data is protected against unauthorized access to, alteration or destruction.

Right of Access

Where you have provided us with your personal data you have a right to be given a copy of your personal data subject to certain exceptions. To request a copy of your personal data please contact dpo@island-oil.com.

Right of Rectification or Erasure

If we hold incorrect information about you, you have the right to have the data amended. You also have the right to have any information you have sent to us erased. To request your right to rectification and/or erasure please send your request to dpo@island-oil.com. If you request erasure of your personal data all your data will be erased subject to the following important notice: We are not required to rectify or erase your data where to do so would prevent you from meeting your contractual obligations to us or where we are required to process (including retaining) your personal data for a lawful purpose in accordance with the Regulation.

Complaints

You have the right to lodge a complaint regarding the Company’s processing of personal data, to the Company’s designated Data Protection Officer at the following email: dpo@island-oil.com. In case the Employee complaint is not resolved internally the Employee is entitled to file such complaints with the Cyprus Data Protection Commissioner’s Office.

Concluding Provisions

We reserve the right to update this data protection declaration at any time, either with or without prior notice. By using our website(s) you are declaring your agreement to these data protection regulations.