ABP Marinas Privacy Notice

Purpose

We value your privacy and take our obligations under privacy and data protection law very seriously.    This Privacy Notice gives you information about how we process your Personal Information when you visit the Website (defined below) or otherwise contact ABP in relation to marina services provided by ABP at the following marinas:

  • Town Quay Marina, port of Southampton;

  • Ipswich Haven Marina, port of Ipswich;

  • Lowestoft Haven Marina, port of Lowestoft;

  • Fleetwood Haven Marina, port of Fleetwood.

This Privacy Notice does not cover the links within linking to other websites.  We encourage you to read the privacy statements on the other websites you visit.

In this Privacy Notice:

More Information

For more details about how ABP collects and uses Personal Information, including the Personal Information we collect when you visit our marinas, please see our full Privacy Policy on www.abports.co.uk

Who We Are

When we say “we”, “our”, “ABP” we mean Associated British Ports who is the “data controller” for the Personal Information collected and used in connection with the provision of marina services.  This means we are responsible for deciding how we can use your Personal Information.

What is Personal Information

Personal information means information about a living person by which that person can be identified either directly or indirectly.

  • Sensitive personal information is a special category of personal information which is particularly sensitive and which requires higher levels of protection, such as information about a person's health or sexual orientation.

What Personal Information We Collect About You

We collect the following information about you:

  • if you visit our Website, technical information such as your internet protocol address used to connect your computer to the Website, browser type and version, time zone setting, browser plug in types and versions, operating systems and platforms;

  • if you book or enquire about booking a berth at a marina and any related services in relation to a marina we collect information in order to book your vessel and any related services,  including vessel registration details, name,  email address, billing address, telephone / mobile numbers, debit or credit card details; vehicle registration details where you are booking car parking; and payment details;

  • your preferences in relation to receiving marketing and communications data from us;

  • we use technology to track the patterns of behaviour of visitors to our Websites and statistical information about the number of visitors to our Website.  This helps us to provide you with a good experience when you browse our Internet Services and also allows us to improve our Internet Services. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy; and

  • if you voluntarily complete any online form on our Website or any survey we collect the information requested by that form (e.g. email address, name, address, telephone number, location).

Our Websites are not intended for children and we do not knowingly collect data relating to children via our Websites.

What Sensitive Personal Information We Collect About You

We may collect Sensitive Personal Information from you in the course of our business depending on the context of our particular relationship with you.  In particular:

ABP’s premises / port estate

We may collect Sensitive Personal Information from you in the course of our business depending on the context of our particular relationship with you.  In particular we may collect information relating to your disability status.

How We Collect Personal Information

We collect Personal Information from you when you interact with our Website or contact us by telephone, email, post or in person.

Third Party Personal Information

In the course of us providing goods or services to you, you may provide us with Personal Information relating to third parties.  For example, information about additional individuals who may be accessing your vessel at the marina.

We will use this Personal Information in accordance with this Privacy Notice.  If you are providing Personal Information to us relating to a third party, you confirm that you have the consent of the third party to share such Personal Information with us and that you have made the Personal Information in this Privacy Notice available to the third party.

How We Use Your Personal Information

Your personal information may be used by us, our employees, service providers, and disclosed to third parties for the following purposes.  For each of these purposes, we have set out the legal basis on which we use your Personal Information.

Purpose

Legal Basis

To communicate with you and other individuals about our services.

The legal basis will fall into one of the following four categories, depending on the communication and the purpose for which it was sent:
- our legitimate business interests in order for us to manage our relationship with you;
- necessary for the performance of a contract between you and us; and/or
- consent.

To carry out our obligations arising from any contracts entered into between you and us, and to provide you with our services.

Depending on the circumstances:
- necessary for the performance of our contractual obligations between you and us; or
- our legitimate business interests to comply with the terms of a contract we have in place with you.
Where this involves the processing of sensitive personal information such as your disability status, we process such information with your explicit consent.

To improve our products, services and our staff training.

This processing is necessary for our legitimate business interests in order for us to manage our relationship with you and to improve/develop our products, services and staff training.

To manage any service or quality related issues, complaints, feedback and queries.

Depending on the context, this processing could be necessary for:
- the performance of our contractual obligations between you and us;
- us to comply with our legal and regulatory obligations; and/or
- our legitimate business interests in order for us to manage our relationship with you and ensure our services are fit for purpose and meet the needs of our organisation.

To send you direct marketing communications about our services, including newsletters.

Depending on the circumstances:
- our legitimate business interests to contact you about the services we offer and relevant industry news; or
- consent – in some circumstances, we may rely on your consent to send direct marketing communications to you.

To carry out satisfaction surveys and analysis.

The processing is carried out for our legitimate business interests because it enables us to develop and improve our services offered to you.

To prevent and detect fraud, financial crime and anti-money laundering.

Depending on the circumstances:
- the processing is necessary for us to comply with our legal and regulatory obligations; or
- the processing is carried out for our legitimate business interests in order to conduct and manage our business.

To comply with any legal or regulatory obligations (including in connection with a court order).

The processing is necessary for compliance with a legal obligation to which we are subject.

To enforce or apply the contracts concerning you (including contracts between you and us).

Depending on the circumstances:
- the processing is carried out for our legitimate business interests in order to conduct and manage our business; or
- in connection with legal proceedings (i.e. the establishment, exercise or defence of legal claims).

We may be required to obtain your personal information to comply with our legal requirements, to enable us to fulfil the terms of any contract that we have with or in preparation of us entering into a contract with you. For example, if you do not provide the relevant personal information to us such as your name and postal address, we will not be able to provide the relevant product to you or another person (as may be requested by you).

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.  We may process your personal information without your knowledge or consent, where this is required or permitted by law.

How Long We Keep Your Personal Information

We will only retain your Personal Information for as long as is necessary to fulfil the purposes we collected it for.  The length of time we hold on to your personal information will vary according to what that information is and the reason for which it is being processed, including for the purposes of satisfying any legal, accounting or reporting requirements or defending any potential claim in accordance with ABP’s Record Retention Policy.

When it is no longer necessary to retain your Personal Information, we will delete or anonymise it.

Who We Share Your Personal Information With

We share your Personal Information with:

  • our third-party service providers and contractors that we may use in connection with our business (for example, HavenStar who provide marina software services and issue invoices on behalf of ABP)

  • our legal and other professional advisors, our insurers and insurance brokers,

  • our suppliers and contractors and our IT service providers;

  • third parties if we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation or instructions of a regulatory body (including in connection with a court order), or in order to enforce or apply the terms of any agreements we have with or otherwise concerning you (including agreements between you and us) or to protect our rights, property or safety of our clients, employees or other third parties; and

  • third parties involved in any matter relating to you such as courts, law enforcement agencies and regulatory bodies.

How We Protect Your Personal Information

We have put in place appropriate security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a need to know.  They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

We have also put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Transferring Your Personal Information Out of the EEA

Sometimes it is necessary for us to process or share your Personal Information outside of the European Economic Area (EEA), e.g:

  • With our service providers located outside the EEA (i.e. our IT suppliers);

  • If you are based outside the EEA;

  • If any ABP personnel access the information remotely while they are travelling outside the EEA.

When we transfer Personal Information outside of the EEA, we will implement appropriate and suitable safeguards to ensure that such personal information will be protected as required by applicable data protection law (e.g. contractual protections).

For further information as to the safeguards we implement please contact our Group Data Protection & Compliance Manager as detailed in the section "How to contact us".

Your Rights With Respect To Your Personal Information

You have certain rights with respect to your personal information.  The rights may only apply in certain circumstances and are subject to certain exemptions.  Please see the table below for a summary of your rights.

Summary of your rights

Right of access to your personal information

You have the right to receive a copy of your personal information that we hold about you and information about how we use it, subject to certain exemptions.
Any access request is free of charge. We may require further information in order to respond to your request (for instance, evidence of your identity and information to enable us to locate the specific Personal Information you require).

Right to rectify your personal information

You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.

Right to erasure of your personal information

You have the right to ask that your personal information be deleted in certain circumstances.  For example:
(i)            where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used;
(ii)           if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information;
(iii)          if you object to the use of your personal information (as set out below);
(iv)          if we have used your personal information unlawfully; or
(v)           if your personal information needs to be erased to comply with a legal obligation.

Right to restrict the use of your personal information

You have the right to suspend our use of your personal information in certain circumstances.  For example:
(i)            where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information;
(ii)           the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead;
(iii)          we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or
(iv)          you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.

Right to data portability

You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.

Right to object to the use of your personal information

You have the right to object to the use of your personal information in certain circumstances. For example:
(i)            where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party); and
(ii)           if you object to the use of your personal information for direct marketing purposes.

Right to withdraw consent

You have the right to withdraw your consent at any time where we rely on consent to use your personal information.

Right to complain to the relevant data protection authority

You have the right to complain to the relevant data protection authority, which in the case of ABP, the Information Commissioner's Office, where you think we have not used your personal information in accordance with data protection law.

How to Contact Us

If you have any comments or questions about how we handle your Personal Information or this Privacy Notice or to exercise any of your rights, please contact the Group Data Protection & Compliance Manager at:

  • [email protected],

  • 07398671462

  • or by post FAO Group Data Protection & Compliance Manager, Associated British Ports, 25 Bedford Street, London WC2E 9ES.

How to Contact Us

We will amend this Privacy Notice from time to time to ensure it remains up to date.  Any changes we make to this Privacy Notice in the future will be posted on this page and, where appropriate, we will give you reasonable notice of any changes.  Please visit our Websites to keep up to date with any changes. The current version will always be posted on our Websites.   This Privacy Notice was first published on 25th May 2018, and was last updated on 4th April 2023.