Privacy Policy

1. Who we are

This privacy policy explains how Marine Weather Intelligence processes personal data on its website marine-weather.com and in its applications MWI Yachts, MWI Shipping and MWI Offshore Energies (web, mobile and API).

We have not appointed a Data Protection Officer, as we are not required to. Requests sent to gdpr@marine-weather.com are handled by our GDPR referent.

2. Our role: controller or processor

We are controller for the data we process for our own purposes: website visitors, prospects and business contacts, customer relationship and billing, user accounts and security of our applications, individual customers who contract directly with us, and candidates.

We are processor for the operational data that a business customer (a shipping company, an offshore operator, a yacht management company) and its users put in our applications. In that case the business customer is the controller: it decides why and how its data is used, and our processing is governed by our contract and data processing agreement with it. If you are a user or crew member of such a customer, please contact your company first for your rights; we will help it answer.

3. Website, contact forms and newsletter

Data: first name, last name, email, company and job title, your message; for analytics, pages visited, session duration, traffic source, browser and system, anonymised IP address.

Purposes and legal basis: answering your contact and demo requests (pre-contractual measures and legitimate interest); sending newsletters and marketing (your consent, which you can withdraw at any time through the link in each email); audience measurement (your consent through the cookie banner).

Tools: HubSpot (CRM and marketing), Google Analytics (audience measurement).

4. Customers and prospects

Data: professional contact details (business customers) or personal contact details (individual customers), contract and billing information, history of exchanges.

Purposes and legal basis: managing the contract, the commercial relationship, support and invoicing (performance of the contract); prospecting business contacts (legitimate interest; you can object at any time); accounting and tax obligations (legal obligation).

Payment: individual customers pay through a secure payment provider (Stripe); no bank card data is processed or stored by us.

5. Our applications (MWI Yachts, MWI Shipping, MWI Offshore Energies)

5.1 User accounts and security (we are controller)

Data: name, professional email, company, role, login identifiers, connection and security logs (date, time, IP address, actions), support requests.

Purposes and legal basis: creating and managing accounts, authenticating users, securing the service, detecting and investigating incidents, providing support (performance of the contract with the customer, and legitimate interest in securing our services).

5.2 Individual customers (we are controller)

When you contract directly with us, for example as a yacht owner or skipper, we process the data needed to provide the routing service:

Data: vessel characteristics, departure, destination and voyage plans, vessel positions transmitted for the routing, routing requests and results, exchanges with our routers, and questions asked to the in-app assistant.

Purpose and legal basis: providing the weather routing and forecasts you have ordered, and assisting you during your voyage (performance of the contract). Positions are used only for your routing and the support you receive, never for any other purpose.

5.3 Business customers (we are processor)

For business customers, the vessel, voyage and operational data, and the personal data of their users and crews, are processed on their behalf only, as described in section 2.

5.4 In-app assistant

Our applications include an AI assistant. The questions you ask and the context needed to answer them are sent to our AI provider, Anthropic PBC (United States), which processes them on our behalf only, under a data processing agreement and the European Commission's Standard Contractual Clauses. Anthropic does not use them to train its models and deletes them within 30 days, unless the law requires otherwise or the content is flagged for misuse.

6. Candidates

Data: CV, cover letter, contact details, interview notes.

Purpose and legal basis: managing our recruitment (pre-contractual measures). If we do not hire you, we keep your application for 2 years to contact you for future positions, unless you object.

7. Who receives your data

Your data is accessible only to the staff who need it. We use service providers (processors) that act on our instructions and under contract:

We do not sell personal data. We disclose it to authorities only when required by law.

8. Transfers outside the European Union

Data of our applications is hosted in France. Some providers above are based in the United States. Transfers rely on the EU-US Data Privacy Framework when the provider is certified, or on the European Commission's Standard Contractual Clauses.

9. How long we keep your data

Backups are overwritten on their own cycle.

10. Security

We protect personal data with measures adapted to the risks: encryption in transit and at rest, personal accounts with multi-factor authentication for our staff, access limited to those who need it, hosting in France, backups, and a security programme following ISO/IEC 27001. More information: marine-weather.com/security

11. Your rights

Under the GDPR you can ask for access to your data, its rectification or erasure, the restriction of its processing, its portability, and object to its processing, in particular to marketing. Where processing is based on your consent, you can withdraw it at any time. Write to gdpr@marine-weather.com; we answer within one month. You can also lodge a complaint with the CNIL (www.cnil.fr) or with the authority of your country.

12. Cookies

Strictly necessary cookies are used for the operation and security of the website and applications. Analytics (Google Analytics) and marketing (HubSpot) cookies are used only with your consent, given or refused through the banner shown on your first visit, which you can change at any time. Details in our Cookie Policy.

13. Changes

We update this policy when our processing changes. The date of the current version is shown at the top of the page. In case of a significant change, we inform customers and subscribers by email.

Related documents

This Privacy Policy should be read alongside our other legal documents:

• Terms of Use
• General Terms
• Cookie Policy
• Security