Last Updated: 05/26/2023
Welcome to the Dockspot US, LLC’s Privacy Notice.
Dockspot US, LLC and its affiliates and subsidiary entities (collectively referred to as “Dockspot”, “we”, “us” or “our” in this Notice) respect your privacy and are committed to protecting your Personal Data.
This Notice aims to give you information on how Dockspot collects and processes your Personal Data. It is important that you read this Notice together with any other Notice or fair processing notice we may provide on specific occasions when we are collecting or processing Personal Data about you so that you are fully aware of how and why we are using your data. This Notice supplements the other notices and is not intended to override them.
Our services are not intended for children and we do not knowingly collect data relating to children.
This Notice does not cover the processing of your Personal Data by third parties you engage with on our website. This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the Notice of every website you visit.
Dockspot is the data controller (or equivalent term as defined under applicable data protection law, such as "business") and is responsible for your Personal Data.
We only collect and use Personal Data that we have a legal basis for processing under applicable law. The type of Personal Data we collect about you depends on how you interact with us. Personal Data, sometimes known as "Personal Information," means any information that relates an identified or identifiable individual. It does not include data that has been altered to remove any linkage to an identifiable individual such that it cannot be reasonably re-identified ("Anonymized Data").
We may at times process personal data that has been combined with the personal data of others such that your identity is no longer tied to the data ("Aggregated Data") such as statistical or demographic data for any purpose. For example, we may aggregate Usage Data to calculate the percentage of users accessing a specific website feature. Where we process Aggregated Data, we ensure that the data is used only for those purposes consistent with the purpose that the Personal Data was originally collected.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
If you fail to provide Personal Data. Where we need to collect Personal Data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We use different methods to collect data from and about you including thr corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:
We may receive Personal Data about you from various third parties as set out below:
We have set out below a description of all the ways we plan to use your Personal Data.
To register you as a new customer, we may collect:
To process and deliver your order, including to (a) manage payments, fees, and charges, and (b) to collect and recover money owed to us or connected third parties, we may collect your:
To manage our relationship with you, which includes:
To enable you to participate in a prize draw, competition, or complete a survey, we may collect:
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data), we may collect:
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you, we may collect:
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences, we may collect:
To make suggestions and recommendations to you about goods or services that may be of interest to you, we may collect:
We provide you with choices regarding certain Personal Data uses, particularly around marketing and advertising. You can view and make certain decisions about your Personal Data use in your profile and in the page footer.
If you have given consent, we may use your Personal Data to deliver you promotional offers or content based on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing. You will not receive any direct marketing such as emails or text messages if you have not given consent for such marketing.
We will get your consent before we share your Personal Data with any third party for marketing purposes.
You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Opting out of receiving these marketing messages does not remove any Personal Data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions. However your Personal Data is not used for any direct marketing unless you choose to opt in again.
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that most parts of this website may become inaccessible or not function properly. Unless you agreed to marketing cookies only basic functional cookies are used. For more information about the cookies we use, please see our cookie policy.
Do Not Track Signals: Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many online services, we currently do not alter our practices when we receives a “Do Not Track” signal from a visitor’s browser.
We will only use your Personal Data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so or obtain your consent, as required by applicable law.
Please note that we may process your Personal Data without your knowledge or consent where this is required by law.
We may have to share your Personal Data with the parties set out below for the purposes set out in the above.
We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.
Other companies in the Dockspot Group acting as joint controllers or processors and provide IT and system administration services and undertake leadership reporting.
Service providers acting as processors who provide IT and system administration services.
In addition to the above, we also may share your name, phone number, email address, boat information (boat measurements, boat type, boat model, boat name) and Safe Harbor ID with marinas located in the United States when you make a reservation directly with a participating marina.
As part of supplying our services to you we use partners, so called subprocessors to host and manage technical aspects of services. We also use sub processors to help us improve our products through analytics, error reporting, communication (email) etc. See the below list for a full list of our sub processors.
We do not sell anyone’s personal information, including children’s personal information, to third parties.
Some countries, states or provinces, and cities require that Dockspot provide additional or different disclosures in our Notice. Below are the disclosures that may be applicable to you.
For clarity, where we use "Europe" or "European" in this Notice, it shall mean member countries of the European Union, the European Economic Area, the United Kingdom and Switzerland collectively.
Certain laws require us to tell you about the "categories" of Personal Data we collect about you in specific ways. These categories are defined by applicable law. To do this, we compiled the information we have provided in this Notice and matched it to the categories of personal data described by legal category. This information can be found in the Privacy Chart that describes the sources, purposes, relevant disclosures for a business purpose and whether we sell personal data found in Annex 1 of this Notice.
Depending on where you are located, you may have certain rights conveyed by law regarding your Personal Data. We have defined the various rights which may be applicable to you below. To see which of these rights are applicable to you, refer to the Privacy Rights Chart immediately following this subsection. We will accommodate any request that (i) meets the legal and regulatory requirements applicable to you, (ii) is not subject to a legal requirement limiting your rights, and (ii) does not risk compromising the security or integrity of the other data we process. You may also designate an authorized agent to make a request on your behalf.
| Access / Know: |
You may have the right to know the categories of personal information collected about you, the legal basis for processing your personal information, and to know whether your personal information is disclosed / sold and to whom. This right also enables you to receive a copy of the Personal Data we hold about you. |
|---|---|
| Correction: |
This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. It is important that the Personal Data we hold about you is accurate and current to better provide you services. Please keep us informed if your Personal Data changes during your relationship with us. |
| Data Portability: |
Request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. |
| Deletion: |
This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. |
| Limit Processing: |
You may have the right to ask us to suspend the processing of your Personal Data in the following scenarios:
|
| Limit Use and Disclosure of Sensitive Personal Data: |
You may have the right to direct Dockspot to limit our use of your sensitive personal information to that use which is necessary to perform the services and which is reasonably expected by the average consumer requesting the services. Our practice is to not process your Sensitive Personal Information. Sensitive Personal Information includes your Social Security number, driver’s license number, state ID card, passport number, precise geolocation, racial or ethnic origin, religious beliefs, union membership, health and genetic data, biometric data, information about a sex life or sexual orientation, a consumer’s account login, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, the contents of mail, email, and text messages if the business is not the intended recipient. For the avoidance of doubt, "special categories of personal data" under the General Data Protection Regulation (GDPR) and implementing regulations in Europe shall have the same meaning as "sensitive personal information." |
| Non-Discrimination / Non-Retaliation: |
You may have the right not to receive discriminatory treatment by the Company because you exercise your privacy rights. |
| Object to Processing: |
Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. |
| Opt Out of Direct Marketing or Profiling: |
You may have the right to opt out of direct marketing or profiling we carry out for direct marketing. |
| Opt Out of the Sale or Sharing of Your Personal Data: |
You may have the right to opt out of the sale of your personal information, to the extent applicable. Dockspot does not engage in the sale of personal information. You may also have the right to request that we do not share your personal information with third parties. |
| Withdraw consent: |
Withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. |
| Right to Complain to Supervisory Authority: |
You have the right to make a complaint at any time to your data protection authority, or to the Information Commissioner’s Office (ICO) for data protection issues (www.ico.org.uk). |
| Know / Access | Portability | Object or Restrict Use | Limit Sensitive Personal Information | Opt Out of the Sale or Sharing | Opt Out of Direct Marketing or Profiling | Non-Retaliation | Withdraw Consent | Correction | Deletion | |
|---|---|---|---|---|---|---|---|---|---|---|
| California | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ |
| Canada | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ |
| Europe | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ |
| Virginia | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ |
Automated decision-making: In some jurisdictions, you may also have the right to object to automated decisionmaking which could lead to legally significant effect and request human intervention of the same. At this time, Dockspot does not use Automated decision-making in providing its Services.
How to Make a Request: If you would like to make a request, please use the Contact Details section at the bottom of this page. Please provide your first and last name, phone number, email address, and a description of the right(s) you are seeking to exercise.
Verification: We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Only you or your authorized representative acting on your behalf may make a consumer request related to your Personal Data. We cannot fulfil your request or provide any Personal Data if we are unable to verify the legitimacy of your identity (or the authority of your representative to make such a request on your behalf) or the request and confirm that the Personal Data relates to you.
Responding to Requests: We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. Any legitimate requests will be responded to no later than the legally mandated timeline, or three months after receiving your request, whichever comes first.
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Requests by Authorized Agents You may have the right to designate an authorized agent to make a request on your behalf. Authorized agents of Consumers may make a request by providing a power of attorney or other legal document that grants access to the agent. Any request you submit to us is subject to an identification and verification process, and confirmation of the agent’s authority, which may include attestation under penalty of perjury. Absent a power of attorney, we will also require the Consumer to verify their own identity. We may verify identity based on matching information you provided with data we have maintained on you in our systems. This data could include, but is not limited to, first and last name, email address and phone number.
Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below.
We process Personal Data based on the following legal basis:
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We rely on legitimate interest to process Personal Data for the following purposes: to manage payments, fees and charges, to collect and recover money owed to us or our service providers, to notify you of changes to our Terms or Privacy Notice, to ask for you to leave us a review, to operate, improve, and analyse the service, to protect the integrity and security of our systems, to deliver relevant content, for marketing, to manage your account, and to provide you with customer service.
Where we rely on legitimate interest, we make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. We process Personal Data based on performance of contract for the following purposes: to enable you to participate in a competition, raffle, sweepstakes, prize or giveaway, and to manage your account.
Comply with a legal or regulatory obligation means processing your Personal Data where it is necessary for compliance with a legal or regulatory obligation that we are subject to. We process Personal Data based on compliance with a legal or regulatory obligation for the following purposes: to notify you of changes of our Terms or Privacy Notice, to comply with legal requirements for transactional purposes, to respond to regulatory inquiries, to respond to your requests for customer support, and to protect our systems.
With your consent means we have provided you with notice of our data collection prior to processing your Personal Data and you have agreed to the processing for the limited purposes for which we disclosed to you. Where we process Personal Data based on your consent, you have the right to withdraw your consent at any time, at which time we will cease processing your Personal Data if we have no other legal basis to continue to process it. We process Personal Data based on consent for the following purposes: direct marketing.
Dockspot primarily stores the Personal Data it collects in the UK and Ireland. Dockspot uses processors to facilitate its global operations, which may require Dockspot to transfer Personal Data outside of the EEA, Switzerland and UK to countries not deemed to provide an adequate level of protection for personal data. Where we transfer your Personal Data outside the EEA, Switzerland, or the UK we do so only after ensuring that the transfer is subject to adequate safeguards. We also enter into written agreements with our processors consistent with the terms of this Notice, and, where necessary, complete appropriate transfer risk assessments.
We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The length of time which we maintain your Personal Data is determined based on a number of factors:
We reserve the right to modify or change this Privacy Notice at any time. When we make a material change to how we process Personal Data, we will update this Privacy Notice and inform you of those changes prior to processing Personal Data for a new purpose. To the extent any provision of this Notice is found to be invalid or unenforceable by a competent tribunal, such provision shall be severed to the extent necessary, and the remainder will remain valid and enforceable.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this Notice. If you have any questions about this Notice, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.
Dockspot's Data Privacy Manager, Omar Soto, can be reached at osoto@dockspot.com or by mail to the following:
Dockspot US, LLC
14785 Preston Rd., #975
Dallas, TX 75254.
Annex 1
| Category | Examples | Sources | Purposes for Collection and Use | Sharing with Third Parties for a Business Purpose |
|---|---|---|---|---|
|
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
|
|
|
|
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, marital status, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
|
|
|
|
Age (40 years or older), race, colour, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
|
|
|
|
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
|
|
|
Genetic, physiological, behavioural, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, DNA data, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
|
|
|
|
Browsing history, search history, information on an employee's interaction with a website, application, or advertisement. |
|
|
|
|
Data that can identify a consumer's physical location or movements. |
|
|
|
|
Audio, electronic, visual, olfactory, or similar information. |
|
|
|
|
Current or past job history or performance evaluations. |
|
|
|
|
Information that is not publicly available maintained by an education agency or institution related directly to a student. |
|
|
|
|
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behaviour, attitudes, intelligence, abilities, and aptitudes. |
|
|
|
|
Personal information that reveals a consumer's: Social Security number, driver's license number, state identification card number, or passport number; a consumer's account log-in, financial account, debit card, or credit card number in combination with any security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer's mail, email, and text messages (not business related); genetic data; biometric data used to uniquely identify a consumer; health data; or data related to sex life or sexual orientation. |
|
|
|
We may also collect information to comply with applicable law or regulatory requirements or legal requests.
In the preceding twelve (12) months, we have disclosed the following categories of Personal Information for a business purpose:
In addition to the purposes described in this notice, we may use Personal Information listed below for business purposes.
Category A: Identifiers.
In the preceding twelve (12) months, we have not sold any Personal Information.