Privacy Policy

BridgeOpsX OÜ ("we", "us") operates the website bridgeopsx.com. We take the privacy of the people who contact us seriously — this page describes, in plain language, what information we collect through this website, why we collect it, and what your rights are.

This policy is written to comply with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

1. Who is responsible for your data

The data controller is the Estonian company below. If you have any question about how we handle your information, write to us at info@bridgeopsx.com.

2. What we collect, and only what we need

2.1 Information you give us through the application form

When you submit an application through the Founder Partner Programme form, you provide the following information:

• Your name
• The vessel name and length overall (LOA)
• The management company associated with the vessel
• Your email address
• Optionally, a short description of your operations and why your vessel would benefit from BridgeOpsX

We use this information only to review your application, respond to you, and — if we go further together — to discuss a possible engagement.

2.2 Technical information collected automatically

When you submit the form, our server records the date and time of submission, your IP address, and your browser's User-Agent string. This is logged for security purposes (to defend against spam and abuse) and is retained for a short period only.

2.3 What we do not collect

This website does not currently use analytics, advertising trackers, third-party social pixels, or behavioural cookies. We do not build a profile of you across other websites. If we add analytics in the future, this policy will be updated and the privacy-respecting approach (no cookies, no cross-site tracking) will be preserved.

3. Cookies

This website does not set any cookies of its own. The Google Fonts service (fonts.googleapis.com), used to load typefaces, may set its own technical caching headers but does not place tracking cookies in your browser.

4. Why we are allowed to process your data (legal basis)

Under Article 6 of the GDPR, we rely on the following legal bases:

• Your consent (Art. 6(1)(a)) — by submitting the form, you consent to us processing your application and contacting you about it.
• Steps prior to entering a contract (Art. 6(1)(b)) — to evaluate and discuss a possible engagement with you.
• Our legitimate interest (Art. 6(1)(f)) — to protect the website from abuse and to keep minimal security logs.

5. Who sees your data

Inside BridgeOpsX OÜ, only the founder team has access to applications submitted through this form.

Outside the company, the only processor is our Estonian web hosting provider, Veebimajutus OÜ, which delivers the hosting and email infrastructure for bridgeopsx.com. All data is stored on servers located in the European Union. We do not sell, rent, or share your information with any other third party.

6. How long we keep your data

Applications are kept for up to two years from the date of submission so we can follow up on opportunities that develop on a longer horizon. After that, the application is deleted from our email and any working files unless we have explicit agreement to retain it further (for example, because we are in an active engagement with you).

Technical security logs are kept for 30 days.

7. International transfers

Your personal data is stored within the European Union and processed by an Estonian-registered company. We do not currently transfer personal data outside the EU. If this changes, we will update this policy and rely on the safeguards provided for in Chapter V of the GDPR.

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access. You can request a copy of the personal data we hold about you.
• Right to rectification. You can ask us to correct information that is inaccurate or incomplete.
• Right to erasure. You can ask us to delete your data ("right to be forgotten") where there is no overriding legal reason to retain it.
• Right to restrict processing. You can ask us to limit how we use your data while a question about it is resolved.
• Right to data portability. You can ask us to provide your data in a structured, commonly used format.
• Right to object. You can object to processing based on legitimate interests.
• Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time without affecting previous lawful processing.

To exercise any of these rights, write to info@bridgeopsx.com. We will respond within 30 days.

9. Right to lodge a complaint

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Andmekaitse Inspektsioon · Tatari 39, Tallinn 10134, Estonia · www.aki.ee · info@aki.ee

You also have the right to complain to the supervisory authority in your own EU member state.

10. Changes to this policy

We may update this policy as our service evolves — for example, if we add analytics, introduce new features, or change processors. The "Last updated" date at the top of this page always reflects the current version. Material changes affecting how we handle your data will be communicated proactively where we have a way to reach you.

11. Contact

For anything related to this policy or to how your personal data is handled by BridgeOpsX OÜ, write to info@bridgeopsx.com. We respond personally.