Privacy Policy

MarinAtlas is operated by Elif Eryılmaz Aksay, Istanbul, Türkiye, who is the data controller (veri sorumlusu) for the processing described here. For anything about your data, write to info@marinatlas.com.

Claim files often contain personal data about people who are not our users, such as claimants, crew, agents and witnesses. When a claim handler's organisation puts that data on MarinAtlas, we process it on that organisation's behalf and under its instructions, as its processor. Its own privacy notice applies, and requests about that data are best sent to it; we will pass on any we receive.

Confidential claim details are shown only to the expert appointed to the claim. Experts invited to bid see the brief, never the amounts or the parties.

MarinAtlas uses AI services to read claim documents, transcribe voice notes and draft checklists and reports. Our providers' terms do not allow them to use this content to train their models.

MarinAtlas suggests experts for a claim based on location, jurisdiction and past work. These are suggestions only: a person at the claim handler decides who is invited and appointed. We make no decisions with legal or similarly significant effects based solely on automated processing.

We do not sell personal data. We use these categories of service providers, bound by data processing terms. You can ask us for the list of providers that handle your data.

• Hosting and infrastructure providers: website and application hosting, databases, sign-in, file storage and cookieless website analytics.
• Google: e-mail, meeting booking and, with your consent, Google Analytics.
• LinkedIn: advertising and Lead Gen Forms.
• AI service providers: reading documents, transcribing voice notes, and drafting checklists and reports.
• Map and vessel-data providers: map tiles and vessel positions; loading a map sends your IP address to the map provider.

Inside the platform, data is shared with other users only as the work requires, for example a claim brief with the experts invited to bid. We may also disclose data where the law requires it, or to protect our rights and users.

We are based in Türkiye and some providers process data in the European Union, the United States and other countries. Where data leaves the European Economic Area, the United Kingdom or Türkiye, we rely on safeguards the law recognises: adequacy decisions, the EU–US Data Privacy Framework where a provider is certified, the European Commission's Standard Contractual Clauses (with the UK Addendum), and the standard contracts provided for under Article 9 of Turkish Law No. 6698 (KVKK).

• Analytics: Google Analytics data for up to 14 months; its cookies expire after up to two years or when you withdraw consent.
• Enquiries and leads: up to two years after our last contact, unless you become a customer.
• Accounts: while the account is active, then deleted or anonymised within six months of closure.
• Claim records, invoices and contracts: for as long as our customer agreement requires and any longer period that tax, commercial or limitation laws require.
• Directory listings: until the information is out of date or you ask us to remove it.

Depending on where you are, you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or send it to you or another provider in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect earlier processing. You can object at any time to direct marketing and to processing based on our legitimate interests, including your directory listing.

If you are in Türkiye, you also have the rights in Article 11 of the KVKK, including to learn whether your data is processed, the purpose, and the third parties it is transferred to, and to claim compensation for damage caused by unlawful processing.

Write to info@marinatlas.com. We will answer within one month (30 days under the KVKK) and may need to confirm your identity first. You may also complain to a data protection authority, such as the authority where you live or work (for example the Dutch Autoriteit Persoonsgegevens or the UK Information Commissioner's Office) or the Turkish Personal Data Protection Authority (KVKK).

Data is encrypted in transit. Access to claim data is enforced in the database itself, so each user sees only the claims and details their role permits. Files are kept in private storage and opened through short-lived links, and our team's access requires two-factor authentication.

MarinAtlas is a professional service and is not intended for anyone under 18.

We will update this page when our practices change and show the date of the latest version at the top. If a change is significant, we will tell account holders by e-mail or in the platform.