Privacy Policy

1. Data Controllers

The data controllers for the Katalist Site and Registry are:

• Fonden Mærsk Mc-Kinney Møller Center for Zero Carbon Shipping, company reg. no.: 41805056, Marmorvej 8, 2100 Copenhagen, Denmark 

• Rocky Mountain Institute, company reg. no. 74-2244146, 2490 Junction Place Suite 200, Boulder CO 80301, USA 

2.  What Personal Data We Collect
We may collect and process the following categories of personal data when you interact with our Site and Registry:

• Account Information: Name, email address, organization name, job title, collected when you register an account on the Registry.

• Usage Data: This includes general information on how you interact with the Site, such as pages visited and time spent on each page. This data is collected using anonymous tracking, which does not collect any personal or identifiable information and cannot be used to identify individual users.

• Communication Data: Information from communications sent to us, including queries and complaints.

3. How We Use Your Data
We process your personal data only where we have a legal basis, and primarily for the following purposes:

• To Provide and Improve Our Services: Ensuring effective functioning of the Registry and Site, including registration, access control, and customer support.

• To Communicate with You: Responding to inquiries, sending important information about the Registry, and providing updates on services or changes to our policies.

• For Legal and Compliance Purposes: Ensuring compliance with legal requirements, including GDPR and other applicable laws, and maintaining Registry security.

4. Legal Basis for Processing
Our legal basis for processing personal data include:

• Contractual Necessity: Processing your data to provide services, fulfill agreements, and manage your requests on the Registry.

• Legitimate Interests: Ensuring effective operation, security, and improvement of the Registry, where these interests are not overridden by your data protection rights.

• Compliance with Legal Obligations: Processing necessary to meet legal and regulatory requirements.

5. Data Sharing and Transfers
We may share your personal data with:

• Service Providers: Trusted third-party vendors who assist with operations, such as IT support, data storage, and Site and Registry maintenance.

• Legal Authorities: Government authorities, regulators, or law enforcement agencies if required by law or to protect the rights, property, or safety of users and the public.

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, e.g. standard contractual clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy and Cookie Policy or as required by law. When no longer needed, personal data will be securely deleted or anonymized.

7. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:

• Right to Access: Request access to the personal data we process about you. You have the right to ask us for information about or access to your personal data. There are some exemptions, which means you may not always receive all the data we process.

• Right to Rectification: Request rectification of your personal data. This right entitles you to have your personal data be corrected if it is inaccurate or incomplete.

• Right to Erasure: Request the erasure of your personal data. This right entitles you to request the erasure of your personal data in certain circumstances.

• Right to Restrict Processing: Request a restriction on how your data is processed in certain circumstances.

• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format and have it transmitted to another controller.

• Right to Object: This right entitles you to request that we no longer process your personal data. However, it only applies in certain circumstances, and we may not need to stop the processing of your personal data if we can give legitimate reasons to continue using your personal data.

• Right to Withdraw Consent: Withdraw consent where it was previously given for data processing.

To exercise any of these rights, please contact us at Info@katalist.eco

8. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration, or destruction. These measures include secure servers and regular security assessments, ensuring compliance with data protection standards.

9. Cookies
On our Site, we only use strictly necessary cookies, i.e. cookies that are technically strictly necessary for operating the Site, including embedded security features.

The use of strictly necessary cookies does not require your consent. We do not use the cookies for other purposes such as statistics or marketing.

10. Changes to This Privacy Policy
We may update this Privacy and Cookie Policy periodically to reflect changes in legal, regulatory, or operational requirements. We will notify you of any significant changes by posting the updated policy on our Site or through other communication channels.

11. Contact Us
If you have questions about this Privacy and Cookie Policy, our data practices, or if you wish to exercise your rights, please contact:

• Info@katalist.eco

Thank you for trusting us with your personal data. We are committed to protecting your privacy and ensuring transparency in our data practices.