Skip to main content

PRIVACY NOTICE

1. Introduction

At Diana Shipping Services S.A. (hereinafter “the Company”), your privacy is important to us. This Privacy Notice explains how we collect, use, disclose, and protect your personal information when you visit our website or use our services. We are committed to ensuring transparency and safeguarding the personal data you share with us.

As a data controller, the Company complies with all relevant data protection legislation, including Regulation (EU) 2016/679 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (hereinafter the “General Data Protection Regulation” or “GDPR”). This Privacy Notice informs you about how we process your personal data under the GDPR.

We encourage you to carefully read this Privacy Notice to understand how we handle your personal data in accordance with applicable data protection regulations, and to find information about your rights and the choices available to you. By using our services, you agree to the terms described in this Privacy Notice.

2. Processing of Personal Data

2.1. General

2.1.1 The Company processes personal data of employees and external consultants working on its premises or accessing its systems. The Company also processes personal data of data subjects/individuals not directly employed or engaged by the Company, to whom this Privacy Notice primarily applies. The main categories of personal data processed are outlined in section 3.

Specifically, the Company processes personal data provided by you or third parties (e.g. your employer, counterparties, cookies providers, or recruitment agents). This data may include, but is not limited to, personal and contact information, details about your education, previous and current employment, information about your cooperation with the Company, travel information, your communications with the Company and any other data necessary to fulfill the purposes described in section 2.2.

2.1.2 The Company processes your personal data during your or your employer’s cooperation with the Company, if such cooperation exists. This processing may continue after the cooperation ends—or even if no such cooperation exists—when required to comply with legal obligations, comply with mandatory data retention requirements, or for the establishment, exercise, or defense of legal claims.

2.2 Purposes of Processing

The Company will always process personal data fairly and lawfully, and only for a specified, explicit and legitimate purpose or as required by applicable legislation. The Company will therefore only process personal data when such processing is necessary for us (a) to comply with its legal obligations, (b) to fulfill its obligations and/or satisfy its rights deriving from an agreement between you and the Company, (c) to satisfy its legitimate interests, such as to ensure the security of persons and property, to fulfill its legal/contractual obligations, to assess its counterparties, to establish, exercise or defend legal claims and to conduct business communications, and/or (d) to process your personal data after receiving your consent (the latter which can be withdrawn at any time). Withdrawing consent will not affect the lawfulness of the processing based on the consent prior to withdrawing it.

2.3 Security of Processing

2.3.1 The Company will ensure appropriate information security related to confidentiality, integrity and availability. Personal data will be retained only for the period that is required to serve the legitimate purpose or as required by law. If you want more detailed information on specific retention time, please contact us on the address provided in section 5.

2.3.2 Third party service providers may process personal data on behalf of the Company within various areas. The Company has implemented adequate safeguards in accordance with applicable law to protect your personal data processed by third party service providers.

3. Categories and Collection of Personal Data

The Company may collect and hold various categories of personal data about data subjects,
including but not limited to:

  • Contact information: Names, addresses, phone numbers, email addresses, and job titles.
  • Recruitment information: Applications, CVs, references, background checks, interview notes, and assessments.
  • Human resources information: Work experience, qualifications, date and place of birth, identification documents, driver’s license details, nationality details, national identity numbers, physical information, social security numbers, job positions, organisations, bank account information, next of kin.
  • Communication-related information: Marketing preferences, event-related information, and user behaviour on our communication channels (including IP addresses), user interactions on our corporate social media accounts (e.g., likes, shares, comments, direct messages, and mentions), publicly available social media profile information (such as name, profile photo, and job title), and other data shared by you on social platforms in connection with your interactions with us.

Personal data may be collected in several ways, including:

  • Directly by the Company’s employees when establishing a business relationship or during operational dealings.
  • From third-party service providers, agents, publicly available sources (like websites), or employers (e.g., when suppliers or contractors share employee data).
  • Through your use of the Company’s website.
  • Directly from your interactions with our official social media accounts or through third- party platforms that host or integrate our content.
  • Personal data provided directly by you.


4. Transfer of Personal Data

Your personal data may be accessible to the Company’s personnel, related companies, and third parties such as competent authorities, travel agents, airlines, advisors, consultants, investigators and legal counsels, accountants, auditors, IT service providers (e.g., cloud storage providers) and banks.

The Company may also share or permit the use of its content, which may include your personal data, with third parties (e.g., partners, media platforms, or other organizations) for publication or marketing purposes. In such cases:

  • These third parties act as independent data controllers and process the data in accordance with their own privacy policies, over which the Company has no control.
  • The Company ensures, to the extent possible, that any personal data included in such content is minimized and relevant to its intended purpose.
  • If applicable, the sharing of personal data will rely on a lawful basis, such as legitimate interest or consent, in compliance with the GDPR.

Additionally, the Company may transfer personal data for the above purposes to recipients in third countries outside the European Economic Area (EEA). In case where such countries have not been granted with an adequacy decision by the European Commission, any transfer shall take place under the appropriate safeguards in accordance with the GDPR, such as Standard Contractual Clauses or appropriate contractual agreements between the Company and the recipient.

5. Your Rights

To the extent that the GDPR applies to the processing of your personal data, you have the right to:

(a) be informed and request access to your personal data and to information relating to the processing thereof by the Company, 
(b) request corrections and/or the completion of your personal data, 
(c) request the deletion of your personal data, 
(d) request the restriction of the scope of processing and the way and/or purposes for which we process them, 
(e) receive the personal data you provide to the Company and transmit them and/or request their transmission to another data controller, 
(f) object to the processing of your personal data, 
(g) file a complaint before the competent supervisory authority, and 
(h) so far as the processing relies upon your consent, withdraw such consent. 

To exercise your rights, please contact the Company at: [email protected]


6. Amendments to this Privacy Notice

The Company may revise this Privacy Notice periodically. Minor updates may be made without posting a dedicated notice on our website. However, if any changes significantly affect your rights or the way we handle personal data, we will post a specific notice on our website. We encourage you to review this Privacy Notice regularly.