Privacy

Who runs SuperRonin

superronin.com is operated by ESSOTEC, LLC, Robocha str, 52, 73000 Kherson, Ukraine, the same company that runs Skydex (skydex.online). For any privacy request or question, write to [email protected].

Your account

SuperRonin uses Skydex accounts. To sign in we process your email address and name (Art. 6(1)(b) GDPR). Sign-in links are sent by email; signing in with Google uses Google OAuth, and we receive your basic profile and email address. Signing in happens on superronin.com and ends with a session token, which your browser keeps in local storage. SuperRonin sets no cookies of its own and runs no third-party analytics or advertising scripts.

What your company stores here

Vessels, certificates, surveys, conditions of class, remarks, comments, scanned documents, saved views and the history of changes are entered by your organisation. For this data your company decides what is stored and who sees it; we process it on its behalf to run the service. Admins can invite people by email address, which stores that address, a name if given, a role and the ships the person is assigned to.

Scans are kept in private storage with no public address. They open only through a signed link created for a signed-in member, and each link expires within two hours.

If your company needs a data processing agreement, write to us and we will set one up with you.

Email

We send sign-in links, invitations, due-date reminders and circular bulletins by email through Postmark, our delivery provider. Reminders and bulletins go to members who have signed in, for the ships they are assigned to. Each member can switch the bulletins off on the Circulars page; to stop reminders, ask your admin or write to us.

Links to circulars in the bell, on the News page and in bulletins pass through superronin.com before they open the document on the issuer's site. We record that a member opened a circular, from where and when, so we can see whether bulletins are useful (Art. 6(1)(f)). Postmark does not track opens or clicks. These records are kept for 400 days.

Newsletter

The form on the circulars pages adds an email address to the SuperRonin newsletter: news about the service and other marketing emails from us. We use the address only with your consent (Art. 6(1)(a)), which you give by ticking the box; we keep the wording you agreed to, its date and the IP address it came from. The address is on the list only after you open the link in the confirmation email. An address that is not confirmed is deleted after 30 days.

Every newsletter has an unsubscribe link, and you can withdraw consent at any time by writing to [email protected]. After unsubscribing we keep the address marked as unsubscribed, so that it is not mailed again, unless you ask us to erase it.

Technical data

Our servers log IP addresses, requested addresses and browser details to keep the service secure and working (Art. 6(1)(f)).

We count page views with our own counter, not a third-party service, to see how people find SuperRonin and which pages they read (Art. 6(1)(f)). For each page you open, your browser sends us the page address without its query part, the site that linked to it, campaign tags if the link had them, and a random identifier it keeps in local storage. From the request we work out the country, the device type and the browser; the IP address is used for that and is not stored with the record. If you are signed in, the record is linked to your account. Inside the workspace we record which screen was opened, not which company or ship. These records are kept for 400 days. If your browser blocks local storage, views are still counted but not linked to each other.

Hosting and third parties

The service is hosted in Ukraine, a country outside the EU/EEA that is not covered by an EU adequacy decision; by using the service your data is processed there.

Cloudflare provides DNS for superronin.com. Postmark delivers email and Google handles Google sign-in. We do not sell personal data, and nothing from an organisation is published anywhere.

How long we keep it

Account data is kept while your account exists. Organisation data is kept while the organisation uses the service; entries that are deleted in the app are archived, not erased, so the history stays complete. The database is backed up daily and backups are kept for 14 days. When a company stops using the service, we delete its data on request.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction and portability of your data, and to object to processing based on legitimate interests. To exercise these rights, contact [email protected]. For documents your company entered, we will usually work through your company's admin.

You also have the right to lodge a complaint with a data protection supervisory authority in the EU/EEA country where you live.