Privacy Policy – Astra Crew
 Effective date: 12 February 2026

The protection of your privacy and the security of your personal data are a core priority for Astra Crew s.r.o. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website and the Astra Crew recruitment platform (“Platform”). We comply with the European Union General Data Protection Regulation (GDPR) 2016/679 and any other applicable laws.

By using the website or/and the Platform, you acknowledge that you have read this Policy.

1. Data Controller – Contact details
    The data controller is Astra Crew s.r.o., Na Folimance 2155/15, Vinohrady, 120 00 Prague 2, Czech Republic. For inquiries or requests to exercise your rights, please contact: support@astra-crew.com.
   
   

2. What data we collect
    We may collect the following categories of data, depending on how you use the Platform and whether you are a Seafarer, Employer, or Agency:
   
   

Account data: full name, email, phone number, password.
 Seafarer profile data: resume (CV), certificates, work history, nationality, date of birth, photos.
 Company data: company name, contact details, job postings.
 Payment data: billing information and invoices (payment processing is performed via third-party providers).
 Technical data: IP address, device type, browser information, logs, cookies.
 You are not obliged to provide all data, however failure to provide certain data may make it impossible to create an account or use certain Platform features.

3. Purposes for which we use the data
    We use your personal data for the following purposes:
   
   

• Provide and operate the Platform.
  
  

• Connect Seafarers with Employers/Agencies.
  
  

• Process payments and subscriptions.
  
  

• Communicate with you about updates, offers, and support.
  
  

• Security, fraud prevention, and compliance with laws.
  
  

• Improve services and user experience.
  
  

4. Legal bases for processing (GDPR)
    We process your data based on one or more of the following legal bases:
   
   

• Performance of a contract: to provide our services and operate the Platform.
  
  

• Legal obligation: to comply with applicable obligations (e.g., tax or other regulatory requirements).
  
  

• Legitimate interest: for security, anti-abuse measures, and maintenance/improvement of the Platform.
  
  

• Consent: for marketing communications, cookies, or optional features, where required.
  
  

5. Data sharing – service providers
    We disclose personal data only to service providers who assist us (e.g., hosting, payment providers, verification services) under appropriate contracts and confidentiality/security obligations. We do not sell or lease your personal data.
   
   

6. Transfers outside the EU/EEA
    Data may be transferred outside the EU/EEA. In such cases, we apply appropriate safeguards such as Standard Contractual Clauses (SCCs).
   
   

7. Data retention
    We keep personal data only for as long as necessary for:
   
   

• the purposes set out in this Policy,
  
  

• compliance with legal obligations,
  
  

• resolving disputes and enforcing agreements.
   When data is no longer necessary, it is securely deleted or anonymized.
  
  

8. Your rights
    You have the following rights (where applicable and under GDPR):
   
   

• Right of access.
  
  

• Right to rectification/update.
  
  

• Right to erasure (“right to be forgotten”).
  
  

• Right to restriction of processing.
  
  

• Right to data portability.
  
  

• Right to object (especially to processing based on legitimate interest or direct marketing).
  
  

• Right to withdraw consent at any time (where processing is based on consent).
   To exercise rights, contact support@astra-crew.com.
  
  

9. Cookies and similar technologies
    We use cookies and similar technologies for:
   
   

• basic functionality (login, session management),
  
  

• improving user experience and analytics,
  
  

• personalized content and marketing (with consent where required).
   More information is described in the Cookies Policy.
  
  

10. Security – Anti‑Fraud
     We implement technical and organizational security measures to protect against unauthorized access, alteration, loss, or misuse of data. While we take security measures, no system can guarantee absolute security. For security and fraud prevention purposes, we may use technical data (such as IP, device information, and behavioral data) and monitor suspicious activity, in accordance with this Policy and the Anti‑Fraud Policy.
    
    

11. Minors
     The Platform is not intended for individuals under 18 years of age, and we do not knowingly collect data from minors.
    
    

12. Third-party links
     The Platform may include links to third-party websites. We are not responsible for the privacy practices of third parties, and we recommend reading their policies.
    
    

13. Policy updates
     We may update this Privacy Policy from time to time. The latest version will always be available on our website, and in case of significant changes, we will notify users where required.
    
    

14. Contact
     If you have questions, concerns, or wish to exercise rights, contact: support@astra-crew.com or by mail to the company’s registered office: Astra Crew s.r.o., Na Folimance 2155/15, Vinohrady, 120 00 Prague 2, Czech Republic.