LISCR, LLC (together with its subsidiaries, affiliates and representatives hereinafter referred to as “LISCR”), whose principal place of business is 22980 Indian Creek Drive, Suite 200, Dulles, VA 20166, United States, is appointed by the Government of the Republic of Liberia as exclusive agent for the administration of Liberia’s Maritime Program. LISCR also administers the Liberian Corporate Registry, which offers a variety of corporate services to non-resident entities. The Registry provides, through The LISCR Trust Company, exclusive registered agent service for all Liberian non-resident corporate entities.
This Privacy Notice (“Notice”) applies to information that LISCR collects online and offline and our practices for using, disclosing, and sharing that information.
LISCR is a “data controller” within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) or “personal information handler” within the meaning of China’s (only for the purpose of this Privacy Notice, “China” means the Mainland of the People’s Republic of China, excluding the Special Administrative Regions of Hong Kong and Macau, or the Province of Taiwan) Personal Information Protection Law (“PIPL”) or a “business” or “controller” within the meaning of, for example, applicable privacy regulations in the United States of America. LISCR controls how your personal data is collected and the purposes for which it is used.
This Notice was last updated on April 14, 2025.
“Personal data” (for the purposes of GDPR) means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, genetic, mental, economic, cultural, or social identity.
“Personal information” (for the purposes of the PIPL) which is the similar concept to the personal data as defined under the GDPR, means various information related to an identified or identifiable natural person recorded electronically or by other means, but does not include anonymized information.
We collect and process personal data or personal information to provide effective and professional ship and corporate registry services. The personal data categories detailed below are submitted to us by clients in the course of our daily business and may be collected from publicly available sources including websites, search engines and social media profiles. Collection and processing of personal information as detailed below could be necessary for compliance with LISCR’s legal obligations under applicable laws. Furthermore, to the extent permitted by applicable laws, by requesting, accepting and using LISCR services and otherwise contracting with LISCR where such services or contracting requires collection and processing of personal information by LISCR, you are considered to have expressly consented to such collection and processing, including processing by LISCR affiliated entities that shall be personal information handlers for the purpose of the PIPL (see the list of entities and their details here).
Name, contact details (home address, email, phone), date of birth, nationality, residence, birthplace, passport number, height, weight, distinguishing marks, gender, physical results from medical exam (such as, for example, vision, hearing, blood pressure), maritime status, training qualifications, ranking, licenses, emergency contact. The personal data is collected directly from the individual seeking certification and the physician who performs the physical.
Public task: We process personal data as is necessary to perform legal responsibilities or obligations pursuant to International Convention on Standards of Training, Certification and Watchkeeping for Seafarers (“STCW”), 1978, as amended, and related International Maritime Organization (“IMO”) resolutions prior to issuing seafarers’ certificates and documents. The personal data is also used to safeguard against fraud and other unlawful practices involving seafarers’ certificates and endorsements.
Required information logged and disclosed on database for certification.
Name, contact details (home address, business address, employer, office and home phone numbers, work email) and identification details (date of birth, passport or Identity card number and job title). The personal data is collected directly from the owner or representative that is involved with registering the vessel, recording any mortgage against the vessel, or deletion.
Public task: We process personal data to perform legal responsibilities and obligations to establish compliance with the conditions fixed by Liberia Maritime Law for the grant of nationality to ships, for the registration of ships and for the right to fly the Liberian flag, pursuant to the United Nations Convention n the Law of the Sea, 1982 (“UNCLOS”), which may include checks (using, for example, vessel, company name, and/or owner) for any sanctions. We also process personal data for the registration and enforcement of mortgages in the Liberian public register in accordance with Liberian Maritime Law and the International Convention on Maritime Liens and Mortgages, 1993.
This information is not otherwise disclosed to third parties.
Name, contact details (email, phone, home address), passport number, date of birth, nationality, license(s), and banking information. The personal data is collected directly from such Auditor/Inspector.
Public task: We employ inspectors and auditors on a contractual basis to verify compliance of Liberian flagged ships with applicable international conventions and flag State requirements.
The processing is necessary to enter into or perform a contract to which the inspector/auditor is a party, and their Personal data is processed to verify qualifications (based on legitimate interest in delivering quality and secure services when performing our public tasks), generate flag state inspector and/or auditor identification cards for vessel boarding and port entry and to coordinate vessel inspections with owners, operators, local vessel agents and Port State Control. Banking information is processed for inspector and auditor payments.
We also process personal data of flag inspectors and auditors for purposes of ISM, ISPS, and MLC 2006 training and courses in keeping with The International Safety Management (ISM) Code, International Ship and Port Facility Security (ISPS) Code, and the Maritime Labor Convention.
With respect to Inspections and Audits, we further collect the names and contact information of local vessel agent(s) and/or Designated Person Ashore (“DPA(s)”) and may share this information with contracted inspectors and auditors for scheduled inspections to facilitate communication in case of delay or otherwise. This processing is done in the legitimate interest of fulfilling our public task.
This information is not otherwise disclosed to third parties.
Designated Person Ashore (DPA) names and contact phone details, phone number(s), work email, and office address.
Company Security Officer (CSO) names and contact details (work phone, cell phone, office fax, work email, telex numbers and after hours contact number).
Other vessel management representatives’ names and contact details (work phone, cell phone, office fax, work email, telex numbers and after hours contact number).
This personal data is collected directly from the individual.
Public task: We process and maintain DPA records of vessels registered in the Liberian Ship Registry, which is necessary to perform legal responsibilities and obligations that fall within the scope of the ISM Code. This information enables direct and immediate contact at all times with the flag State. DPA information is collected through Form RLM-297. DPA data is also used to schedule flag State inspections, surveys, and verification to ensure compliance with international conventions and Liberia Maritime Law and Regulations.
Public task: We process personal data to comply with legal responsibilities and obligations to adhere to maritime security measures in accordance with SOLAS Chapter XI-2 and the ISPS Code. Every ship to which the ISPS Code applies must, amongst other things, have a CSO. LISCR processes the personal data of CSOs detailed in the Declaration of Company Security Officer for each vessel.
We process personal data when vetting ISPS Code-mandated Ship Security Plans of Liberian flagged vessels for approval. We also process personal data to verify summaries submitted as documentary evidence of ISPS-mandated security exercises performed on Liberian flagged vessels at least once each calendar year, with no more than 18 months between exercises. The summary provides a list of all parties involved including the designated CSO and the names, ranks and dates of birth of any seafarers participating in the exercises.
Public task: We process personal data to comply with legal responsibilities and obligations to adhere to maritime regulations in accordance with the ISM Code, the ISPS Code and MLC.
This information is otherwise not disclosed to third parties.
Name, home address, date of birth, place of birth, seafarer certificates and qualifications, experience, credit card information through payment confirmations and autopsy reports of investigating officers for marine casualty investigations.
Name, home address, country of residence, citizenship, seafarer’s identification number Seafarers who sustain injury or have died.
This information is collected by using a standard form, RLM-109 (Report of Vessel Casualty or Accident). See forms here: https://www.liscr.com/maritime/maritime-investigations#ReportsReportFormsMarine
Public task: We process personal data as our legal responsibilities and obligation to conduct investigation into marine casualties involving Liberian flagged vessels in accordance with the IMO Code of the International Standards and Recommended Practices for a Safety Investigation into a Marine Casualty or Marine Incident (“Casualty Investigation Code”), adopted through Resolution MSC 255(84), and mandated by the SOLAS Convention.
Public task: We process personal data to issue Certificates of Compliance or Tax Letters pursuant to the 1970 Double Taxation Avoidance Agreement (DTAA) between the Republic of Liberia and Federal Republic of Germany.
This information is otherwise not disclosed to third parties.
Public task: We process personal data of third-party service providers including, but not limited to, Lifeboat Service Providers, Hazardous Material Service Providers, and Private Security Service Provider’s, as our legal responsibilities and obligation, in the course of vetting and approval process of service providers pursuant to Maritime laws and regulations, including, for example, ensuring a uniform, safe and documented standard for maintenance, thorough examination, and operational testing for Liberian ships.
This information is otherwise not disclosed to third parties.
Name, home address, date of birth, birthplace, citizenship, nationality, passport, identity card or driver’s license information, and related information. This personal data is collected from beneficial owners, shareholders, directors, officers, or other authorized representatives of non-resident legal entities, individuals acting as an address of record or individuals acting as contact persons in case of the address of record being a legal entity, and of individuals acting as special agents.
Name, passport, identity card or driver’s license information and signature specimen. This personal data is collected from persons signing documents submitted for filing, recordation, legalization of the authenticity of the signature on documents, and affixing apostilles.
Public task: We process personal data as our legal responsibilities and obligation in accordance with Tax Information Exchange Agreements (TIEAs) concluded between Liberia and other jurisdictions and in compliance with The OECD’s Convention on Mutual Administrative Assistance in Tax Matters and is bound by the Convention’s requirements ratified by Liberia.
Public task: We process personal data of Special Agents and of persons signing documents as our legal responsibilities and obligation in order for individuals, empowered by the Liberian Maritime Authority, to act as Special Agents to effectively acknowledge the identity of persons signing documents submitted for filing, legalize the authenticity of the signature on documents, and affix apostilles to public documents issued by the Registry in accordance with applicable international conventions.
Public task: We process personal data as part of our legal responsibilities and obligation to register and issue certificates and other corporate documents to Liberian non-resident legal entities as well as non-Liberian entities registered as Liberian Foreign Maritime Entities (“FMEs”) under the Liberian Business Corporation Act.
This information is disclosed in accordance with applicable regulations or authorities such as, for example, an Exchange of Information Request from a country or a request from Liberian authorities. This information is otherwise not disclosed to third parties.
Name, email, phone number, title, employment information from existing and prospective clients.
Name, email, phone number from those that engage with our Duty Officer.
Registry information from clients.
Legitimate interest: We process your personal data based on legitimate interest in running our daily business and performing public tasks which facilitate regulatory compliance and are also legal obligations to improve safety, security, and the protection of the marine environment.
We may occasionally need to contact you by email or phone for administrative or operational reasons. For example, to update you on the status of your company, vessel, invoices, payment confirmation, product delivery, or provide notice of legislative and regulatory updates, operational and security changes, and related developments. These communications are not made for marketing purposes.
We process your personal data based on legitimate interest to keep a record of any Duty Officer call.
We process registration information based on legitimate interest to maintain applicable registries such as, for example, the Corporate Registry (registers non-resident entities for the purpose of owning vessels) and Waypoint (internal database which stores details for vessels and owners/operators).
This information is not otherwise disclosed to third parties.
Name, home address, date of birth; bank account and related payment information clients and third parties for whom LISCR provides maritime related services.
Legitimate interest: We process your personal data to fulfill our legal obligation, to fulfil a contract, for administrative purposes, to protect our business interests and fulfill your purchase and service orders. The business purposes for which we will use your information include, but are not limited to, accounting, billing and audit, credit or other payment verification, fraud screening, and legal purposes. This includes collection and processing of registration fees, taxes and other fees related to the Liberian Ship and Corporate Registry. We only handle personal data that is necessary to process payments submitted to us by our clients, or outgoing payments.
This information is otherwise not disclosed to third parties
Sensitive Information. We do not use or disclose sensitive personal information we collect for any purpose other than to provide the goods or services; to prevent, detect, and investigate security incidents; to resist malicious, deceptive, fraudulent or illegal actions directed at LISCR, including to prosecute those responsible for such actions; to ensure the physical safety of persons; short-term transient use (e.g., non-personalized advertising shown as part of a consumer’s current interaction with the business, where that personal information is not disclosed to a third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction of the business); to perform services on behalf of the business (e.g., maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, for sanctions compliance, providing analytic services, providing storage); to verify or maintain the quality or safety of a service or device that is owned, manufactured, or controlled by LISCR or to improve, upgrade or enhance such service or device; or for purposes that do not infer characteristics about a consumer.
In order to improve our services, tailor our content to your needs, and analyze how visitors use ourWebsite, we may collect certain information by automated means (“cookies”). LISCR uses cookies to
enhance browsing experiences, serve personalized advertisements or content, and analyze our websitetraffic. We also use cookies for the purpose of enabling the auto-login feature for certain portals. Cookiesare required to utilize the auto-login feature; however, the use of the auto-login feature is entirely optionaland is merely intended as a convenience for the user and has no other effect on the operation of the site.You may manage cookies used on LISCR’s Website at any time by following your browser’s guide to disableor delete cookies. You can also make your cookie choice by accessing our cookie banner.Google Analytics. We also use Google Analytics to measure traffic to our Website and to analyze howusers interact with our Website for its improvement. To collect this information, Google Analytics installscookies on your browser or reads cookies that are already there. Google Analytics also receivesinformation about you from applications you have downloaded that partner with Google. We do notcombine the information collected through the use of Google Analytics with personal information.Google’s practices with respect to your personal information collected by Google Analytics is in accordancewith Google Analytics’ Terms of Service and Privacy Policy. You can prevent your personal information frombeing used by Google Analytics by downloading the Google Analytics opt-out browser add-on found atGoogle Analytics Opt-Out. Additionally, you may opt-out of the Google Analytics cookie through our cookiebanner.Social Media. At the bottom of our Website, we provide links to the correspondent social media (e.g.,LISCR - Liberian Registry | Facebook, LISCR | The Liberian Registry: Overview | LinkedIn, and LISCR -LiberianRegistry - YouTube). No personal data is transmitted to these social media platforms via ourWebsite unless you click on the links to the correspondent social media. When you interact with our socialmedia pages, we receive basic engagement metrics and use this information to improve our pages andenhance our content and marketing efforts. If you interact with these pages by, for example, postingcomments or liking or sharing posts, any personal data that you post in these interactions or provide whenregistering for such social media, can be viewed and used by others. We may use such public informationyou provide on our social media to send you targeted marketing offers. We do not control the use orstorage of the information that is collected and processed by social media websites, including how yourinformation is used if you are logged into your social media account when you access our social mediapage(s). For more information on how Facebook, LinkedIn, and YouTube use your personal data, pleasesee their respective privacy policies found here: Facebook's Privacy Policy, LinkedIn Privacy Policy, andYouTube's Privacy Policy.When you visit our social media pages, we receive information about your browsing activity to betterunderstand the demographics and interests of our followers, which helps us tailor our content to resonatewith our audience. For example, we used LinkedIn analytics in connection with the operation of ourLinkedIn page in order to obtain anonymized statistical data about visitors to our LinkedIn page. For thispurpose, LinkedIn places a cookie on your device when you visit our LinkedIn page at LISCR | The LiberianRegistry: Overview | LinkedIn. Each cookie contains a unique identifier code that remains active for aperiod described in the LinkedIn cookie table https://www.linkedin.com/legal/l/cookie-table unless it isdeleted before the end of this period. LinkedIn receives, records, and processes the information stored inthe cookie, including demographic information from any LinkedIn profile you may have, to provide us with
anonymized metrics to help us measure the effectiveness of our LinkedIn page for marketing purposes. Formore information on the privacy practices of LinkedIn, please see the link provided above.
LISCR may also use information that we collect about you or that you provide to us for one of the following
purposes:
We may disclose aggregated information about data subjects, and information that does not identify an individual, without restriction. In addition to the recipients identified above in Section 2, we may disclose your personal data to the following categories of recipients in a manner that (i) is consistent with applicable privacy regulations:
Depending on your location (the jurisdiction in which you are a resident), you may have different data subject rights available to you. These may include requests for access, erasure/deletion, rectification/correction, to opt out of receiving marketing emails, etc. (you can also tell us to stop sending you email messages, for example, by following the opt-out instructions sent with these communications). Please understand that we may need to keep certain of your personal data to honor your choices (e.g., if you tell us to stop sending marketing emails, we will need you maintain your email address on file so that our system remembers that you no longer wish to receive such communications).
Also, there are certain situations where we may not be able to honor your request, including, for example, we may not be able to delete transaction data where we have a legal obligation to maintain it, or we may need to maintain certain information for fraud prevention, security, to protect the privacy of others, or for the establishment, exercise or defense of legal claims.
A summary of these data subject rights that may be applicable to you is provided below. For more complete information, please see, for example, Sections 3-5 of the GDPR, Chapter IV of the PIPL, or the applicable US state privacy regulation. For residents of jurisdictions without privacy regulations, or where your jurisdiction does not cover some or all of the following rights or choices, we will consider requests regarding such rights but will apply our discretion in how we process such requests:
Exercising Your Rights. To exercise your rights as described above, please submit a verifiable request to us by either emailing us at info@liscr.com with the subject line “Privacy Request” or call us at +18333862245. Only you or a person registered with the appropriate government authority that you authorize to act on your behalf (where applicable), may make a data subject request related to your personal data. If you submit a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom you are submitting a request.
To help protect your privacy and maintain security, we take steps to verify your identity before granting you access to your personal data or considering your deletion or correction request. The verifiable data subject request must:
We cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you.
Making a verifiable data subject request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal data associated with that specific account.
We will only use personal data provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Appeal. Depending on your jurisdiction, you may have a right to appeal any denial of your request. Please email us at info@liscr.com including the subject line “Privacy Appeal” and in your email include your name, email address, and the basis for your appeal request.
Non-Discrimination. We will not discriminate against you for exercising any of your rights under the various applicable regulations. For example, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, imposing penalties, provide you with a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
We employ technical and organizational security measures to ensure your data is processed securely, to guard against the risk of accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access, and to offer technical support if requested.
LISCR is committed to ensuring the security and protection of the personal data that we process, and to provide a compliant and consistent approach to data protection
LISCR retains your personal data for as long as it is necessary to fulfill our purposes set out in this Privacy Notice. We may also save your personal data for a longer period of time where necessary to fulfill a legal obligation or to establish, enforce or defend against legal claims.
We do not process your information for automated profiling, which is, for example, the automated processing of personal data for evaluating personal aspects of an individual and in particular to analyze or make a prediction about an individual.
LISCR reserves the right to change this Notice. If we decide to make changes, we will post the updated Notice on our Website so you are always aware of what information we collect, how we use it, and how we disclose it. The date this Notice was last revised is identified at the top of this Notice. We encourage you to review our Notice to stay informed. Where required by applicable data protection and privacy laws, we will notify you of any material changes to this Notice and obtain your consent, if required.
Questions, comments, and requests regarding this Privacy Notice are welcomed and should be addressed to info@liscr.com, including the subject line “Privacy Request”. You may also contact us by regular mail addressed to:
LISCR, LLC
Privacy Officer/Data Protection Officer
22980 Indian Creek Drive, Ste. 200
Dulles, VA 20166 USA
Last Updated: April 2025
We at LISCR value protection of your personal information and your privacy. We want to provide you with this LISCR China Customer Privacy Notice (the “Privacy Notice”) to explain how we collect, use, share and otherwise process your personal information and to be transparent about our personal information handling practices in China.
Our Privacy Notice at a Glance
We encourage you to read our full Privacy Notice below to understand in depth the manner in which we will collect, use and otherwise process your personal information and your rights over your personal information.
In this full Privacy Notice, you will find all relevant information applicable to our process of your personal information in China, regardless of the channel or means (online or in person or via a third party) that you use to interact with us.
Does this Privacy Notice Apply to You?
This Privacy Notice explains how LISCR, through itself and its contractors or affiliates, details of which are available here (referred to as “LISCR”, “our”, “we” or “us”) processes personal information of our individual clients (“you”) when you engage the services of LISCR.
Personal information is data (or information) that can be used to identify or is identifiable to you, such as your name, email address, telephone number or similar information.
Sensitive personal information refers to personal information that, once leaked or illegally uses, could easily lead to damages to your personal dignity or danger to your personal security or property safety, and the influences on personal rights and interests may include but be not limited to the personal autonomous decision-making right, leading to differential treatment, suffering from reputation damage, mental stress, personal injury, property loss, etc., as the case may be, which deserve special attention when you provide or specifically give us your consent to process. We commit to collecting your sensitive personal information on a strictly needed basis, and to the extent possible, we list the sensitive personal information that we collect and process for your special attention. We will always ensure that sensitive personal information to be collected is sufficiently necessary to achieve the purposes stated in this Privacy Notice, sensitive personal information will be processed in such way of having the least impact on your rights and interests, and proper security measures will be put in place to protect information security.
We may collect and use your personal information mainly under the following circumstances (i) it is necessary for performing LISCR’s statutory obligations or complying with relevant legal regulations and conditions (“Statutory and Compliance Requirements”); (ii) it is necessary for performance of LISCR’s services or a contract (“Performance of Services and Contract”); and (iii) for personalization and improvement of customer experience when providing marketing materials and awareness of products and services which facilitate regulatory compliance (“Commercial and Administrative Purposes”).
Personal Information we collect directly from you and how we collect such information
We collect and process personal information in China as detailed below for purposes of LISCR’s compliance with legal obligations and performance of legal responsibilities under applicable laws.
We perform public tasks which facilitate regulatory compliance and are also legal obligations to improve safety, security, and the protection of the marine environment.
Scenarios | (Sensitive) Personal Information to be collected | Means of collection of (Sensitive) Personal Information |
| Basic personal information Names, contact details (home address, email, phone), date of birth, nationality, residence, birthplace, gender, emergency contact (including name, address, telephone numbers) Sensitive Personal information Passport information, height, weight, hair and eye color and distinguishing biological marks for identification purposes, health-related physical status | SeaSystem and online application |
| Basic personal information Names, date of birth, contact details (business address, employer, work email), job title Sensitive Personal information Identification details (passport or Identity card number) | Via email |
| Basic personal information Name, home address, date of birth, birthplace, citizenship, nationality, Sensitive Personal Information ID document: passport, identity card, or driver’s license, and proof of residential address or residency cards | Via email; eCorp |
2)Performance of Services and Contract
More generally, we also collect personal information from individual customers in the course of our daily business for performance of services and contracts/agreements.
a) When persons are involved for payment purposes
When individuals are required to make payment to LISCR in order for it to fulfil the purchase and service orders, and in order to protect LISCR’s business interests and to fulfil purchase and service orders, their following personal information: i.e. reference identification and payment amount for credit card payment, and full name, bank name, bank reference number and other personal information that persons involved agree to provide from time to time for wire transfer will be collected and processed via email for purposes such as but not limited to accounting, billing and audit, credit or other payment card verification, and fraud screening.
b) When we need to contact you for administrative or operational reasons
We may occasionally need to contact you by email or phone for administrative or operational reasons. For example, to update you on the status of your company, vessel, invoices, payment confirmation, product delivery.
If you do not provide your certain personal information, the following types of issues can occur:
II. Value-Added/Extended Services
3) Commercial and Administrative Purposes
We process personal information to personalize and improve customer experience when providing marketing materials and provide awareness of products and services which facilitate regulatory compliance
For the foregoing purposes, we may occasionally need to contact you by email or phone to provide notice of legislative and regulatory updates, operational and security changes, and related developments. These communications are not made for marketing purposes.
During these occasions, we will need to process your name, email, phone number, title and employment.
2. For what purposes do we process your Personal Information and how we use your Personal Information?
In relation to the engagement of LISCR’s services
To gather and provide information required by or relating to enquiries or investigations by regulatory bodies.
These processing purposes correspond with the legal bases for processing as set out in Section 3 of this Privacy Notice.
Direct Marketing:
As stated above, we may use your personal information to send you updates (by email, text message, telephone, or post) about our services. We will always treat your personal information with the utmost respect and never sell it to other organizations outside LISCR for marketing or other purposes.
You have the right to opt out of receiving promotional communications at any time by using the 'unsubscribe’ link in the marketing emails you receive, or by contacting us with information we list in Section 11 below.
Please note, unless you let us know otherwise, we will continue to communicate with you on transactional or administrative issues such as in connection with any support, payments, billing, and security of your products and services even after you opt out of promotional or marketing related communications.
3. What are the legal bases for processing your Personal Information?
We may process your personal information based on one or more of the following reasons:
If we process your personal information based on legal bases other than your consent, we will only do so if this is both necessary for us to conduct our business and permitted under applicable laws. If we process your personal information because you have given us consent to do so, you may withdraw your consent at any time. (See Section 8 below). The processing of your personal information up until your consent is withdrawn will remain lawful.
4. Entrusted processing; Sharing with affiliates or third parties.
We will only share, transfer, assign or otherwise disclose your personal information with (a) our management, employees, agents, and affiliates, subsidiaries, business partners, and data processors/service providers who have a legitimate business need or purposes to know; (b) vendors, customers and potential buyers, including without limitation suppliers, contingent workers, consultants, advisors, contractors, clients, out-sourced service providers who require such information, and potential business partners or buyers for the execution, performance, management and control of our contracts with them, for the fulfilment of their legal obligations as personal information recipients and when it is necessary, for the purposes of transfer of control over the relevant personal information to a business partner or buyer in connection with the sale, assignment, merger, acquisition, or other transfer of all or a portion of our business to that business partner or buyer; and (c) law enforcement, other government agencies or authorities, or third parties as required by applicable law, court order, subpoena, legal process, regulatory or administrative order, legal requirements, procedural requirements, litigation, or mandatory requirements of a competent government authority.
We do not permit our vendors who are data processors to process your personal information for their own purposes. We only permit them to process your personal information for specified purposes in accordance with our instructions.
Currently, we may transfer, share or disclose your personal information in the following situations:
Data Transfer to or Sharing with Affiliated Entities or Third Parties:
We will not disclose your personal information to other third parties without your authorization or as otherwise permitted by applicable laws.
If we take technical measures and other necessary measures to anonymize your personal information, the transfer, sharing or disclosure of such anonymized personal information does not require separate notice to and consent from you.
We have set out in Schedule 1 hereto a list of personal information recipients that are not subject to any restrictions on disclosure as of the date of this Notice, which shall be updated from time to time based on business needs. If you need further information on this, you may request such information from us with our contact information in Section 11 below. Subject to our confidentiality, we can provide you with proper information accordingly.
Assign control your personal information:
We do not assign control over your personal information within or outside LISCR except as follows. We will require the information recipients to undertake to protect the personal information as required by laws:
Publicly disclose your personal information:
We will not publicly disclose your personal information except for the following instances:
5. For how long we retain your personal information
We retain your personal information while your account is active or as needed to provide you with our services. We also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
6. What measures we take to protect your personal information
We take the protection of your personal information seriously and take appropriate measures to prevent abuse, loss, misuse, unauthorized access, unwanted disclosure, and unauthorized alterations. For example, we have implemented appropriate system and network security measures such as firewalls, encryption, and patches, access controls, and otherwise protect portable devices with appropriate passwords. In addition, our employees are required to treat your personal information as confidential.
We limit access to your personal information to those who have a business need to access it. Those processing your personal information will do so only in an authorized manner and are subject to a duty of confidentiality.
However, we cannot guarantee or warrant the security of any information you transmit to us over the internet, e-mail, or other electronic communication methods and therefore you do so at your own risk.
If your personal information must be transferred from China, we will store your personal information on information system platforms, data centres and applications used by us. However, since we provide services all over the world, it is possible that your personal information is directly collected from China by LISCR, LLC, transmitted to or share with from China or other countries where such personal information is stored or otherwise accessed from our entities that are located outside of China.
In such circumstances when we transmit, store or process personal information from or outside of China, we will provide notice to you and, if required by law, seek your consent and we will ensure to comply with the relevant laws and regulations of China regarding the exportation of personal information and ensure that appropriate safeguard and organizational measures will be taken to guarantee your personal information can be equally protected as it is within the territory of China, to the extent required by applicable laws.
The retention period of the personal information will be the shortest time needed to achieve the purposes of the cross-border transfer, unless laws provide otherwise.
7. What rights do you have in relation to your personal information
You have the following rights in relation to your personal information and you may exercise any of the following rights by contacting our privacy team with information we list in Section 11 below. Please note that we may require you to prove your identity if we consider this necessary to be able to identify you before we can assist you in exercising your rights.
8. Requests and Complaints
Requests and complaints may be directed to the contact details set out below in this Privacy Notice. We will use our reasonable efforts to respond to your request in a timely manner and will respond to your request within 30 days or the time period permitted by applicable laws, after we receive your request and complete the verification of your identity.
9. Minors
Our services are not intended for use by individuals under the age of 14, and we do not knowingly collect personal information from those in this age group. If you are under 14, please discontinue the use of our services. If we become aware that someone under the age of 14 has registered, we will expunge any related personal information from our records.
By using our services, you confirm that you are at a minimum 14 years old.
10. Changes to this Notice
This Privacy Notice may change over time. If we make changes, we will notify you by revising the date at the top of the Privacy Notice and, in some cases (e.g. when we make any material updates), we may provide you with additional notice. The major changes to this Privacy Notice include but are not limited to:
We encourage you to review this Privacy Notice whenever you engage the services of LISCR.
11. Contact, Questions, Comments, Complaints
Remember, we’re here to help! If you have any questions regarding this Privacy Notice or have any questions, comments, or complaints please contact our Data Protection Officer at:
In case of a request, we kindly ask you to:
Schedule 1 – List of Affiliated Entities or Third Parties Data Recipients
Name of entities | Contact Details | |
A. LISCR’s affiliates | ||
Please see our global presence for a detailed list and their contact details. |
Name of entities | Contact Details | Method of processing |
B. Third Parties Data Recipients | ||
B1. Third Parties Data Recipients in the U.S. (Acting as Data Controller) | ||
1. YCF Maritime LLC | 22980 Indian Creek Drive, Dulles, VA 20166 USA | WayPoint, Microsoft 365 |
2. SeaNet Verification LLC | 22980 Indian Creek Drive, Dulles, VA 20166 USA | WayPoint, Microsoft 365 |
3. CorpKit Legal Supplies | 46 Taft Avenue, Islip, New York 11751 | Microsoft 365 |
B2. Third Parties Data Recipients outside of the U.S. (Acting as Data Controller and Data Processor) | ||
1. Government of Liberia: Ministry of Foreign Affairs | Capitol Hill, Tubman Boulevard, Yekpi Town, Monrovia, Montserrado County, Liberia | Microsoft 365, Mail |
2. Government of Liberia: Liberia Revenue Authority | Revenue House, ELWA Junction, Paynesville City, Liberia | Microsoft 365, Mail |
3. Government of Liberia: Liberia Maritime Authority | 1948 Maritime Drive, Opposite EJS Ministerial Complex, Oldest Congo Town, Monrovia, Liberia | Microsoft 365, Mail |
最后更新时间: 2025年4月
LISCR重视保护您的个人信息和隐私。我们希望将本LISCR客户隐私保护通知(以下简称“隐私通知”)提供给您,以解释我们如何收集、使用、共享以及处理您的个人信息,及如何在中国做到个人信息处理透明化。
我们的隐私保护通知概览
我们鼓励您全文阅读以下隐私通知,深入了解我们收集、使用和处理您个人信息的方式,以及您对您的个人信息的权利。
在这份完整的隐私通知中,无论您通过何种渠道或方式(网上、当面或通过第三方)与我们进行互动,您都可以找到我们在中国处理您个人信息的所有相关信息。
本隐私通知是否适用于您?
本隐私通知解释了LISCR如何在您使用LISCR的服务时,通过自身和承包商和关联方处理我们个人客户(“您”)的个人信息。(详情请点击此处)(以下简称为“LISCR”、“我们的”、“我们”或“我方”)。
个人信息是指可用于识别您身份或可识别您身份的数据(或信息),例如您的姓名、电子邮件地址、电话号码或类似信息。
敏感个人信息是指一旦泄露或被非法利用,容易导致个人尊严受损、人身安全或财产安全受到威胁,可能对个人权益产生影响,但不限于个人自主决策权,导致区别对待、遭受名誉损失、精神压力、人身伤害、财产损失等(根据具体情况),在您提供或明确表示同意我们处理时需要特别注意的个人信息。我们承诺严格按照需要收集您的敏感个人信息,并尽可能列出我们收集和处理的敏感个人信息,以引起您的特别注意。我们将始终确保在充分必要的情况下收集敏感个人信息以达到本隐私通知所述的目的。敏感个人信息的处理方式将最大限度地减少对您权益产生的影响,并将采取适当的安全措施保护信息安全。
我们可能主要在下列情况下收集和使用您的个人信息:(1)为履行LISCR的法定义务或遵守相关法律规定和条件(“法定及合规要求”)所必需的信息;(2)为履行LISCR的服务或合同(“提供服务和履行合同”)所必需的信息;(3)提供营销材料时使客户体验个性化并得到改善,提高产品和服务意识,促进监管合规(“商业和管理目的”)。
我们直接向您收集的个人信息以及我们如何收集此类信息
I. 基本业务服务
1) 法定要求和合规要求
我们在中国收集和处理个人信息(详见下表)的目的是为了LISCR履行适用法律规定的法律义务和法律责任。我们执行公共任务,有助于符合相关法规,同时也是改善安全、安保和保护海洋环境的法律义务。
情景 | 将收集的(敏感)个人信息 | 收集(敏感)个人信息的方式 |
| 基本个人信息 姓名、联系方式(家庭住址、电子邮件、电话)、出生日期、国籍、居住地、出生地、性别、紧急联系方式(包括姓名、地址和电话号码) 敏感个人信息 护照信息、身高和体重、头发和眼睛的颜色以及用于识别目的的生物标记、健康相关的身体状况 | SeaSystem系统及在线申请
|
| 基本个人信息 姓名、出生日期、联系方式(公司地址、雇主、工作邮箱)、职位名称 敏感个人信息 身份信息(护照或身份证号码) | 通过电子邮件
|
| 基本个人信息 姓名、家庭住址、出生日期、出生地、公民身份、国籍 敏感个人信息 身份证明文件:护照、身份证、驾照执照、以及居住地址或居住证证明 | 通过电子邮件;eCorp 系统
|
2)提供服务和履行合同
一般来说,我们也会为了提供服务和履行合同/协议,在日常业务过程中收集个人客户的个人信息。
a) 当有人涉及付款时
当个人需要向LISCR付款以便LISCR履行采购和服务订单时,为了保护LISCR的商业利益和履行采购和服务订单,将通过电子邮件收集和处理他们的下列个人信息:即信用卡付款参考标识和付款金额,以及全名、银行名称、银行参考码和相关人员同意不时提供的用于电汇的其他个人信息,用于但不限于记账、账单和审计、信用卡或其他支付卡验证以及预防欺诈。
b) 当我们因行政或运营原因需要与您联系时
出于管理或运营原因,我们可能偶尔需要通过电子邮件或电话与您联系。例如,向您更新公司、船舶、发票、付款确认、产品交付的状态。
如果您不提供某些个人信息,可能会出现以下类型的问题:
II) 增值/扩展服务
3) 商业和管理目的
我们处理个人信息的目的是提供个性化营销材料,改善客户体验,并提高产品和服务意识,从而促进监管合规。
出于上述目的,我们可能偶尔需要通过电子邮件或电话与您联系向您通报就有关立法和监管更新、运营和安全局势变化以及相关进展情况发出通知。这些信息都不含营销目的。
在这些情况下,我们需要处理您的姓名、电子邮件、电话号码、职务和职业信息。
涉及使用LISCR的服务
此类信息处理目的与本隐私通知第3节所列的法律基础相对应。
直接营销:
如上所述,我们可能会用您的个人信息向您发送我们最新的服务信息(通过电子邮件、短信、电话或邮件)。我们将始终以极大的敬意对待您的个人信息,绝不会出于营销或其他目的将其出售给LISCR以外的其他组织。
您有权通过您收到的营销电子邮件中的“取消订阅”链接,或通过我们在下文第11节中列出的信息联系我们,随时选择拒收促销信息。
请注意,即使您选择拒收与促销或营销相关的信息,除非您另行通知我们,否则我们将继续与您就交易或管理问题进行联系,例如涉及您产品和服务的任何支持、付款、计费和安全问题。
我们可能会基于以下一个或多个原因处理您的个人信息:
如果我们基于法律基础而不是您的同意来处理您的个人信息,我们只会在我们商务拓展所必需且适用法律允许的情况下才会这样做。如果我们是因为得到了您同意来处理您的个人信息,您可以随时撤回同意。(参见下文第8节)。在您撤回同意之前,对您个人信息的处理仍然合法。
我们只会与以下人员共享、传输、转让或以其他方式披露您的个人信息:(a)具有正当合法的业务需求或目的,需要了解个人信息的我们的管理层、员工、代理人和关联方、子公司、业务合作伙伴和数据处理商/服务提供商;(b)供应商、和顾客和潜在买家,包括但不限于:上游供应商、临时工、咨询师、顾问、承包商、客户和需要相关信息以帮助我们管理与您的雇佣关系的外包服务提供商、潜在的商业伙伴或买家,以便其签署、履行和管控我们与其签订的合同,履行其作为个人信息接收者的法律义务,以及在必要时,在涉及我们向相关商业伙伴或买家的全部或部分业务出售、转让、合并、收购或以其他方式转让的情况下,将相关个人信息的控制权转让给该商业伙伴或买家;及(c)执法部门,其他政府机构或当局,或适用法律、法院指令、传票、法律程序、监管或行政命令、法律要求、程序要求、诉讼或适格的政府机构的强制要求所要求的第三方。
我们不允许我们委托并作为数据处理承包者的供应商作为数据处理商出于其自身目的处理您的个人信息。我们只允许他们根据我们的指示出于特定目的处理您的个人信息。
目前,我们可能会在下列情况下转让、共享或披露您的个人信息:
向关联实体或第三方转让或共享数据:
未经您的授权或适用法律允许,我们不会向其他第三方披露您的个人信息。
如果我们采取技术措施和其他必要措施对您的个人信息进行匿名化处理,则此类匿名化个人信息的转让、共享或披露无需另行通知您并征得您的同意。
我们在本隐私通知附表1中列出了截至本通知日期不受任何披露限制的个人信息数据接收者名单,该名单将根据业务需要不时更新。如果您需要更多信息,您可以向我们索取这些信息,并在下面第11节中提供我们的联系方式。在保密的前提下,我们可以相应地向您提供适当的信息。
转让对您个人信息的控制权
除以下情况外,我们不会在LISCR内部或外部转让对您个人信息的控制权。我们将要求个人信息接收方承诺按法律规定保护个人信息:
公开披露您的个人信息:
除下列情况外,我们不会公开披露您的个人信息:
在您的账户处于激活状态,或需要向您提供服务时,我们会保留您的个人信息。我们还会在必要时保留和使用您的信息,以履行我们的法律义务、解决争议和执行我们的协议。
6. 我们采取哪些措施保护您的个人信息
我们非常重视保护您的个人信息,并采取适当措施防止滥用、丢失、误用、未经授权访问、不必要的披露和未经授权的更改。例如,我们采取了适当的系统和网络安全措施,如防火墙、加密和补丁、访问控制,并用适当的密码保护便携式设备。此外,我们要求员工按照机密来处理您的个人信息。
我们只允许有业务需要的人员访问您的个人信息。处理您个人信息的人员只能以授权方式处理您的个人信息,并负有保密义务。
然而,我们无法保证或担保您通过互联网、电子邮件或其他电子通信方式传输给我们的任何信息的安全性,因此您自行承担风险。
如果您的个人信息必须从中国向外传输,我们会将您的个人信息存储在我们使用的信息系统平台、数据中心和应用程序中。但是,由于我们向全球提供服务,您的个人信息有可能由LISCR,LLC直接从中国收集,传输到中国或其他存储此类个人信息的国家或与之共享,也可能被我们位于中国境外实体以其他方式访问。
在这种情况下,当我们从中国内或境外传输、存储或处理您的个人信息时,我们将向您发出通知,并在法律要求的情况下征得您的同意,同时我们将确保遵守中国关于个人信息出境的相关法律法规,采取适当的保障和组织措施,以充分保证您的个人信息在适用法律要求的范围内,在中国境内得到同等保护。
除非法律另有规定,个人信息的保留期限将是实现跨境传输目的所需的最短时间。
对于您的个人信息,您拥有以下权利,您可以联系我们的隐私保护团队并提供下文第11节中列出的信息来行使以下任何权利。请注意,如果我们认为在我们协助您行使权利之前有必要识别您的身份,我们可能会要求您证明自己的身份。
要求和投诉可按照本隐私通知见下方中列出的联系方式寄出。我们将尽合理努力及时回复您的要求,并将在收到您的要求并完成身份验证后30天内或适用法律允许的期限内回复您的要求。
我们的服务不适合14岁以下的未成年人使用,我们不会有意收集该年龄段人的个人信息。如果您未满14周岁,请停止使用我们的服务。如果我们发现有未满14周岁的未成年人注册,我们将从我们的记录中删除任何相关的个人信息。
使用我们的服务即表示您确认自己至少已满14周岁。
本隐私通知可能会随着时间而变更。如果有变更,我们将通过修改本隐私通知顶部的日期来通知您。在某些情况下(例如,任何重要更新),我们可能会向您提供额外通知。本隐私通知的主要变更包括但不限于:
我们鼓励您在使用LISCR的服务时查看本隐私通知。
请记住,我们是来帮助您的!如果您对本隐私通知有任何疑问,或者有任何问题、意见或投诉,请请联系我们的数据保护专员:
中国上海
延安西路2201号
国际贸易中心2408室
邮编200336
如有要求,我们恳请您:
附表1–关联实体或第三方数据接收方名单
实体名称
| 联系方式
|
| |
请参阅我们在全球的分布情况的详细列表及关联实体的地址。
|
实体名称 | 联系方式 | 处理方式 |
| ||
B1. 美国境内的第三方数据接收方(作为数据控制者) | ||
| 22980 Indian Creek Drive, Dulles, VA 20166 USA | WayPoint, Microsoft 365 |
2. SeaNet Verification LLC | 22980 Indian Creek Drive, Dulles, VA 20166 USA | WayPoint, Microsoft 365 |
3. CorpKit Legal Supplies | 46 Taft Avenue, Islip, New York 11751 | Microsoft 365 |
B2. 美国境外的第三方数据接收方(作为数据控制者和数据处理受托方)
| ||
| Capitol Hill, Tubman Boulevard, Yekpi Town, Monrovia, Montserrado County, Liberia | Microsoft 365, Mail |
2. 利比里亚政府: Liberia Revenue Authority | Revenue House, ELWA Junction, Paynesville City, Liberia | Microsoft 365, Mail |
3. 利比里亚政府: Liberia Maritime Authority | 1948 Maritime Drive, Opposite EJS Ministerial Complex, Oldest Congo Town, Monrovia, Liberia | Microsoft 365, Mail |