Quality policy
CB Maritime is committed to meeting quality requirements of all interested parties and will conduct its business affairs in a safe, efficient, reputable manner in the best interest of its clients, the office staff and the environment. CB Maritime has determined external and internal issues that are relevant to its purpose and its strategic direction and that affects its ability to achieve better results of its quality management issues. CB Maritime shall ensure that the quality policy includes a commitment to comply with requirements and continually improve effectiveness of the quality management system in accordance with ISO 9001:2015. It is a requirement that this Quality Policy is recognized at all levels within the Company and that the office staff implement the requirements of the Quality System within their areas of work.

Policy on Recruitment, Selection and Appointment of Seafarers
The company recognizes and endorses the requirements of STCW 95 convention (as amended) and MLC 2006 and considers that these requirements are the minimum for all seafarers appointed to manage vessels. Our seafarers are to be:

• competent – capable of doing their job,
• motivated – wanting to do their job,
• trained – taught how to do their job,
• aware of their safety and environmental responsibilities.

Health, Safety and Environmental Policy
The policy is that all activities will be taken for the need to protect the health and safety of the Company’s employees and other involved persons and conserve the environment. The aim is to eliminate work–related injuries and illnesses, and to achieve high standards of environmental protection.

Agency policy
The company will process all activities as agent in accordance with National and International rules. The requirements of Association of Ship Brokers and Agents of Croatia will be endorsed. Our service as agent is to be good, fast and professional at a cost that our client will pay.

The duties of the Agent are:

• to act as a diligent and conscientious business man;
• to act within the limits of the authorization;
• to take steps to execute the orders;
• to inform the client on the execution of the orders;
• to present statements of accounts to the client;
• to disclose that he is acting as an agent;
• to keep the professional secrets.

Download:
ISO 9001:2015 Certificate

Data Protection Policy

Purpose
The purpose of this procedure is to ensure protection of personal data, scanned personal documents and scanned seafarer´s certificates which are collected from our employees, seafarers, clients, external providers, or potential employees and seafarers.

Definitions
Data protection ensures maximum possible protection of personal data, scanned personal documents and scanned seafarer´s certificates which are collected from our employees, seafarers, clients, external providers, or potential employees and seafarers, according to the General Data Protection Regulation (GDPR), the Act on Implementation of the General Data Protection Regulation and other applicable regulations.

Responsibilities
All office staff are responsible for data protection as described in this procedure. All office staff sign Personal Data Collection Statement and declare to keep all information regarding personal data, scanned personal documents and scanned seafarer´s certificates as confidential forever.
The Administrative Manager has to nominate authorized person for data protection.

Description of Procedures

1. Data collection
CB MARITIME is Data controller. The personal data, scanned personal documents and scanned seafarer´s certificates are collected on the behalf of CB MARITIME.
The Administrative Manager has to collect personal data and scanned personal documents from employees for the purpose of employment.
All office staff have to collect personal data, scanned personal documents and scanned seafarer´s certificates for the purpose of employment or recruitment of seafarers.
Data are also collected from our Clients and External providers for the purpose of conducting everyday business according to the regulations.
If it is not legal obligation, we do not collect and process personal data from our clients or external providers.
The data are collected according to Document list and record of processing activities, Record 6, QRM. It determines what personal data, scanned personal documents and scanned seafarer´s certificates are collected, source, for what purpose of processing, what is the legal basis for collecting, where the process is taking place, types of processing, if they are transferred to third parties and to whom, and retention period.

2. Data processing
All IT equipment is protected with antivirus software, firewalls and passwords. The computer database is protected with password. The Administrative Manager decides the level of access for each employee. Each employee has personal password and access to relevant personal data, scanned personal documents and scanned seafarer´s certificates.
All office staff enter, change or erase personal data, scanned personal documents and scanned seafarer´s certificates into computer database. All office staff have to file personal data, scanned personal documents and scanned seafarer´s certificates into seafarers’ files or other relevant folders. Only office staff has access to folders in the office.
The Administrative Manager has to file personal data and scanned personal documents of employees, including data of Clients and External providers in required folders according to legal obligations.

3. Data transfer
All seafarers have to sign Personal Data Collection Statement.
All office staff, as per Job description, have to transfer personal data, scanned personal documents and scanned seafarer´s certificates to third parties in Croatia or other countries only when it is absolutely necessary for employment of our staff, or recruitment and placement of seafarers according to the regulations and request of recruiting company, including for the purpose of fulfilling any other possible legal obligations that may occur. If none previously condition is fulfilled, personal data, scanned personal documents and scanned seafarer´s certificates can be transferred to third party, only if person has signed the consent.
CB Maritime has to sign Data Privacy Agreements with accounting services (Data processors), port agents, external providers and other third parties.

4. Candidates’ data
Upon receiving e-mail from candidate, Marine Personnel Officer has to inform the candidate about Company’s Data protection procedure. Each candidate has to receive the reply. If the candidate agrees with our policy, CB Maritime has to store his CV in folders. If a candidate does not agree with Company’s Data protection procedure, he has to send a request for deleting his data to the following e-mail address: contact@cbmaritime.hr and all his data will be deleted and candidate will be informed about that fact.

5. Changing and deleting data
All persons whose personal data, scanned personal documents and scanned seafarer´s certificates are kept in computer base and/or folders, have right to request to add some new data, change data or delete data in computer base and/or folders, including any other request, if it is legal possible according to the General Data Protection Regulation (GDPR), the Act on Implementation of the General Data Protection Regulation and other applicable regulations. The person has to send a request by mail to the following mailing or e-mail address:
CB MARITIME d.o.o., Riva 4, 51000 Rijeka, Croatia
contact@cbmaritime.hr
The authorized person for data protection has to reply in the shortest possible time.

6. Data breach
The authorized person for data protection has to make a report about lost personal data, scanned personal documents and scanned seafarer´s certificates and inform in writing authorized state agency (AZOP) within 72 hours and person whose data has been lost about the size of the damage, what data have been lost, including what measures have to be done to repair the damage for all involved parties.

7. Retention period
Personal data, scanned personal documents and scanned seafarer´s certificates should be kept for the period as defined in Document list and record of processing activities.