Last updated: April 2026
1. Introduction
L&N Supply Ships ApS ("LNSS", "we", "us", "our") is committed to protecting the personal data of our clients, partners, employees and website visitors. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
2. Data Controller
The data controller for personal data processed in connection with our services and this website is:
3. What Personal Data We Collect
In the course of providing maritime supply, agency and related services, we may collect and process the following categories of personal data:
- Contact information — name, business email, phone number, company name and role, provided through our website or in direct correspondence.
- Operational information — vessel particulars, port-call details, crew rosters, identification documents (e.g. passport copies for crew change services), and other information necessary to deliver our services.
- Financial information — billing addresses, VAT numbers, invoice details and payment records.
- Website data — IP address, browser and device information, pages visited, and information collected via cookies (see our Cookie Policy).
- Job applicants — CVs, contact details and other information voluntarily submitted in connection with employment.
4. How We Use Personal Data
We process personal data for the following purposes:
- Responding to enquiries received through our website, email or telephone.
- Negotiating and performing service contracts with shipowners, agents and other commercial partners.
- Coordinating port operations, customs handling, crew changes and related logistics.
- Issuing invoices and managing accounting records.
- Complying with statutory obligations, including Danish bookkeeping and tax law.
- Communicating with authorities such as customs, port authorities and immigration services.
- Improving the website and our services.
- Recruitment and employee administration.
5. Legal Basis
We rely on the following legal bases under Article 6 of the GDPR:
- Performance of a contract — to deliver the services you or your organisation have requested.
- Compliance with a legal obligation — for example, retention of accounting records under the Danish Bookkeeping Act.
- Legitimate interests — for the day-to-day administration of our business, communications with existing clients, and IT security.
- Consent — for non-essential cookies and any direct marketing, where required.
6. Sharing of Personal Data
We may share personal data with the following recipients, where necessary and lawful:
- Customs authorities, port authorities, immigration services, and other public bodies in connection with port-call and crew-change operations.
- Subcontractors and partners involved in delivering services — for example, shipping agents, transport providers, divers and towage operators.
- IT service providers, including hosting and email providers.
- Accountants, auditors and legal advisors.
- Banks and payment service providers.
We require all recipients to handle personal data in accordance with applicable data protection law and, where they act as data processors, have written data processing agreements in place.
7. International Transfers
Most of our processing takes place within the European Economic Area (EEA). Where personal data is transferred outside the EEA — for example, when communicating with shipowners or agents in third countries during an operation — we ensure such transfers are lawful and appropriately safeguarded under the GDPR, typically through the European Commission's Standard Contractual Clauses or equivalent mechanisms.
8. Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
- Accounting records and supporting documentation are kept for five years following the end of the financial year, in accordance with the Danish Bookkeeping Act.
- Operational records (e.g. port-call documentation) are retained for the duration of the commercial relationship and a reasonable period thereafter.
- Job application data is retained for up to six months after the recruitment process ends, unless you consent to longer retention.
- Website analytics data is retained for the period set out in our Cookie Policy.
9. Your Rights
Under the GDPR you have the following rights in respect of your personal data:
- The right to be informed about how your data is processed.
- The right of access to the data we hold about you.
- The right to rectification of inaccurate data.
- The right to erasure ("right to be forgotten") in certain circumstances.
- The right to restrict processing.
- The right to data portability.
- The right to object to processing based on legitimate interests.
- The right to withdraw consent, where processing is based on consent.
To exercise any of these rights, please contact us at booking@lnss.dk. We will respond within one month, in line with the GDPR.
If you believe our processing infringes the GDPR, you have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) — Carl Jacobsens Vej 35, 2500 Valby, Denmark — datatilsynet.dk.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include access controls, encrypted communications where appropriate, secure backups and staff training. No system is completely secure, but we work to minimise risks and respond promptly to any incidents.
11. Cookies
This website uses cookies and similar technologies. For full details, please see our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be communicated through our website.
13. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us: