GDPR & ePrivacy Directive Compliance

Privacy & Data Protection Policy

Last Updated: September 13, 2026 • Effective for SeaMedic AI (seamedic.al-nexus.com)

Welcome to SeaMedic AI™, operated by AL Nexus SIA. We take the privacy and confidentiality of mariners, skippers, and website visitors seriously. This Privacy Policy sets out in plain, transparent language how we collect, handle, store, and protect your personal data in full compliance with the General Data Protection Regulation (EU 2016/679 - GDPR) and the ePrivacy Directive (2002/58/EC).

Key Takeaway: We do not track you across the web, we do not deploy third-party advertising or marketing cookies, and we never sell or share your contact details. Any information you submit for early access is strictly used to notify you about product availability.

1. Data Controller Information

Pursuant to Article 4(7) of the GDPR, the Data Controller responsible for the processing of personal data on this website is:

For any questions regarding this policy or the processing of your personal data, please contact our data governance team at info@al-nexus.com.

2. Personal Data We Collect & Legal Basis

We adhere to the principle of Data Minimisation (GDPR Art. 5(1)(c)). We only collect information strictly required to communicate with prospective users regarding the development and release of SeaMedic AI:

Data Category Purpose of Processing GDPR Legal Basis
Email Address Sending early-access invitations, testing beta invites, and launch notices for SeaMedic AI. Consent (GDPR Art. 6(1)(a)). You freely provide this by entering your email.
Selected Plan & Region Understanding demand for specific sailing tiers (e.g., Solo/Couple, Captain-Medic) and cruising zones (e.g., Mediterranean, Atlantic). Consent / Legitimate Interest (GDPR Art. 6(1)(a) & (f)).
Submission Timestamp Maintaining accurate chronological audit trails of subscriber sign-ups. Legitimate Interest (GDPR Art. 6(1)(f)).
Masked IP Address Preventing automated spam bots, rate-limiting malicious submissions, and server security. Legitimate Interest (GDPR Art. 6(1)(f)). IP addresses are pseudonymised / truncated.

3. Cookie & Tracking Policy (ePrivacy Directive)

In accordance with Directive 2002/58/EC (amended by Directive 2009/136/EC) and recent rulings of the European Court of Justice (CJEU Planet49):

4. Hosting, Data Storage & Sub-Processors

Personal data collected via our forms is held securely within the European Union under appropriate technical and organizational measures (TOMs) as required by GDPR Article 32:

5. Data Retention Period

Personal data collected for early-access notifications will be stored only for as long as necessary to fulfill the purpose for which it was collected:

6. Your Rights as a Data Subject

Under Chapter III of the GDPR, you hold enforceable rights regarding your personal data:

  1. Right of Access (Art. 15): You have the right to request confirmation as to whether your personal data is being processed, and to receive a copy.
  2. Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete data.
  3. Right to Erasure / "Right to Be Forgotten" (Art. 17): You have the right to have your email address and submission permanently deleted from our records.
  4. Right to Restriction of Processing (Art. 18): You may request restriction of data processing in specified circumstances.
  5. Right to Data Portability (Art. 20): You may receive your data in a structured, commonly used, and machine-readable format (e.g., CSV or JSON).
  6. Right to Withdraw Consent (Art. 7(3)): You may withdraw your consent for email updates at any time with future effect, without affecting the lawfulness of processing based on consent prior to withdrawal.

How to Exercise Your Rights: Simply email us at info@al-nexus.com with the subject line "GDPR Request / Unsubscribe". We will process your request free of charge within 30 days.

7. Right to Lodge a Complaint

If you consider that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent supervisory authority (GDPR Art. 77).

Our lead supervisory authority in Latvia is:

You may also contact your local national Data Protection Authority (DPA) within your EU Member State of habitual residence or workplace.

8. Informational Nature & Medical Disclaimer

SeaMedic AI™ is an informational technology solution currently in development by AL Nexus SIA. It does not provide telemedicine diagnosis, and does not replace official maritime rescue communication (MRCC/VHF Ch 16) or licensed maritime emergency physicians (TMAS). No health records or patient diagnostics are gathered on this marketing landing page.