PRIVACY NOTICE FOR WEBSITE USERS (“WEBSITE PRIVACY NOTICE”)

We respect the privacy of everyone who visits this website (“Site”). As such, we would like to inform you about the personal data we collect from you through your use of this Site and how we use such personal data.

Special Notice for Minors under 14 years old

We do not intentionally collect personal data of those under 14 years old and do not aim to market our services to those under 14 years old. If you are under 14 years old, please do not send us your personal data. If you are under 14 years old and wish to ask us a question or use our Site in a manner that requires you to submit your personal data, please get your parent or guardian to do so on your behalf.

What does this Privacy Notice apply to?

This Website Privacy Notice sets out the policy of Cadeler A/S (“we” or “us”) in relation to the personal data we collect through your use of our Site only.

This Website Privacy Notice explains what personal data we collect from you, for which purposes we collect and use such personal data, how long we retain the personal data, how to access and update your personal data and how to contact us for further information.

Who controls your personal information?

Unless otherwise specified at the relevant part of the Site, your personal data is ultimately controlled by Cadeler A/S, a company registered in Denmark with its business address at Fairway House, Arne Jacobsens Allé 7, DK-2300, Copenhagen S, Denmark.

What information do we collect from you and for what purposes do we use such information:

Personal information which you provide to us through our recruitment page or which you otherwise provide to us through our website when submitting any enquiry or feedback through our Site. Such personal information includes your name, address, telephone number, email and work experience.

Information collected automatically in relation to your use of the Site through the use of cookies and other technologies, such as:

- the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

- full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time); and

- products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number or social media handle used to connect with our customer service team.

We will use cookies in accordance with our Cookie Policy.

Legal basis and purpose for processing the data?

Our legal basis for processing your personal data could be any of or a combination of the following:

- to take steps at your request prior to entering into a contract with you, such as to respond to your query on our products and services, consider and evaluate your application for a position with us, where you have submitted personal information for the purposes of a job application;

- (only if legally required) with your explicit consent, for example to provide you with a service you have requested or reply to an enquiry or feedback you have submitted through our Site. In cases where we process your personal data based on consent, you have the right to withdraw your consent at any time. This will not affect the validity of our processing of your data prior to your withdrawal of consent;

- where necessary for the purposes of the legitimate interests of Cadeler A/S, where we have considered these are not overridden by your rights; and

- where necessary for us to comply with our legal obligations or to enforce or defend our legal rights.

The purposes for which we process your personal data include the above and in relation to our legitimate interests, include the following:

- marketing and development of the business – to promote our products and services, perform and analyse market surveys and marketing strategies, maintain and promote customer service and development; and

- managing and improving our Site – to improve our Site and ensure that content from our Site is presented in the most effective manner for you and your computer, to administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, to keep our Site safe and secure.

Who do we share your information with?

We may share your personal data in the following circumstances:

- with our authorised third-party service providers who process personal data on our behalf;

- where we have your explicit consent to do so for the particular purposes you have consented to;

- where we are authorised or required by law, or exempted by any applicable legislation, to do so; and

- in order to enforce or defend our legal rights.

By using our Site and providing your personal information to us through our Site, you agree to us using the personal information we collect from you and your use of our Site in accordance with the terms of this Privacy Notice and applicable data protection laws and regulations.

Transfers of personal data

Where the personal data may be transferred to authorised parties located outside of your country (including outside of the European Union) we take corporate, contractual and legal measures to ensure that your personal data is processed strictly on a need-to-know basis for the purposes mentioned above and that adequate levels of protection have been implemented to safeguard your personal data. These measures include European Commission approved transfer mechanisms for transfers to third parties in countries which have not been deemed to provide an adequate level of data protection.

Safeguarding your personal data

As we value the privacy of your personal data, we have implemented technology and policies to protect your personal data from unauthorised access, modification and improper use. We will treat all personal information you provide us through the Site confidentially and securely in compliance with this Privacy Notice.

Your privacy rights and who to contact

You have the right in certain circumstances to:

- request for information on the data we hold about you; 

- and correct or update your personal information which you have provided to us.

Please contact enquiry.DNK@cadeler.com if you have any questions, comments or concerns about how we handle your personal data. To assist us in dealing with your request, please provide your full name and details. Please allow us reasonable time to respond to your request and effect any change.

If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority (see http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm) for further assistance.

How long do we retain your personal data?

For personal data submitted for job applications through our Site, please refer to our Privacy Notice for job applicants on our retention policy for such information.

For all other personal information submitted through our Site by you, we will delete such personal data without undue delay once there is no longer a legitimate purpose to retain it, or where you object to or withdraw your consent for the processing of your personal data.

Please note that in all cases, we may retain the personal data for a longer period of time where there is a legal or regulatory requirement to do so.

Changes to this Website Privacy Notice

This Website Privacy Notice may be changed over time. You are advised to regularly review the Website Privacy Notice for any changes made.

Privacy Notice for Business Relations

About this Privacy Notice

Cadeler is committed to protecting the privacy and security of your personal data in compliance with all applicable data protection and privacy laws.

This Privacy Notice applies to any personal data Cadeler A/S and its subsidiaries (collectively, "Cadeler," "we," or "us") collects from individuals who work for or on behalf of, or who are shareholders of, companies which have a business relationship with Cadeler, including individual contractors, our suppliers (including potential suppliers who register an interest on our website), clients, professional advisors, business partners and investors. It describes how Cadeler collects and processes personal data about you before, during and after your business relationship with us.

If you visit our website (www.cadeler.com), please also refer to our Website Privacy Notice to learn more about the information we collect and use through these types of interactions.

As data protection is important to Cadeler, we may also provide you with additional data privacy notices or information that is specific to your situation – and if we do, you need to read that additional information alongside this Privacy Notice.

Data controller

Unless otherwise specified in the agreement governing your company’s business relationship with Cadeler, your personal data is ultimately controlled by Cadeler A/S, a company registered in Denmark with its business address at Kalvebod Brygge 43, DK-1560 Copenhagen.

What is personal data?

For the purposes of this Privacy Notice, personal data means any information about an identifiable individual. This excludes anonymous or de-identified data that is not associated with a particular individual.

We will only process your personal data in accordance with this Privacy Notice unless otherwise required by applicable law. We take steps to ensure that the personal data that we collect about you is adequate, relevant, not excessive, and processed for limited purposes.

What personal data do we collect about you?

Contingent on the nature of our business relationship, we may collect, store, and process the following categories of personal data about you:

• business contact information, including name, company, job title, work address or location, work email address, work telephone number(s), and bank account and payment information;
• personal contact and identification details (only where required) such as name, title, address, telephone numbers, personal email addresses, date of birth, nationality and gender;
• personal data that are necessary for signing documents, including signature, certificates and authorisations;
• personal data that are necessary for the assessment of experience in prequalification and tendering processes, such as certificates and resumes;
• personal data that are necessary for contract management, including contact information, information about individual project participants, and information related to overall performance as relevant to the business relationship; and
• personal data that are necessary for compliance with record-keeping, regulatory, legal, and health and safety requirements, including information about training and certifications, photographs, next of kin and emergency contact information, and copies of identity documents such as a passport.

What do we use your personal data for?

We need the personal data specified above for the following legitimate business purposes and for the purposes of fulfilment of our business relationship with you:

• managing our business relationships and contracts (including communications, sending purchase orders, invoicing, concluding commercial agreements, account management and business development);
• prequalification and tendering (including communications and assessing qualifications and expertise for the delivery of goods or services);
• compliance with applicable record-keeping, legal or regulatory (including immigration) requirements and/or internal policies (including third-party due diligence/screening processes);
• complying with health and safety obligations;
• port, vessel and site access control and security requirements; and
• provision of access to relevant systems.

We will only process your personal data for the purposes we collected it for or for compatible purposes. If we need to process your personal data for an incompatible purpose, we will provide notice to you and, if required by law, seek your consent. We may process your personal data without your knowledge or consent where required by applicable law or regulation.

You will not be subject to decisions based on automated data processing without your prior consent.

Who do we collect your personal data from?

Contingent on the nature of our business relationship with you, we collect personal data from you, your employer, and public sites (e.g., your company website).

What is our legal basis for using your personal data?

We only process your personal data where applicable law permits or requires it, including where the processing is necessary:

• For the performance of a contract between the company you represent and Cadeler.
• To comply with a legal obligation that applies to Cadeler as part of the business relationship.
• For our legitimate interests or the legitimate interests of third parties (e.g., our clients), provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data collected. Legitimate interests may include optimizing our business processes; providing a safe system of work; and taking reasonable care of your health and safety and that of others.

In limited circumstances we may also need to process your personal data on the following legal grounds:

• Obtaining your explicit consent for specific processing purposes.
• Where it is necessary to protect the vital interests of you or another individual.

Some of these grounds for processing may overlap and there may be several grounds which justify our use of your personal data.

What about special categories of personal data?

Personal data relating to criminal convictions, offences and proceedings and the following special categories of personal data may receive higher levels of protection under applicable laws:

• Racial or ethnic origin.
• Political opinions.
• Religious or philosophical beliefs.
• Trade union membership.
• Genetic data.
• Biometric data.
• Data concerning health.
• Data concerning sex life or sexual orientation.

We may only collect and process these types of data where:

• we have obtained your explicit written consent;
• we need to carry out our legal obligations;
• it is needed in the public interest;
• it is needed to assess your working capacity on health grounds (subject to appropriate confidentiality safeguards);
• it is needed in relation to legal claims;
• it is needed to protect your or someone else’s interests and you are not capable of giving your consent; or
• you have already made the information public and we have a legitimate business reason for processing it.

We will only collect and use personal data relating to criminal convictions, offences and proceedings if it is appropriate given the nature of your business relationship with us and where we are legally permitted to do so.

Where we have a legitimate need to process personal data relating to criminal convictions, offences and proceedings, and special categories of personal data for purposes not identified above, we will do so only after providing you with notice and, if required by law, obtaining your prior, express consent.

Who do we share your personal data with?

In connection with the purposes outlined above, your personal data may be disclosed to and shared with the following recipients:

• public authorities (e.g., regulators and other authorities);
• port authorities;
• our professional advisors (e.g., external auditors and legal advisors);
• suppliers, clients and/or business partners who work with us (as applicable to the business relationship); and
• other Cadeler entities (see entities in our annual report at www.cadeler.com).

Do we transfer personal data across borders?

Where permitted by applicable law and as necessary for the purposes outlined above, we may transfer your personal data to recipients located in other countries that may not be deemed to provide the same level of data protection as your home country. In these circumstances, we will ensure that when we transfer your personal data we will protect it by using the appropriate contractual and technical controls applicable.

How do we secure your personal data?

We have implemented appropriate physical, technical, and organisational security measures designed to secure your personal data against accidental loss and unauthorized access, use, alteration, or disclosure. In addition, we limit access to personal data to those employees, agents, contractors and other third parties that have a legitimate business need for such access.

We require all third parties (including our third-party vendors and service providers) whom we need to share your personal data with, by written contract, to implement appropriate security measures to protect your personal data consistent with our policies and any data security obligations applicable to us as your employer. We do not permit third parties who process your personal data on our behalf to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes in accordance with our instructions.

How long do we store your personal data for?

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for personal data, we consider applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes we process your personal data for, and whether we can achieve those purposes through other means.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your rights and obligations

Subject to conditions set out in applicable data protection legislation, you enjoy the following rights:

• The right to request access to your personal data.
• The right to complete any incorrect or incomplete personal data (rectification).
• The right to deletion or removal of your personal data (erasure).
• The right to suspension (restriction) of processing your personal data.
• The right to transfer your personal data to another party (portability).
• The right to object to the processing of your personal data.

Please note that these rights are not absolute, as they should always be balanced against any legal requirements and Cadeler’s legitimate interests.

You also have the right to make a complaint with the data protection authority in your jurisdiction.

If you want to review, verify, correct, or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us at ethicsandcompliance@cadeler.com.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal data that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Your right to withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing, or transfer of your personal data, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at ethicsandcompliance@cadeler.com.

Contact

Please contact ethicsandcompliance@cadeler.com if you have any questions regarding the protection of your personal data or if you wish to exercise any of your legal rights.

Cadeler A/S
Kalvebod Brygge 43
DK-1560 Copenhagen
Denmark

Changes to this Privacy Notice

Cadeler will review and update this Privacy Notice as necessary, so please check back regularly to review the latest version.

This Privacy Notice was last updated in July 2024.