OLSPS Privacy Policy
Effective Date: 01.01.2026
1. Introduction
This Privacy Policy describes how OLSPS INTERNATIONAL, UNIPESSOAL LDA (“OLSPS”) processes Personal Data in connection with its website, software services, and related business operations.
Depending on the context of the processing activity, OLSPS acts either as a Data Processor or as a Data Controller. This Policy explains those roles and the applicable responsibilities.
This Policy is intended to reflect compliance with applicable data protection laws, including Regulation (EU) 2016/679 (General Data Protection Regulation), and other applicable data protection legislation.
2. Definitions
“Controller” means the entity that determines the purposes and means of Processing.
“Customer” means a business entity that has entered into an agreement with OLSPS for the provision of Services.
“Data Processing Agreement” means a written agreement between OLSPS and a Customer that governs the Processing of Personal Data by OLSPS in its capacity as a Processor on behalf of the Customer, and that sets out the subject matter and duration of the Processing, the nature and purpose of the Processing, the types of Personal Data involved, the categories of Data Subjects, and the obligations and rights of the parties, in accordance with applicable data protection laws.
“Personal Data” means any information relating to an identified or identifiable natural person.
“Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, restriction, or deletion.
“Processor” means an entity that Processes Personal Data on behalf of a Controller.
“Services” means the software solutions and related services provided by OLSPS.
3. Identity of the Controller
Where OLSPS acts as a Controller of Personal Data, the Controller is:
OLSPS INTERNATIONAL, UNIPESSOAL LDA
Company Registration Number: 513826920
Registered Office: Rua das Chagas 20 R/C E EQS 1200-107, Lisbon, Portugal
Email for Privacy Inquiries: support@olsps.com
OLSPS may be contacted using the details above regarding the processing of Personal Data or the exercise of applicable data protection rights.
4. When OLSPS Acts as a Data Processor
In relation to Personal Data submitted or made available by Customers in connection with the Services, including data relating to fishing operations, vessels, crew members, catch records, and geographic location data, OLSPS acts solely as a Processor.
In this context:
- The Customer is the Controller.
- OLSPS Processes Personal Data only on documented instructions from the Customer.
- OLSPS does not Process such Personal Data for its own independent purposes.
- OLSPS does not use such data for analytics, benchmarking, product development, or commercial exploitation.
- OLSPS implements and maintains appropriate technical and organisational measures designed to protect such data.
- When OLSPS engages Sub-Processors, it shall do so under written agreements that impose appropriate data protection obligations.
Individuals seeking to exercise rights in relation to such Personal Data should contact the relevant Customer.
Processing of Customer Personal Data is governed by the Data Processing Agreement forming part of the applicable terms of use.
5. When OLSPS Acts as a Data Controller
OLSPS acts as a Controller in relation to Personal Data processed for its own business purposes, including:
- Website registration and account creation
- Customer account administration
- Billing and invoicing
- Customer support communications
- Security monitoring and system integrity
- Compliance with legal obligations
- Management of contractual relationships
6. Categories of Personal Data
Where OLSPS acts as a Controller, categories of Personal Data may include:
- Identification data such as name and job title
- Contact details such as email address and telephone number
- Account credentials
- Billing and financial data
- Technical data such as IP address, browser type, device information, and access logs
- Communication records
OLSPS does not intentionally collect special categories of Personal Data unless required by law or voluntarily provided.
7. Purposes of Processing and Legal Basis
Where OLSPS acts as a Controller, Personal Data may be processed for:
- Provision of Services and account management.
Legal Basis: Performance of a contract
- Billing, invoicing, and financial administration.
Legal Basis: Performance of a contract and compliance with legal obligations
- Security monitoring, fraud prevention, and system protection.
Legal Basis: Legitimate interests in ensuring system integrity and preventing unauthorised access
- Compliance with applicable legal and regulatory requirements.
Legal Basis: Legal obligation
Where Processing is based on legitimate interests, OLSPS has conducted an assessment to determine that such interests are not overridden by the rights and freedoms of individuals, taking into account reasonable expectations.
8. Data Sharing and Sub-Processors
Personal Data may be disclosed to:
- Cloud infrastructure providers
- Payment processors
- IT and technical service providers
- Professional advisors
- Regulatory authorities where required by law
Service providers are engaged under written agreements requiring appropriate confidentiality, security, and data protection obligations. OLSPS conducts reasonable due diligence prior to engagement.
A current list of Sub-Processors is available upon request.
9. International Data Transfers
Personal Data may be transferred to and processed in jurisdictions outside the individual’s country of residence.
Where such transfers occur and where required under applicable law, OLSPS relies on legally recognized transfer mechanisms and implements contractual and organisational safeguards designed to provide an appropriate level of protection consistent with applicable data protection requirements.
10. Data Retention
Personal Data processed as Controller is retained for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy contractual, legal, regulatory, accounting, or reporting obligations.
Retention periods are determined based on applicable legal requirements, contractual commitments, and legitimate business needs.
Personal Data processed as Processor is retained in accordance with Customer instructions and contractual terms.
Upon termination of Services, Personal Data is returned or deleted in accordance with contractual obligations and applicable law.
11. Data Security
OLSPS implements and maintains appropriate technical and organisational measures designed to protect Personal Data against unauthorised access, loss, misuse, alteration, or disclosure, taking into account the nature of the data processed, the risks involved, and the state of the art.
Such measures may include role-based access controls, encryption in transit where appropriate, logging and monitoring, internal policies governing data access, and vendor due diligence procedures.
While OLSPS applies reasonable safeguards, no method of transmission over the internet or method of electronic storage is entirely secure. Accordingly, OLSPS cannot warrant absolute security.
Security measures are periodically reviewed and updated as appropriate to address evolving risks.
12. Data Subject Rights
Where OLSPS acts as a Controller, individuals may have the right, subject to applicable law, to:
- Request access to their Personal Data
- Request rectification of inaccurate data
- Request erasure
- Request restriction of Processing
- Object to Processing based on legitimate interests
- Lodge a complaint with a competent supervisory authority
OLSPS will assess and respond to requests in accordance with applicable law. In certain circumstances, OLSPS may limit or decline a request where permitted by law.
Where OLSPS acts as a Processor, individuals should contact the relevant Customer.
13. Cookies and Tracking Technologies
The OLSPS website uses cookies and similar technologies for functionality, security, and analytics purposes.
Where required under applicable law, appropriate consent mechanisms are implemented. Additional information is provided in the Cookie Policy.
14. Children’s Data
The Services are not directed to children under the age of 16. OLSPS does not knowingly collect Personal Data from children.
15. Changes to This Policy
OLSPS may update this Privacy Policy from time to time. The updated version will be published on the website with a revised effective date.
16. Contact
For privacy-related inquiries:
Email: support@olsps.com
Address: Rua das Chagas 20 R/C EQS 1200-107, Lisbon, Portugal
Individuals located in the European Union may also contact the competent supervisory authority in their country of residence.