Privacy Notice — EWRICON

Version 2026-10. This notice supplements the MARINCON Privacy Policy and applies to the EWRICON web application.

1. Controller

MARINCON GmbH & Co. KG, Katharinenstr. 4, 20457 Hamburg, Germany, E: info@marincon.de, P: +49 40 33 47 55 0.

2. What EWRICON is

EWRICON is a login-protected tool for professional customers of MARINCON. It calculates indicative war risk premiums (hull & machinery, increased value, loss of hire) for areas listed by the Joint War Committee and lets users request an official quotation from MARINCON.

3. Data we process, purposes and legal bases

Registration and account: name, company, business e-mail address, password (stored only in encrypted form by our authentication provider), time of registration and approval status, and, if you registered through an invitation link, which client company invited you. Purpose: access control, because EWRICON is only available to approved business customers. Legal basis: Art. 6(1)(b) GDPR (steps prior to / performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in protecting confidential rates and our systems).
Calculations and quotation requests: when you create an indication or request a quotation we store the time, your user account and company, the area(s) and route, vessel name, IMO number, insured values, currency, the indicative rate, an issued reference number (EWRI-…) and, for quotation requests, a snapshot of the indication (PDF content) and the processing status. Purpose: processing your request, preparing the official quotation, documenting the advice given, and managing our business. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest in an efficient, traceable quotation process and in protecting our rates from misuse).
Saved fleet data (“My Fleet”): vessel names, IMO numbers and insured values that you or colleagues of your company save. They are visible to users of your company. Legal basis: Art. 6(1)(b) GDPR.
Firm quotation, cover note and entry / exit declarations: if MARINCON issues a firm quotation we store it with its validity and your decision (acceptance or decline, with time and an optional comment). For cover that is placed we prepare and store the cover note and schedule. If you declare the entry into or exit from an area, we store the declared times, the time zone, an optional note and the time of the declaration; MARINCON staff are notified of each declaration. Purpose: concluding and performing the insurance contract and documenting the cover. Legal basis: Art. 6(1)(b) GDPR.
Invoices: if MARINCON uploads an invoice for your business in EWRICON, we store the PDF and make it available to you in My Quotations; the invoice also follows by e-mail. Purpose: invoicing and documentation. Legal basis: Art. 6(1)(b) GDPR and, for retention, Art. 6(1)(c) GDPR (statutory retention periods).
Invitation link: approved customers can display a personal invitation link in EWRICON. We store a code for your company. We do not send any e-mail to third parties on your behalf; people you invite register themselves, and we then record which company invited them. Purpose: managing recommendations and customer relations. Legal basis: Art. 6(1)(f) GDPR.
Notification e-mails: for open business we send automatic notification e-mails to the e-mail address of your user account, for example: request received, quotation available, quotation about to expire or expired, confirmation of your acceptance or decline, cover note available, invoice available, access approved, and entry or exit recorded by MARINCON. They contain only the reference number, the vessel name and the relevant time, no premium or cover details, and are sent from a no-reply address. Purpose: performing the contract and keeping you informed about your cases. Legal basis: Art. 6(1)(b) GDPR.
Internal notifications: so that we can react quickly, MARINCON staff are informed about new requests, decisions on quotations, entry and exit declarations and account requests, and receive a daily overview of open cases, by e-mail to our placing mailbox and by a messaging service. These messages contain the company, the name and e-mail address of the user concerned, vessel name and IMO number and the status, but no premium and no comment text. Legal basis: Art. 6(1)(f) GDPR (our interest in timely and reliable handling of requests).
Internal handling: MARINCON staff see requests, their status, notes and the responsible handler in an internal area. If a quotation is placed, we also record internally the insurer, the premium and MARINCON’s brokerage for that business; this information is not visible to customers. We may also record internally a client discount agreed for your company and, if your company invited another client, that invitation. Legal basis: Art. 6(1)(b) and (f) GDPR.
Technical data: when you visit the site our hosting provider processes your IP address and technical request data (browser, time, requested file) in server logs for a short time to deliver the site and ensure security. Legal basis: Art. 6(1)(f) GDPR.

We do not use analytics, tracking or advertising tools. Indicative rates are calculated automatically; no decision with legal effect is made solely by automated means, the official quotation is always issued by MARINCON.

4. Cookies and local storage

EWRICON stores only technically necessary information in your browser: the login session and local display settings (for example light/dark mode, map style and remembered tabs or filters, or an invitation code from an invitation link until your registration is completed). No consent is required for this (Section 25(2) No. 2 TDDDG). You can delete this data at any time in your browser settings; you will then need to log in again.

5. Recipients and service providers

Supabase (authentication and database; data stored in the EU, region Ireland) as processor.
IONOS SE (Montabaur, Germany) for sending the notification e-mails and for our mailboxes, as processor.
Messaging service for internal notifications: the internal messages described in Section 3 are delivered through the messaging service Telegram. Its provider may process data outside the EU.
Vercel Inc. (hosting of the website and server functions) as processor.
Vessel tracking (AIS data): if you use the vessel tracking function, the IMO number of the vessel is sent from our server to VesselAPI.com, which returns the current AIS position. The request is made by our server, so your IP address is not transmitted to this provider. Only vessel data is exchanged, no personal data of your account. Legal basis: Art. 6(1)(b) GDPR.
Map tiles and software libraries: the map background is loaded from Esri (server.arcgisonline.com), some software libraries from content delivery networks (cdnjs.cloudflare.com, cdn.jsdelivr.net). When these resources are loaded, your IP address is transmitted to the respective provider, which is technically unavoidable. Legal basis: Art. 6(1)(f) GDPR.
Insurers and co-brokers: to obtain a quotation for you we pass on the details of your enquiry (client, vessel, IMO, area, voyage, insured values) to the insurers or brokers we approach. This is done to carry out your request (Art. 6(1)(b) GDPR). Your login details are not passed on.

Some providers are based in or may access data from the USA. Where this is the case, the transfer is based on an adequacy decision of the European Commission or on the EU standard contractual clauses (Art. 44 et seq. GDPR).

6. Storage period

Account data is kept as long as your account exists and is deleted after you ask us to close it, unless retention is required by law. Quotation requests and the related documentation are kept as long as needed for processing and for the statutory commercial and tax retention periods and limitation periods. Entries you remove from “My Quotations” are only hidden from your list; MARINCON keeps the record for the reasons stated.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests (Art. 15–21 GDPR). Please contact info@marincon.de. You may also lodge a complaint with a supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).

8. Obligation to provide data

Registration and the data requested in the calculation form are necessary to use EWRICON and to receive a quotation. Without them we cannot provide these services.