NexGen Shipping JA

Revised: February 20, 2025

Overview of the policy and introduction

NexGen Shipping and its operating groups, subsidiaries, and divisions (collectively, “NexGen”) are dedicated to adhering to relevant data privacy laws, regulations, internal rules, and standards because they understand how important it is to have strong privacy measures in place. These safeguards serve as the cornerstone of a reliable business, are essential to preserving the trust of clients and staff, and guarantee the organization’s adherence to local regulations. This Global Privacy Policy (“Policy”) is founded on well recognized, fundamental data protection principles.

Personal Data

Any information that can be used to identify a natural person, whether that person is a vendor or a vendor’s employee, a customer or a customer’s employee, a job candidate, or any other third party, either directly or indirectly. For instance:
Names,
Government-issued identity numbers, such as driver’s license and TRN numbers Addresses,
Telephone numbers,
Email addresses

Whether the personal information is on paper, in computer records, or in another format, it shall be gathered, documented, and handled appropriately and professionally.

NexGen Shipping is responsible for adhering to the following data protection guidelines and must be able to prove it.

1. Lawful and equitable
The rights of the individual with regard to their personal data must be safeguarded throughout processing. Fair and legal collection and processing of personal data are required.

2. Specification of Purpose
Personal information may only be used or processed for the purposes specified at the time of collection, and it may not be used or processed in any way that is inconsistent with those purposes. Personal information cannot be gathered and kept for possible future use unless permitted by local law.

3. Limitation on Collection
NexGen Shipping only gathers personal information that is required to fulfill the stated purpose at the time of collection and only to the degree permitted by local law.

4. Removal
Unless the Legal Department grants an exemption, personal data that is no longer required for the reason stated at the time of collection must be erased in accordance with relevant retention schedules.

5. Quality of Data
Personal information must be correct and updated as needed.

6. Protections for Security
Technical, administrative, and physical security measures must be used to safeguard personal data against loss or unauthorized access, destruction, use, alteration, or disclosure.

7. Openness
People must be informed about the use or processing of their personal data at the time it is collected. They need to know who is gathering the personal data, why it will be processed, and if sufficient measures are in place if third parties will be processing it. The Legal Department must authorize all such notices.

8. Personal Involvement
People have the right, to the extent permitted by local law, to access their personal data, to have it corrected or deleted where appropriate, and to exercise any other rights granted by local law. They also have the right to know how their personal data is processed and, if third parties process it, to know that sufficient safeguards are in place. The Legal Department must authorize all such notices.

Personal information is categorized as private. It is forbidden for workers to process such data in an illegal manner. It is forbidden for an employee to engage in any processing that is not related to their official responsibilities. Only as much personal data as is necessary for the nature and extent of the job at hand may be accessible to employees. This calls for defining and separating roles and duties as well as putting them into practice. Workers are not allowed to utilize personal information for purposes other than those allowed by NexGen Shipping, reveal it to unapproved parties, or make it available in any other manner.

Employees must be made aware of their duty to protect personal data by their supervisors at the beginning of their job relationship. Even when employment ends, this duty will still be in effect. Personal information must be protected against illegal processing, disclosure, and unauthorized access. This is true regardless of whether data is processed on paper or electronically. A privacy impact assessment should be carried out for new IT systems prior to the introduction of new data processing techniques. This might result in the implementation of organizational and technological safeguards for personal data.

Employees must be made aware of their duty to protect personal data by their supervisors at the beginning of their job relationship. Even when employment ends, this duty will still be in effect.

Employee Obligations

Every employee is accountable for:

  • Reading and abiding by this policy and any associated policies, as well as any relevant papers or guidelines that may be created and kept up to date to carry out the obligations of this policy.
  • Notifying others of infractions of this policy.


Management is also in charge of:

  • Making sure that all reporting staff members are aware of this policy’s obligations.
  • Making certain that the right measures are in place to secure personal information.
  • Offering any required instruction and/or direction to support the process of implementation and to ensure adherence to this policy.