
Privacy Notice for Job Applicants
We, at the Angelicoussis Group of companies (“Group”, “we” or “our”), and which for the purpose of this Privacy Notice comprises MST (Atlantic) Management ULC, Maran Shuttle Tankers Norway AS, Maran Dry Management Inc, Maran Tankers Management Inc, Maran Gas Maritime Inc, Altera do Brasil Serviços Marítimos LTDA, Maran Ship Supplies Pte Ltd, Maran Shuttle Tankers Norway AS (Athens branch), Maran (UK) Limited, Maran Asia Pte.Ltd and Maran Shuttle Tankers UK Limited are committed to protect your personal data. We will ensure that the personal data (also referred to as “personal information” in some jurisdictions) you submit to us via this website, and otherwise during our recruitment process, is only used for the recruitment and hiring purposes set out in this Policy.
How and why we collect, use and disclose Your Personal Data:
When applying for a position at our Group through this online application form, we will collect and use the following types of personal data: your full name, email address, phone number, and the contents of your CV, including your prior work experience. Depending on the position advertised, personal data collected may also include your years of experience and qualifications, such as your educational, professional, technical, language proficiency, training and achievements.
If you are selected for an interview, we may ask you to complete an assessment or questionnaire (such as video recordings, personality questionnaires, language and/or technical assessments), if deemed necessary for the position you have applied for, we may collect your responses and any personal data you provide when completing the assessment or questionnaire.
During the course of interviews, interviewers may collect or receive information about candidates that is not directly related to the job requirements or hiring riteria. Such information may include personal details or circumstances that the candidate voluntarily discloses during an interview.
If you are shortlisted for a position, we may collect additional personal data, depending on the position advertised and to the extent permitted by applicable law, from:
- Reference checks, including the name of each referee and their relationship to you, any personal data about you that they share with us during the reference check.
- Degree/ certificates authenticity check, including the type of degree or certificate you obtained, the date it was obtained, the institution that granted it.
- Medical test results (this type of data will be collected exclusively by the inhouse Fleet Medical Advisors). Only the applicant’s “fit for duty” status will be communicated internally.
We will collect, hold, use, disclose and process your personal data for the purpose of taking the decision whether we will enter into an employment contract with you and, if applicable, as necessary to establish, manage or terminate an employment relationship between a member of the Group and you. As a result, we process your application on a general basis or for a specific role.
This may include:
Screening of your resume.
Interviewing you either in the format of phone interviews, on-site interviews and/or interviews via online communication platforms.
Evaluating the results of any assessments/questionnaires we ask you to complete, such as video recordings, personality questionnaires, language and/or technical assessments, if deemed necessary for the position.
Verifying your eligibility for employment, the accuracy of the information you provide us during the application and interview process, including educational verification, previous employment verification, identity (Background) verification and your fitness for duty.
Preparing KPI reports regarding job applications and applicants.
All outcomes of the above activities including but not limited to interview notes, video recordings and assessment/questionnaire results will be retained as part of the application process. We may also collect and use your personal data as otherwise permitted or required by applicable law.
Who has Access to Your Personal Data:
Your personal data listed above will be accessible to the Group’s Human Resources team, the personnel tasked with the specific recruitment assignment, Top Management and inhouse Fleet Medical Advisors. They may share your personal data internally, except for medical test results, which will be collected and used exclusively by the Fleet Medical Advisors and only the applicant’s “fit for duty” status will be shared more broadly within the Group.
All the above personnel may use such personal data for managing and considering your application, preparing KPI reports, for external audits purposes, and for such other purposes as are listed above.
We may also disclose your personal data to regulatory or law enforcement agencies if they require us to do so based on a law or judicial decision, and in such other circumstances as are permitted or required by applicable law.
The Group implements appropriate physical, technical and organizational safety measures designed to protect the security and processing of personal data held in accordance with the applicable Data Protection Laws. A summary of such measures is attached hereto as Schedule I.
Data Residency:
To the extent that your personal data are transferred to a country outside the European Economic Area (EEA) that does not have adequate requirements in regards to data protection in place, the Company will implement contractual clauses prescribed by applicable laws to protect personal data.
If you are located in Canada, please note that your personal data may be processed in a foreign country (including Norway and Greece) and may be accessible to foreign courts, law enforcement and national security authorities. If you are located in Quebec, your personal data will not be sent outside of Quebec. If you are located in Alberta, you may contact DPO at dpo@angelicoussisgroup.com to (i) obtain access to written information about the organization’s policies and practices with respect to service providers (including affiliates) outside Canada, or (ii) ask a question about the collection, use, disclosure or storage of your personal information by service providers (including affiliates) outside Canada.
The specific measures applicable under the Brazilian General Data Protection Law ('LGPD') will apply to the processing of personal data by Altera do Brasil Serviços Marítimos LTDA.
For Users in Brazil:
This section applies specifically to individuals located in Brazil. In case of conflict between this section and any other part of this Privacy Notice, the terms of this section will apply.
i. Your rights under LGPD
We will respond to and fulfill your requests for the exercise of your rights below, pursuant to the best practices outlined by the Brazilian Data Protection Authority (“ANPD”) and according to the LGPD. We will also ensure that third parties who process your personal data comply with your requests.
In light of the rights listed in the applicable data protection legislation, you are entitled to the following:
Ask if your Personal Data is processed by the Group and receive a response (right of confirmation);
Obtain information about how your Personal Data is processed (right of access);
Request correction of incomplete, inaccurate, or outdated data (right of correction);
Request anonymization, blocking, or deletion of Personal Data that is unnecessary, excessive, or processed in violation of the law (right to anonymization, blocking, or deletion);
Obtain information on which public and private entities have access to your Personal Data by decision of the Group (right to information);
Withdraw your consent when the Group processes personal data based on your consent nd the consequences of such refusal (right to consent withdrawal);
Request transfer of your data in a format to be determined by the ANPD (right to portability);
Request review of decisions based solely on automated processing of Personal Data that affect your legitimate interests (right to review automated decisions); and
Request access to clauses used for the international data transfer of your personal data.
Please note that your right to request deletion applies only if the data was collected based on your consent or if it is unnecessary, excessive, or processed in noncompliance with LGPD. The same applies to your rights to blocking or anonymization.
ii. Transfers of Personal Information Outside Brazil
We take appropriate steps to protect your personal data whenever it is transferred from Brazil to another country. These steps follow LGPD requirements and ANPD rules to ensure your data remains protected according to applicable laws.
We implement safeguards to ensure data is only transferred to countries that provide a degree of protection similar to or greater than Brazil or to companies contractually committed to adopt a degree of protection similar to that provided for the applicable legislation.
For further information on how the Group transfers your personal data outside Brazil, please refer to the below: Form, Duration and Purpose of the International Data Transfer
Form: Transfer of job applicant personal data (e.g., CV, contact details, qualifications, interview notes, assessment results) between Angelicoussis Group entities and through IT systems.
Duration: Data is retained for up to three (3) years from submission or incorporated into personnel file if the candidate is hired.
Purpose: Develop the recruitment and selection process.
Destination Country(ies) of Transferred Data: Greece and Norway
iii. Contact Us in Brazil
The local entity responsible for handling personal data in Brazil is: Altera do Brasil Serviços Marítimos LTDA
If you are in Brazil and have any questions or wish to exercise you rights under LGPD, please contact our Data Protection Officer (“DPO”), at dpo@angelicoussisgroup.com.
Retention of Your Personal Data:
The Group keeps personal data for as long as it is required for the reasons it was collected, and to comply with all legal retention requirements. Applications will generally be deleted from our systems after three (3) years from the date of submission of your application.
For recruitment activities in the Netherlands, your personal data will be deleted no later than four (4) weeks after the recruitment process has been completed, unless you have given your explicit consent for us to retain your data for future vacancies.
If such consent is given, your personal data will be retained for a maximum period of one (1) year, after which they will be deleted. You may withdraw your consent at any time, in which case your data will be deleted without undue delay.
Your Rights:
Under GDPR, you may ask us to make changes to your data to ensure it is accurate and up to date, or to delete it. Besides, you may exercise your rights to restrict, or object to the processing of such data. If you would like a copy of your personal data that we retain and process, please use the contact details below. You may also lodge a complaint to the relevant supervisory authority by using the following links www.dpa.gr or, for Norway, www.datatilsynet.no, or the following contact details: Kifisias 1-3, 11523, Athens, phone: +30 210 -6475600, complaints@dpa.gr or Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, https://www.datatilsynet.no/klageskjema_direkte/, or for the Netherlands www. autoriteitpersoonsgegevens.nl, General Phone: (+31) - (0)70 - 8888 500, Privacy Questions Phone: (+31) - (0)88 - 1805 250, Postal Address: Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ The Hague, The Netherlands
If you are located in Canada or Singapore, you can request to access or correct the personal data we hold about you by contacting DPO by email at dpo@angelicoussisgroup.com. Access to or correction of personal data may be declined in accordance with applicable laws. You may also have the right to withdraw your consent to the use, disclosure or communication of your personal data, subject to applicable laws, which you may exercise by contacting DPO at the contact information above. If you withdraw your consent, please note that we may be unable to continue to process your application or consider you for employment with a member of the Group.
For job applicants in Brazil, you may find additional information on your rights and how to request them in light of LGPD in the Angelicoussis’ Group Data Privacy Policy.
If you are in Singapore and we collect your personal data, we will take steps to ensure that your personal data receives a standard of protection that is at least comparable to that provided under the Singapore Personal Data Protection Act 2012 where we transfer your personal data outside Singapore.
Contact Details:
If you wish to exercise any of your above rights or if you have any question or complaint about this notice or the collection, use or disclosure of your personal information, please contact a Data Protection Officer through email at:
Modifications to this notice:
This notice was last updated on 03 June 2026.
The Group maintains the right to modify, update or amend the terms of this Notice at any time by placing the updated Notice on this website.
More information:
For the Group's Data Privacy Policy please refer to: Angelicoussis Group Data Privacy Policy
SCHEDULE 1
A summary of the technical, organisational and physical security measures implemented by the Group to protect personal data is set out below. The Group may change, remove or supplement these measures from time to time in its discretion, provided that the Group shall continue to maintain such safeguards as are required to comply with applicable Data Protection Laws.
Technical Security Measures
Identity and access management systems and processes
Network devices such as intrusion detection systems, routers and firewalls
Digital certificates are deployed in a manner reasonably designed to protect personal data
Secure log-in with unique user-ID/password
Logging and analysis of system usage
Role based access
Encrypted virtual private networks for access to corporate networks and Secure Shell access for cloud platforms
Routine back-up of databases and systems
Pseudonymization (in certain cases)
Organizational Security Measures
Employee hiring procedures which require the completion of a detailed application form and, where allowed by local law and reasonable for job roles:
Educational verification
Previous employment verification
Identity (Background) verification
All Group employees, as well as the contractors and third parties that handle personal data on behalf of the Group, are required to sign a confidentiality agreement at the commencement of employment/engagement.
Due diligence and vetting procedures on third party vendors that handle personal information on behalf of the Group.
Incident response plan
Disaster recovery plan
Physical Security Measures
Controlled access for critical or sensitive areas
Data centers are protected by security guards 24/7/365
All entrances to data centers are protected with alarms
Closed circuit TV monitored 24/7/365 at all entry and exit points and the vessels at all IT server rooms, and at all reception areas

