Proposed operator: RoboticsHub Sweden AB. Company responsibility, contact arrangements and management adoption must be confirmed before this edition takes effect.
Prepared for the Marine RoboTech website on ChatGPT Sites and its initial business-enquiry channels. The proposed data controller is subject to management confirmation.
1. Who is responsible
Proposed website operator and data controller: RoboticsHub Sweden AB, Swedish organisation number 559595-3000, Bjerehov 1A, 237 34 Bjärred, Sweden. The company determines the purposes and means of its website and general-enquiry processing. Privacy enquiries should be directed to the company using the contact details below.
General contact: info@roboticshub.se. Privacy requests may also be sent to the company's registered email, cxg111sw@gmail.com, or by post to the company address. The registered email provides an alternative contact while delivery to the business mailbox is being confirmed.
Enquiries you address directly to Peter Geirnaert at peter@urbanwaterwaylogistics.net are received by Urban Waterway Logistics (UWL), which is responsible for its handling of those enquiries. Naming Peter as a project contact does not make UWL the operator of this entire website. Any shared project will define its data responsibilities separately.
2. What this statement covers
This statement covers the rebuilt Marine RoboTech website hosted on ChatGPT Sites, including its Survey Vessel and Marine Awareness pages, and initial enquiries received by the proposed operator. It applies to marinerobotech.com and www.marinerobotech.com when those domains serve this version of the site. A version still served by Wix has a different hosting and cookie configuration.
The site provides information and email links. Its current application has no enquiry-submission form, checkout, newsletter subscription, user-account feature, advertising pixels or audience-analytics integration. Selecting an email link opens your email application; a message is sent only when you choose to send it.
This is not a notice for camera recordings, lidar data, vessel tracking or trial participants. A project-specific assessment and notice will be provided before personal data is collected during a marine trial or other deployment.
3. Information, purposes and legal bases
| Activity and information | Purpose | GDPR basis |
|---|---|---|
| Business enquiry: name, work email, telephone if supplied, organisation, role, message and relevant attachments. | Understand and reply to your request, assess a possible collaboration and arrange follow-up. | Legitimate interests, Article 6(1)(f): handling relevant business communications. Article 6(1)(b) applies where you personally request steps towards a contract to which you would be a party. |
| Website request and security data: IP address, browser/device details, request time, requested page, response and diagnostic information; referrer where supplied. | Deliver pages reliably, prevent abuse and investigate technical incidents. | Legitimate interests, Article 6(1)(f): maintaining an available, secure website. Hosting providers may also process service data under their own applicable terms. |
| Privacy requests, correspondence and proportionate identity-verification information where needed. | Handle your rights request and document the response. | Legal obligation, Article 6(1)(c), where required by data-protection law; legitimate interests for necessary dispute records. |
| Records needed for an actual contract, legal claim or applicable record-keeping duty. | Meet the relevant obligation or establish, exercise or defend a legal claim. | Article 6(1)(c) for a specific legal duty, or Article 6(1)(f) for necessary legal-claims handling. Contract-specific information will explain any additional processing. |
Providing enquiry information is voluntary. We need enough contact and project information to respond meaningfully; without it we may be unable to assess your request. Please avoid sending identity documents, sensitive personal data or confidential third-party material unless we agree a suitable secure channel.
When we rely on legitimate interests, we will consider the necessity of the processing and its impact on your rights. You can object as described below. We do not use the website application to make automated decisions with legal or similarly significant effects, profile visitors for advertising, or enrol enquirers automatically in marketing lists.
4. Who receives information
Access is limited to authorised company personnel and service providers needed to operate the website or deliver and store email. The website is hosted through OpenAI's ChatGPT Sites infrastructure and uses Cloudflare for delivery and security. Email and any later customer-management services must be recorded in the company's service-provider register.
Relevant specialists or partners may receive the minimum information needed for a requested assessment or project, after we explain who will be involved and why. We do not sell enquiry information. Disclosure may also be required by law or necessary for legal advice and claims.
External video, project and document links take you to another provider. YouTube videos are not embedded or loaded automatically by this site's application. Those providers apply their own notices once you use their services. A partner privacy link describes that partner's processing and does not replace this statement.
5. How long information is kept
Proposed retention rule for initial enquiries: delete or anonymise inactive enquiry records within 12 months after the last meaningful exchange, unless an active opportunity, a resulting contract, a specific legal duty or a documented legal claim requires continued retention. Review outstanding enquiries at least annually; do not keep unsuccessful enquiries indefinitely for an unspecified future purpose.
For an active project, retain only relevant information for the relationship and the applicable contract, record-keeping and claim periods. Record the reason and review date for any exception to the initial-enquiry rule. Privacy-request records are kept only as long as necessary to handle the request and demonstrate the response or resolve a related claim.
Hosting and security providers determine retention of their own service and security logs under their applicable terms, based on delivery, security and legal needs. We do not claim that the company controls those periods. Browser-cookie expiry is described in the Cookie Policy; it is different from server-log retention.
6. Security and international processing
The company will restrict access, use strong authentication where supported, keep access permissions under review and use secure channels for sensitive material. The website uses HTTPS. No online service can guarantee absolute security.
Hosting and email services can involve processing outside the European Economic Area, including the United States. OpenAI and Cloudflare describe international processing and safeguards in their privacy information. Before a company-controlled transfer outside the EEA, we will identify the applicable mechanism, such as an adequacy decision or standard contractual clauses, and assess any necessary additional safeguards.
You may contact us for information about the recipients and safeguards relevant to your data. This statement does not claim EU-only hosting, a particular service-provider contract or a fixed log-retention period that has not been verified.
7. Your rights and how to contact us
Depending on the circumstances, you may request access, correction, deletion, restriction of processing or data portability. You may object to processing based on legitimate interests, including direct marketing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Send a request to info@roboticshub.se, use the registered company email cxg111sw@gmail.com, or write to RoboticsHub Sweden AB at the address above. Describe your request and the relevant contact or visit; we will ask only for proportionate information needed to verify identity. Our response process will follow the GDPR time limits, normally one month, and explain any permitted extension or refusal.
You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY), or another competent supervisory authority. You do not need to contact us first to exercise that right.
8. Changes and effective date
This review edition was revised on 2 October 2026. The effective date will be the date the confirmed operator approves and publishes the statement. We will update it when contact routes, hosting, tracking, forms or other processing change, and provide further notice where required. Earlier editions will be retained in the company's policy records.