A “Data Controller” as defined in article 4.7 of the GDPR , is a company that defines the purpose and method for processing personal data. The data controller is SORENSEN CREW LIMITED (hereinafter as “Sorensen Yachtwear”, “Sorensen”, “we”, “us” or “our”). SORENSEN CREW LIMITED is a company incorporated in England and Wales and the owner of sorensenyachtwear.com, and the Sorensen brand. Registered number: 14952355 Registered office: Ventura Park Road, Tamworth, United Kingdom, B78 3HL VAT registration number: GB452646485/NL850960678B01 ICO registration: ZB657290 For more information about how we collect, use and manage your data, please contact our ‎Customer Care team or email our Data Privacy Officer (DPO) – dataprivacy@sorensenyachtwear.com.

We collect personal data from you when browsing on sorensenyachtwear.com. This includes: Marketing activities (e.g: newsletter subscriptions online, WhatsApp, email, or post) The data we collect and why we collect it a. Marketing activities WHAT: Full name, email address, telephone number, postal address. WHY: To send you marketing communications, including the latest news from Sorensen, new arrivals, exclusive products, offers and promotions, as well as market research and satisfaction surveys related to the product(s) or services you have purchased as a Sorensen customer. You can always opt out by unsubscribing in the email you receive. b. Cookies WHAT: Our website logs a variety of information about visitors, including internet protocol (IP) addresses, browser type, internet service provider (ISP) information, referring/exit pages and date/time stamp. WHY: When you browse our website, we may use “cookies” to keep track of your visit and give you a better browsing experience. We may use this information to analyse trends, administer the website, track your movement around the website and gather broad demographic information. We may also use this information to inform our marketing and future business strategies and it may therefore be shared with third parties such as our advertisers. Any information we do share will be in a statistical form and will not identify you as an individual. Where we collect personal information through cookies, the legal basis for this use is that you have given your consent to this. For more detailed information about our use of cookies and similar technologies, please visit our Cookie Policy. c. Social media WHAT: Photos, videos, hashtags, comments, direct messages. WHY: To respond to customer inquiries, complaints and feedback via social media. We monitor our customers’ views, reactions and engagements with the Sorensen brand across our social media channels (Facebook, Instagram, LinkedIn, TikTok, Pinterest) to respond to any enquiries, issues, engagements or positive feedback. We will always ask for your permission to use a photo or video. The social media channels are integrated into our website only as a link to the relevant services. After clicking the integrated button, you will be forwarded to the site of the relevant provider, i.e. only then will user information be transferred to the relevant provider. Information on dealing with your personal data in the use of these websites can be found in the relevant data protection terms and conditions of the provider. Marketing communications We send marketing communications via email, WhatsApp, email, post, etc. Your consent is provided by making a purchase or by opting in to our marketing communications, which include news from Sorensen, new arrivals, exclusive products, offers and promotions, as well as market research and surveys to determine your level of satisfaction and improve services. If you no longer want to receive communications from Sorensen or if you wish to modify or limit the ways you are contacted, you can stop or edit these communications by contacting our Customer Care team or by following the “unsubscribe” link at the bottom of each digital communication. Please note, you may temporarily continue to receive communications after editing your preferences while we process your request. We also use data from your browsing behaviour to personalise the marketing communications that we send to you. By analysing data from your profile as a user of sorensenyachtwear.com, we ensure that you will receive the information that is most relevant and interesting to you. For all of the above, we will process your personal data through IT and electronic tools that guarantee high safety standards, in full compliance with current legislation. We have therefore constituted a Cookie Policy. Anti-fraud checks If you purchase products from Sorensen by credit or debit card, we may use your personal data to carry out anti-fraud activities. We have a legitimate interest in conducting anti-fraud checks to prevent and pursue any fraudulent activity. For internal administrative purposes, data may also be processed by companies belonging to the business group of which Sorensen is a member. Links to other websites from sorensenyachtwear.com sorensenyachtwear.com may contain links to third-party websites. However, this privacy policy applies exclusively to sorensenyachtwear.com. We cannot be held accountable nor do we have any control over whether third-party sites adhere to data protection regulations. We, therefore, recommend you read their independent privacy policies.

Your personal data will be processed by Sorensen employees who are specifically trained and authorised to process it. Your personal data will also be processed by our third-party suppliers who have been selected by us for their proven reliability and high-level privacy and security standards. These third parties include: Financial services Internet providers IT and telematic service providers Couriers Content and referral links Lawyers Marketing agencies Please note, some of our suppliers may be based in non-EU countries. In this case, the transfer of your personal data to these third countries will be carried out in compliance with the articles 44 to 47 of the GDPR data transfer-requirements in order to meet a similar adequate protection level as in Europe. With these third parties we have arranged a lawful data transfer mechanism as defined in article 46 of the GDPR and we have contractually arranged adequate technical and organisational measures to safeguard the data. Finally, your data may be processed by the police and judicial and administrative authorities, in accordance with the law, for: The detection and prosecution of crimes The prevention of and protection from threats to public security Allowing Sorensen to ascertain, exercise or defend a right in court Any other reason related to the protection of the rights and freedoms of others.

We keep your personal data for a limited period of time, after which it will be deleted or otherwise rendered anonymous in an irreversible way. This time period for storing your data depends on the purpose for which the data was collected. For example: Data relating to Customer Care requests – kept until your request is met. Data used for marketing communications – retained until the termination of service or until the user unsubscribes from the service. Data used to personalise sorensenyachtwear.com and to show customised content – stored until the user requests the activity to stop and, in any case, within 2 years from the last interaction of any kind by the user.

In principle we do not forward or share personal data to recipients in third countries (i.e. countries outside the EU). If we should, we assure you that we do it lawfully and assure an adequate level of data protection as required in articles 44 to 49 of the GDPR.

At any time, you can exercise your privacy rights as included in articles 12 to 23 of the GDPR regarding the processing of your personal data. This includes: Requesting to know what data we have about you in our possession, how it was collected, and how it is used. Withdrawing your consent to processing your data – on receiving your request, it is our duty to stop processing your personal data related to the specific consent as soon as possible, but different processing or that based on other assumptions will continue to be carried out in full compliance with the provisions in force. Objecting to your data being processed – you are required to explain the reasons for your objection to our processing your data and we will evaluate these reasons before accepting your request. Limiting the use of your data – in this case, we will keep your personal data but will not process it, unless it is subject to a different request by you and in the case of exceptions established by law. Processing of data can be limited when disputing the accuracy of your personal data, when the processing is illegal but you oppose the cancellation of your data, when we no longer need your personal data but you need to exercise your right in court, and when you oppose your data’s processing, in the period in which we evaluate the reasons for your request. Deleting your data – where (i) we don’t need your personal information anymore; (ii) you withdraw your consent to our use of your personal information and we have no other legal basis to keep your personal information; (iii) you have asked us to review and explain our legitimate interests to you and we don’t actually have a valid legitimate interest to do what we are doing; (iv) our use of your personal information is illegal; (v) we have to delete your personal information to comply with our legal obligations. Modifying, updating or correcting your data. You can also request to receive your personal data held by us in a format readable by electronic devices and, where technically possible, we can transfer your data directly to a third party chosen by you. You can complete any of the above by contacting our Customer Care team. Please note, to ensure that your data is not at risk of illegitimate or fraudulent use by third parties, we will ask you to confirm your identity before accepting your request to exercise one of the rights listed above or before disclosing any personal data.

If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the supervisory authorities responsible for compliance with the rules on personal data protection. As Sorensen is registered in England and Wales, you can file a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We protect your personal data with specific technical and organisational security measures, aimed at preventing your personal data from being used illegitimately or fraudulently. Our security measures guarantee: The pseudonymisation or encryption of your data The confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them The ability to restore data in the event of a data breach. We are committed to testing, verifying, and regularly evaluating the effectiveness of our technical and organisational measures to ensure the ongoing security of your data. We also have rigorous procedures in place to respond to any suspected data security incident and will notify you, and any applicable regulator, of a suspected breach where we are legally required to do so. Please note, not all methods of contacting us (email or post) are entirely secure and therefore your personal data may be at risk of interception. Your personal data is also at risk if a malicious third party gains access to your account on our customer portal or to any other place where your personal data is stored, such as your email account.

For more information about how we collect, use and manage your data, please contact our ‎Customer Care team or email our Data Privacy Officer (DPO) – dataprivacy@sorensenyachtwear.com

Our Privacy Policy is subject to changes and additions in line with new services offered by Sorensen or new regulatory measures. While we will try to update you with any changes as quickly as possible, we recommend familiarising yourself with the policy on this web page from time to time.