OilLog
[Draft — pending legal review] This document is a working draft. It will be reviewed and finalised by qualified legal counsel before general release.

Privacy Policy

Last updated: 27 July 2026

Who we are

OilLog is operated by DYG, based in Greece. For any privacy-related enquiries, contact us at info@dyg.gr. DYG acts as the data controller for personal data processed through this service.

What data we collect

  • Account information — name, email address, role, and encrypted password.
  • Company and vessel details — company name, IMO number, flag, and vessel configuration.
  • Record-book entries — Oil Record Book Part I data entered by your crew, including timestamps, quantities, positions and signatures.
  • Technical data — IP address, browser type, and log entries required for security and troubleshooting.

Why we process it

  • To provide the OilLog service and enable your crew to keep MARPOL-compliant records.
  • To meet legal and regulatory obligations relating to marine environmental record-keeping.
  • To secure the service, prevent abuse, and support customers.

Legal basis

We process personal data on the basis of (a) performance of a contract with you or your organisation, (b) compliance with legal obligations applicable to maritime record-keeping, and (c) our legitimate interests in operating and securing the service.

Data retention

Oil Record Book data is retained for as long as your account is active, and for the statutory retention period required by MARPOL Annex I (currently three years from the last entry) after account closure. Account and technical logs are retained for shorter periods appropriate to their purpose.

Where data is stored

Data is stored on infrastructure located within the European Union. Backups may be replicated across EU regions for resilience. We do not transfer personal data outside the EU/EEA without an appropriate safeguard in place.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Request rectification of inaccurate data.
  • Request erasure, subject to legal retention requirements.
  • Request portability of the data you have provided.
  • Object to or restrict processing in certain circumstances.
  • Lodge a complaint with the Hellenic Data Protection Authority (or your local supervisory authority in the EU).

Contact

For any request relating to this policy or your personal data, email info@dyg.gr.