DOKK Terms of Use

1. Introduction

Welcome to DOKK, an online platform owned, developed and operated by Faxaflóahafnir sf. (Icelandic VAT ID: 530269-7529), hereinafter referred to as "DOKK," "FFH," "Faxaports," "we," or "our." DOKK is a centralized platform for managing port calls between cruise line agencies and ports. Please read these Terms of Use carefully as they outline the terms and conditions that govern your access to and use of the DOKK platform and related services (the "Service").

Key contacts include Sindri Dan Garðarsson (IT Lead Developer), Friðrik Þór Hjálmarsson (COO), and Gunnar Tryggvason (Port Director).

• DOKK operates as a platform provided by Faxaflóahafnir sf. (FFH) and does not have a separate legal entity or VAT ID. DOKK is developed and managed by FFH's Information Technology team, within the Business Department.
• As a Software as a Service (SaaS) platform, DOKK provides booking, scheduling, messaging, and data management services across all major ports in Iceland and the Faroe Islands, and aims to expand to additional regions. Please refer to Section 6 (Payments and Fees) for further details.
• Please contact us if you encounter any inconsistencies or unclear provisions within these Terms. We are committed to regularly reviewing and updating our Terms to reflect service improvements and ensure clarity.

By accessing DOKK, you agree to be bound by these Terms. If you do not agree, please discontinue your use of the platform.

2. Purpose and Scope

The DOKK platform is designed to streamline port call processes, provide real-time data, and enhance transparency within the port and cruise industries. DOKK's platform prioritizes Crowd Management and Sustainable Operations by delivering real-time data that supports strategic planning and efficient resource allocation.

3. Jurisdiction and Compliance

DOKK operates primarily under Icelandic law and adheres to the General Data Protection Regulation (GDPR). As DOKK expands into additional regions, including the United Kingdom, Canada, the United States, Norway, and EU member states, we will ensure compliance with the relevant laws and regulations specific to each jurisdiction.

4. User Accounts and Roles

4.1 Account Creation and Verification

New organizations may register through the signup flow at portal.dokk.com/signup. Upon submission, DOKK staff review and verify each application before granting access. Each user account is assigned to an individual and must be linked to their official organizational email address.

4.2 Account Termination

• User-Initiated: Account termination requests may be made by the organization's admin user.
• DOKK-Initiated: We reserve the right to terminate accounts for breaches of protocol, improper conduct, or data manipulation.

4.3 User Roles

• Admin: Authorized to manage all organization-related information and port calls.
• Primary: May book, edit, approve, reject, or cancel port calls within their organization.
• Reporter: Limited to viewing port call data, with permission to comment and message within port calls.

4.4 User Types

• Port User: Manages port calls directed to ports within their organization, including accepting, rejecting, or suggesting modifications. Communicates via the platform messaging system.
• Agency User: Creates and manages port calls at designated ports. Authorized users may modify vessel details, dates, and passenger transfer information.
• Media Users (Beta): Read-only access to port calls within their registered operational country. Access is invitation-only. No access to the messaging system or inter-party communication.
• Cruise Line User (Beta): May view all port calls associated with their vessels across all registered countries. May not create, edit, or cancel port calls under any circumstances. No access to agency-port communications.

4.5 Organization Types and Guidelines

Port Organization: Registers and manages port and quay details including name, LOCODE, country, timezone, and maximum passenger capacity.

Agency Organization: Schedules and manages port calls within their operational countries. Must notify DOKK of any rights transfers between agencies. Agency fees do not cover port-specific charges.

Media Organization (Beta): Invitation-only. Access is scoped to registered operational countries. An annual per-account fee applies, see Section 6 for current rates.

Cruise Line Organization (Beta): Invitation-only. Annual subscription fee: 350,000 ISK excl. VAT per year (includes one admin account). Additional accounts: 26,900 ISK excl. VAT per year. Founding partners receive the first year complimentary.

4.6 Organization Setup

Admin users have oversight of all organizational ports upon setup. Specific ports may be assigned to Primary role users as appropriate.

5. Permitted Use and Conduct

5.1 Authorized Use

Users must use the platform in accordance with its intended purpose and avoid any actions that might manipulate data for unauthorized cost advantages or circumvent billing.

5.2 Account Usage

Account sharing is strictly prohibited. Accounts are assigned to individuals and are non-transferable. An exception applies for shift-based teams operating under the Reporter role, such teams may share a single account, subject to valid MFA registration being completed by July 1, 2026. Contact dokk@dokk.com for details.

5.3 Data Integrity

Users are required to maintain data integrity. FFH reserves the right to address any data manipulation that goes against set policies or impacts the operations of DOKK and its users.

5.4 Prohibited Activities

Users are strictly prohibited from:

• Automated access: Using bots, scrapers, or any automated means to extract platform data without prior written consent. This does not apply to authorized API usage under Section 9.8.
• Reverse engineering: Attempting to decompile, disassemble, or derive the source code or architecture of the platform.
• Unauthorized access: Attempting to access data or accounts belonging to other organizations, including through exploitation of bugs or vulnerabilities.
• Interference: Introducing malicious code or material that disrupts or damages the platform.
• Circumventing security: Attempting to bypass any authentication or access control mechanism.
• Misrepresentation: Impersonating another user, organization, or DOKK staff member.
• Excessive load: Placing unreasonable load on the platform's infrastructure in a manner that degrades service for other users.

Violations may result in account suspension, termination, or referral to relevant legal authorities.

6. Payments and Fees

6.1 Billing Structure

• Port Call Fees: A fee (excl. VAT) is applied to each completed port call, invoiced annually. A port call is billable if active and accepted, or cancelled/rejected within 30 days of scheduled arrival. See Plans and Pricing for current rates.
• Additional Accounts: Each organization receives one complimentary admin account. Additional accounts incur an annual fee, non-refundable and non-transferable.
• Development and Data Services: Optional custom services billed at a flat hourly rate (excl. VAT).
• Port Call Transfer Service: A managed transfer service for agency handovers, charged to the receiving agency.
• Cruise Line Access Fee (Beta): 350,000 ISK excl. VAT per year (includes one admin account). Additional accounts: 26,900 ISK excl. VAT per year. Founding partners receive the first year complimentary.
• Media Organization Access Fee (Beta): 26,900 ISK excl. VAT per year per account. Non-refundable.

All invoices are issued in Icelandic Krona (ISK). API access is included with all active organizational subscriptions.

6.2 Updates to Billing Terms

DOKK reserves the right to introduce additional billable services in the future. Any adjustments to billing terms or fees will be updated in these Terms, with prior notification provided to affected parties.

6.3 Billing Inquiries

For billing inquiries please contact rafn@dokk.com or fjarmal@faxafloahafnir.is.

6.4 Payment Terms and Overdue Invoices

If invoices remain unpaid beyond agreed payment terms, DOKK reserves the right to restrict platform access as a measure of last resort, after repeated unsuccessful attempts to reach a resolution. DOKK will always prioritize communication and work towards a fair solution.

7. Intellectual Property

The DOKK platform, including all software, code, features, and functionalities, is owned by Faxaflóahafnir sf. (FFH). FFH holds exclusive rights over the dokk.com, dokk.is, and dokk.dev domains. dokk.com is the primary domain. dokk.dev is strictly for internal testing, please do not use it for any operational purpose.

FFH does not claim exclusive intellectual property rights over general scheduling methods or standard booking system approaches.

7.1 Content Ownership

Content including port call data is owned by the respective agencies and ports. DOKK ensures data availability but is not responsible for misuse of content by users.

7.2 Usage License

Users are granted a limited, non-exclusive license to access and use DOKK in accordance with these Terms. Redistribution of DOKK's proprietary content or internal communications is prohibited.

7.3 Use of DOKK in Media and Advertisement

Organizations may use the DOKK logo and imagery for professional purposes without prior explicit consent, provided it is used respectfully and non-maliciously. Screenshots of the platform or internal data may not be shared in public forums except for legitimate professional purposes such as dispute resolution or inter-party communication. For press inquiries contact eldar@faxafloahafnir.is.

8. Limitations of Liability

8.1 Disclaimer of Warranties

The DOKK platform is provided "as is" and "as available." DOKK and FFH make no warranties regarding the platform's fitness for a particular purpose, uninterrupted availability, or freedom from errors.

8.2 Liability Cap

To the maximum extent permitted by applicable law, the total aggregate liability of DOKK and FFH to any organization or user shall not exceed the total fees paid by that organization to DOKK in the 12 months immediately preceding the event giving rise to the claim. This cap applies to all claims in aggregate.

8.3 Exclusion of Consequential Loss

DOKK and FFH shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of revenue, profit, data, or business opportunity.

8.4 Indemnification

Users agree to indemnify and hold harmless DOKK, FFH, and its affiliates against any claims arising from misuse of the platform, breach of these Terms, or violation of applicable law.

8.5 Essential Basis

Both parties acknowledge that the limitations of liability set out in this section reflect a reasonable and fair allocation of risk and form an essential basis of the agreement between them.

9. Privacy and Data Handling

9.1 Privacy

DOKK is committed to protecting user privacy and operates in compliance with GDPR and Icelandic privacy laws. We will not share user data without consent unless required by law. Users may request modification or deletion of their data in accordance with applicable regulations.

9.2 Data Protection and Internal Analytics

DOKK will not analyze data specific to individual organizations without explicit consent. We reserve the right to use aggregated, non-identifiable data to showcase platform usage and growth, and to produce usage statistics and visualizations.

9.3 DOKK, FFH and Our Commitment

DOKK will not disclose or transfer data to FFH for any purpose relating to other ports and agencies. Given FFH's status as a major port operator, we are committed to ensuring DOKK data is never used for FFH's marketing or competitive purposes. Data is used only for fair, beneficial purposes that serve the broader port community.

9.4 DOKK Optimization Model

We reserve the right to utilize port call database data to enhance our booking optimization model, aimed at managing passenger loads and improving port operational efficiency. This service will be offered at an additional cost when available.

9.5 Messaging System

DOKK provides a platform-wide messaging system for direct communication between authorized users. Messages are end-to-end encrypted at rest using AES-256 encryption and are accessible only to direct participants and authorized DOKK staff. Media and cruise line users do not have access to the standalone messaging system.

Messaging access between user types is scoped as follows:

• Cruise Line users: May contact Agency users only
• Port users: May contact other ports within their country, agencies, and media organizations
• Agency users: May contact all ports within their country and all cruise line organizations
• Media users: May contact port organizations within their operational country only

Message history is retained for the lifetime of the organization's account. Admin users may request a full message export at no charge via dokk@dokk.com. DOKK does not use message content for analytics purposes.

9.6 Support Tickets

Support ticket content and attachments are accessible only to the submitting user and authorized DOKK staff. Ticket data is retained for a minimum of 24 months. Attachments are stored in encrypted cloud storage accessible only through time-limited authenticated download links. DOKK uses ticket content solely for the purpose of resolving the submitted request and improving the platform.

9.7 Third-Party Infrastructure and Data Security

DOKK utilizes Microsoft Azure as its primary cloud infrastructure provider. All data in transit is encrypted via HTTPS. Data at rest is encrypted within Azure's managed infrastructure. Access to user data is strictly limited to authorized DOKK development team members under role-based access controls and two-factor authentication.

9.8 API Key Usage and Restrictions

Each organization is allowed one API key, issued upon request. Keys must not be shared externally. Misuse will result in immediate revocation. Organizations are fully responsible for all activity under their issued key. API access is currently complimentary with active subscriptions; DOKK reserves the right to introduce API billing with reasonable prior notice.

10. Governing Law and Dispute Resolution

These Terms are governed by Icelandic law. Disputes will be resolved under the jurisdiction of Icelandic courts.

11. Modifications to Terms

DOKK reserves the right to modify these Terms at any time. When material changes are made, all users will be required to individually review and accept the updated Terms upon their next login before continuing to use the platform. Users who do not accept will be logged out. A record of each user's acceptance, including the version accepted and timestamp, is maintained by DOKK.

12. Service Level Agreement (SLA)

12.1 Uptime Commitment

DOKK targets a monthly uptime of 99.5%, excluding scheduled maintenance and force majeure events.

12.2 Scheduled Maintenance

Scheduled maintenance will be communicated to Admin users no less than 48 hours in advance where operationally feasible, and scheduled outside of peak hours (06:00–22:00 GMT) where possible.

12.3 Incident Communication

In the event of an unplanned outage, DOKK will acknowledge the incident within 2 hours of detection and provide status updates at reasonable intervals until resolved. A post-incident summary will be published for outages exceeding 4 hours, delivered via email and status page.

12.4 SLA Exclusions

The uptime commitment does not apply to:

• Scheduled maintenance windows
• Outages caused by third-party infrastructure providers (e.g. Azure, Vercel)
• Force majeure circumstances as defined in Section 14
• Service degradation caused by actions of the user or their organization

12.5 Remedies

DOKK does not currently offer automatic service credits. Where an outage materially impacts an organization's operations, affected parties are encouraged to contact dokk@dokk.com to discuss resolution on a case-by-case basis.

13. Cancellation, Data Retention and Deletion

13.1 Cancellation by Organization

Cancellation requests must be submitted in writing from an Admin user to dokk@dokk.com and are subject to a 30-day notice period from the date the request is received.

13.2 Effect of Cancellation

Upon cancellation:

• Platform access is disabled at the end of the notice period
• Outstanding invoices for the current billing year remain due in full; fees are non-refundable
• Any outstanding port call fees will be invoiced at the end of the notice period or at year-end, whichever comes sooner

13.3 Data Export

Prior to deactivation, Admin users may request a full export of organizational data including port call history. Export requests must be submitted at least 14 days before the deactivation date. DOKK will provide the export in CSV or JSON format at no charge.

13.4 Data Retention After Termination

Following account deactivation, organizational data is retained in a restricted, non-accessible state for 12 months for audit and compliance purposes, then permanently deleted from active systems. Backup copies are purged within 90 days in accordance with backup rotation policy. Data required under Icelandic law or GDPR is retained only for the legally required period.

13.5 Termination by DOKK

Where DOKK terminates access due to material breach, the data retention provisions of Section 13.4 apply. DOKK will provide a reasonable opportunity for the organization to export its data, unless the nature of the breach makes this inappropriate.

14. Force Majeure

DOKK shall not be liable for failure or delay in performing obligations resulting from circumstances beyond our reasonable control, including natural disasters, war, government action, third-party infrastructure failure, epidemics, industrial action, or cyberattacks. Affected organizations will be notified promptly. If a force majeure event continues for more than 30 consecutive days, either party may terminate the agreement by written notice with no penalty, with data export rights applying as per Section 13.3.

15. Suspension and Termination

15.1 Temporary Suspension

DOKK may temporarily suspend access without prior notice for:

• Non-payment beyond 30 days past the due date following at least one written reminder
• Suspected security breach or compromise of account credentials
• Activity posing an immediate risk to the platform or other users

The Admin user will be notified by email. Data is retained and access may be resumed upon resolution of the issue.

15.2 Permanent Termination by DOKK

DOKK may permanently terminate access with 14 days written notice for material or repeated breach of these Terms unresolved within the notice period, persistent non-payment following suspension, or fraudulent activity or deliberate data manipulation. DOKK may terminate without notice where illegal activity, security threats, or actions causing immediate harm to other users are involved.

15.3 Notice

All notices will be sent to the registered Admin email address of the organization. Organizations are responsible for maintaining accurate and up-to-date contact information.

16. Confidentiality

16.1 Mutual Obligation

Both parties agree to treat as confidential all non-public information disclosed in connection with use of the platform, including operational data, scheduling information, passenger counts, commercial arrangements, and technical details.

16.2 DOKK's Obligations

DOKK will not disclose an organization's confidential information to any third party without prior written consent, except where required by law, to authorized staff or contractors on a need-to-know basis, or as otherwise permitted by these Terms (e.g. aggregated analytics).

16.3 Organization's Obligations

Organizations will not disclose DOKK's proprietary technical information, internal processes, or pricing structures without prior written consent from DOKK.

16.4 Survival

Confidentiality obligations survive termination of this agreement for a period of 3 years.

17. Changes to the Service

17.1 Feature Changes

DOKK reserves the right to modify, update, add, or remove platform features at any time. Where a change materially reduces functionality for a user type, at least 30 days notice will be provided via in-platform notification and email to Admin users.

17.2 Discontinuation

In the event of full platform discontinuation, a minimum of 90 days notice will be given to all active organizations. Data export services will be available at no charge and prepaid fees beyond the discontinuation date will be refunded on a pro-rata basis.

17.3 API Changes

DOKK will maintain backwards compatibility where feasible. Breaking API changes will be communicated with at least 30 days notice, and previous versions will be maintained in a deprecated state where possible.

18. Contact

Faxaflóahafnir sf.
Tryggvagata 17, 101 Reykjavík, Iceland
Phone: +354 525 8900

• General support: dokk@dokk.com
• Billing: rafn@dokk.com / fjarmal@faxafloahafnir.is
• Sindri Dan Garðarsson, Head of Development: sindri@dokk.com
• Friðrik Þór Hjálmarsson, Product Owner and COO: fridrik@dokk.com
• Eldar Ástþórsson, Head of Marketing: eldar@faxafloahafnir.is
• Rafn Erlingsson, Accounting Manager: rafn@dokk.com

A.1 Roles

Under GDPR, the organization acts as the Data Controller for any personal data relating to its employees and users. DOKK / Faxaflóahafnir sf. acts as the Data Processor, processing personal data solely on behalf of and under the instruction of the organization.

A.2 Scope of Processing

Category	Examples
Identity data	Name, job title
Contact data	Email address
Authentication data	Encrypted passwords, MFA tokens
Usage data	Login timestamps, actions taken on the platform
Communication data	Messages sent via the platform (encrypted at rest)
Support data	Content of support tickets and attachments

A.3 DOKK's Obligations as Processor

• Process personal data only on documented instructions from the organization
• Ensure all personnel are bound by appropriate confidentiality obligations
• Implement appropriate technical and organizational security measures as described in Section 9.7
• Not engage sub-processors without first informing organizations, current sub-processors are listed in Appendix B
• Assist organizations in fulfilling data subject rights within a reasonable timeframe
• Delete or return all personal data upon termination as per Section 13.4
• Make available information necessary to demonstrate compliance with GDPR obligations and cooperate with reasonable audits

A.4 Sub-Processors

DOKK will notify organizations of any intended changes to the sub-processor list with at least 14 days notice, providing an opportunity to raise objections. See Appendix B for the current list.

A.5 Data Subject Rights

Organizations, as Data Controllers, are responsible for handling data subject requests from their employees. DOKK will assist with and action requests relating to platform-held data within 30 days of written notification.

A.6 Data Breach Notification

In the event of a personal data breach affecting organizational data, DOKK will notify the affected organization's Admin user without undue delay and, where feasible, within 72 hours of becoming aware, in accordance with GDPR Article 33.

A.7 Governing Law

This DPA is governed by Icelandic law and shall be interpreted consistently with GDPR and applicable Icelandic data protection legislation.

Last updated: June 3, 2025

Sub-processor	Purpose	Personal data involved	Location
Microsoft Azure	Cloud infrastructure, database hosting, file storage	All platform data including user identities, port call records, messages, and attachments	EU (North Europe)
Vercel	Frontend hosting, request handling, deployment	IP addresses, authentication cookies, HTTP request metadata	EU / Global CDN
SendGrid (Twilio)	Transactional email delivery (invitations, notifications, password resets)	Name, email address	USA (EU SCCs applied)
Sentry	Error monitoring and diagnostics (development and production)	May incidentally capture user identifiers, email addresses, or request data in error traces	USA (EU SCCs applied)
Vercel Analytics	Aggregated traffic and page visit analytics	IP addresses, page URLs, referrer data, browser metadata	EU / Global CDN

SendGrid and Sentry transfers to the USA are conducted under Standard Contractual Clauses (SCCs) as per GDPR Article 46(2)(c). Organizations will be notified of any intended additions or replacements to this list with at least 14 days notice by email. Sub-processors are reviewed periodically to ensure ongoing GDPR compliance.