Privacy Policy
Last updated: July 2026At GoMonkeyMate we handle your data the same way we work: only what's necessary, transparently and under the GDPR. Here's what we collect, why, and the rights you have.
1. Controller
GoMonkeyMate acts as the controller for the personal information collected through this platform, in line with the EU General Data Protection Regulation (GDPR, EU 2016/679) and Spanish Organic Law 3/2018 on the protection of personal information and digital rights (LOPDGDD). The registered postal address and official contact channels are published at info@gomonkeymate.com, where any individual may reach out to exercise rights, raise complaints or request further information about the processing.
2. Information we collect
Only the records necessary to deliver the maritime B2B marketplace are collected, following the principles of minimisation and purpose limitation:
- Identification: first name, last name, email address and professional phone number.
- Professional profile: career history, experience, STCW certificates, CV, position sought and declared availability.
- Company record: trade name, VAT or tax ID, registered address, services offered and operating regions.
- Payments: the platform is currently free and we collect no payment data. If paid plans are introduced in the future, they will be handled by a PCI-DSS certified provider, with no full card numbers or CVV codes stored on our infrastructure.
- Usage: pages visited, interactions, device type, browser, IP address and strictly necessary session cookies.
3. Purpose of processing
- Manage each account, profile and set of credentials inside the platform.
- Facilitate connections between verified professionals and companies in the maritime and yachting industry.
- Deliver and maintain the service and, if paid plans are introduced in the future, manage the corresponding invoicing.
- Send transactional service communications (sign-ups, renewals, incidents).
- Improve the platform, analyse anonymised usage patterns and detect fraud or anomalous behaviour.
4. Legal basis
Processing rests on several lawful bases: contract performance to deliver the B2B service, explicit consent for commercial communications (which can be withdrawn at any time), legitimate interest for service improvement and fraud prevention, and compliance with legal obligations in tax, accounting and commercial matters. Records are retained only as long as necessary for the stated purpose and, thereafter, during the statutory limitation periods that apply.
5. Sharing with third parties
Infrastructure providers act as processors: Hetzner Online GmbH (Germany, European Union) hosts the server and the database, both of which reside entirely within the EU. For transactional email delivery we use specialised providers (such as Resend, Brevo or Mailjet). We do not sell data to third parties or use it for external advertising. Crew contact information is only visible to registered platform users. Any international data transfer relies on the safeguards set out by the GDPR, such as the European Commission's standard contractual clauses. If payments are introduced in the future, they will be processed by a PCI-DSS certified provider.
6. Your rights
Every individual can exercise the rights of access, rectification, deletion, portability, limitation and objection to processing, as well as withdraw consent or file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es). To exercise any right, write to info@gomonkeymate.com from the registered address; a response is issued within one month of receipt, in line with article 12 of GDPR.
7. Cookies
The platform uses strictly necessary technical cookies to keep the session active, remember language preferences and secure authentication. Aggregated and anonymised analytics cookies are also used to understand usage patterns and optimise the experience. No behavioural advertising cookies are set, and identifiers are not shared with social networks.
8. Contact
For privacy inquiries, rights requests or security incidents: info@gomonkeymate.com
Your data lives on EU servers and is never sold. You can request access or deletion at any time by writing to us.