Privacy Policy

1. Controller

GoMonkeyMate acts as the controller for the personal information collected through this platform, in line with the EU General Data Protection Regulation (GDPR, EU 2016/679) and Spanish Organic Law 3/2018 on the protection of personal information and digital rights (LOPDGDD). The registered postal address and official contact channels are published at info@gomonkeymate.com, where any individual may reach out to exercise rights, raise complaints or request further information about the processing.

2. Information we collect

Only the records necessary to deliver the maritime B2B marketplace are collected, following the principles of minimisation and purpose limitation:

• Identification: first name, last name, email address and professional phone number.
• Professional profile: career history, experience, STCW certificates, CV, position sought and declared availability.
• Company record: trade name, VAT or tax ID, registered address, services offered and operating regions.
• Payments: processed directly by Stripe Payments Europe Ltd. Full card numbers or CVV codes are never stored on in-house infrastructure.
• Usage: pages visited, interactions, device type, browser, IP address and strictly necessary session cookies.

3. Purpose of processing

• Manage each account, profile and set of credentials inside the platform.
• Facilitate connections between verified professionals and companies in the maritime and yachting industry.
• Process payments, monthly or annual subscriptions and issue the corresponding invoicing.
• Send transactional service communications (sign-ups, renewals, incidents).
• Improve the platform, analyse anonymised usage patterns and detect fraud or anomalous behaviour.

4. Legal basis

Processing rests on several lawful bases: contract performance to deliver the B2B service, explicit consent for commercial communications (which can be withdrawn at any time), legitimate interest for service improvement and fraud prevention, and compliance with legal obligations in tax, accounting and commercial matters. Records are retained only as long as necessary for the stated purpose and, thereafter, during the statutory limitation periods that apply.

5. Sharing with third parties

Infrastructure providers act as processors under signed DPA contracts: Supabase (EU-hosted database), Stripe (PCI-DSS payment processing), Vercel (web application hosting) and Resend (transactional email delivery). Nothing is sold to third parties or used for external advertising. Crew contact information is only visible to companies with an active subscription, and any international transfer is covered by the standard contractual clauses approved by the European Commission.

6. Your rights

Every individual can exercise the rights of access, rectification, deletion, portability, limitation and objection to processing, as well as withdraw consent or file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es). To exercise any right, write to info@gomonkeymate.com from the registered address; a response is issued within one month of receipt, in line with article 12 of GDPR.

7. Cookies

The platform uses strictly necessary technical cookies to keep the session active, remember language preferences and secure authentication. Aggregated and anonymised analytics cookies are also used to understand usage patterns and optimise the experience. No behavioural advertising cookies are set, and identifiers are not shared with social networks.

8. Contact

For privacy inquiries, rights requests or security incidents: info@gomonkeymate.com