Privacy Policy

Last updated: July 2026.

1. Data controller

The data controller for personal data processed through rocafish.com is International Trading Fishery S.L., with Spanish Tax ID B88227277 and registered address at C/Comino nº4, C.P. 35212 – Telde, Las Palmas, Spain.

Privacy contact email: alexisperez@rocafish.com.

Rocafish has not currently appointed a Data Protection Officer. For any matter related to personal data protection, users may contact the email address indicated above.

2. Purpose of this policy

This Privacy Policy explains how Rocafish processes personal data obtained through the website, forms, communications, pre-registration requests, internal assessment processes and, where applicable, later phases of professional activation or B2B operations.

3. Personal data that Rocafish may process

Rocafish may process identification data, contact data, professional or business data, data submitted through forms, technical data, pre-registration and assessment data, and data related to professional verification when the user proceeds to later phases.

4. Source of the data

The data may come from the user, from the company or entity represented, from previous professional communications, from technical tools of the website or from external providers used in later phases.

5. Purposes of processing

Rocafish may process personal data to manage information requests, contact forms, pre-registration, internal assessment, B2B professional communications, creation of internal pre-registration records, fraud prevention, website security, compliance with legal obligations and management of later phases where applicable.

6. Legal basis

The legal bases may include the data subject’s consent, pre-contractual measures, performance of a contract, legitimate interest in B2B relationships, security and fraud prevention, and compliance with legal obligations.

7. Pre-registration and no automatic activation

Submitting data through Rocafish forms does not imply automatic acceptance as a professional user, KYB/KYC validation, access to a private panel, authorisation to operate or the right to participate in operations.

8. WordPress, Contact Form 7 and Flamingo

Rocafish uses WordPress as a content management system and may use web forms to receive requests or messages. When a user submits a form, the data entered may be recorded in internal WordPress systems, form extensions, message storage tools such as Flamingo, internal emails or operational management systems.

9. External providers used

Rocafish uses or may use external providers required for the operation, security, communication, analytics, verification, electronic signature, documented payments and operational traceability of the platform.

Such providers may include Rocket.net, Webempresa, Cloudflare, Google, Yousign and Lemonway, depending on the phase and functionality used.

Rocafish does not act as a payment entity, payment service provider, holder of funds, financier, guarantor or entity that retains or releases funds.

10. Google Analytics, Google Tag Manager and reCAPTCHA

Rocafish uses Google Analytics 4 and Google Tag Manager for measurement, analytics, tag management and website improvement, according to the applicable consent configuration.

Rocafish also uses reCAPTCHA or other anti-spam tools to protect forms, prevent abuse, avoid automated submissions and improve website security.

11. Professional communications

Rocafish does not currently operate a general newsletter. However, it may send B2B professional communications related to requests initiated by the user, pre-registrations, assessment processes, documentation, operations, technical notices, relevant changes or communications necessary for managing the platform.

12. Data recipients

Data may be accessible, as applicable, to authorised Rocafish personnel, technology providers, hosting, website maintenance, email, security, forms, analytics, electronic signature, verification, documented payments, professional advisers, competent authorities or parties to a B2B operation where necessary.

13. International transfers

Some technology, analytics, security, communication or external service providers may be located outside the European Economic Area or process data from third countries. Where international data transfers occur, Rocafish will seek to ensure that they are carried out in accordance with the safeguards required by applicable regulations.

14. Retention period

Rocafish will retain personal data for the time necessary to fulfil the purposes for which it was collected and, thereafter, for the periods necessary to address possible legal, contractual, tax, accounting, administrative liabilities or defence of claims.

15. Rights of data subjects

Data subjects may exercise, where applicable, their rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated individual decisions by writing to alexisperez@rocafish.com.

The user may also lodge a complaint with the Spanish Data Protection Agency if they consider that their rights have not been properly addressed.

16. Automated decisions

Rocafish does not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.

17. Security

Rocafish will apply reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration, improper disclosure, destruction or unlawful use.

18. Minors

The website and Rocafish services are addressed to companies, professionals and B2B operators. Rocafish does not direct its services to minors and does not intend to knowingly collect data from minors.

19. Changes to the Privacy Policy

Rocafish may modify this Privacy Policy to adapt it to regulatory, technical, operational, commercial, documentary or website changes. The applicable version will be the one published on the website at any given time.

20. Relationship with other legal texts

This Privacy Policy is supplemented by the Legal Notice, Cookies Policy, applicable General Terms, master agreements, specific operation contracts and annexes that may apply at each phase.