Privacy Policy
At Worldwide Fishing Company, S.L., we understand that maintaining a transparent relationship with you is essential; therefore, below we present our Privacy Policy so that you are always properly informed about how we collect and securely process any data you provide to us.
Your data will be processed in accordance with current legislation and, in particular, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) regarding the protection of natural persons in relation to the processing of personal data and the free movement of such data, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
A careful reading of our Privacy Policy will give you the necessary information to understand how we will handle the data you provide.
1.- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
If you, or an authorised person, have provided us with your data, we inform you that Worldwide Fishing Company, S.L. (WOFCO), with NIF: ESB94135779 and registered office at Lugar Verdeal, S/N, 36957 Domaio, 36957 – Moaña, province of Pontevedra (Spain), is the controller responsible for processing your data. The controller is the legal entity that determines the purposes and means of processing personal data. In other words, the controller decides how and for what purposes personal data are processed.
Our contact details are:
• Email: rgpd@wofco-ltd.com
• Telephone: 986 122 549
Your data will be processed in accordance with the applicable regulations on personal data protection.
We inform you that there are joint controllers for the processing of your data, as we form part of a group of companies. You can consult all data controllers at the end of this policy.
Link Policy:
The Website may include hyperlinks or links that allow access to third-party websites other than http://www.wofco-ltd.com, and therefore not operated by Worldwide Fishing Company, S.L. The owners of these websites will have their own data protection policies and will be responsible, in each case, for their own data processing and privacy practices.
At Worldwide Fishing Company, S.L., we commit to complying with the duty of confidentiality and safeguarding personal data. To this end, we adopt the necessary measures to prevent alteration, loss, processing or unauthorised access, as established in the Regulation.
What personal data do we process and how do we protect them?
Personal data is any information relating to an identified or identifiable natural person ("the data subject"); an identifiable natural person is one whose identity can be determined, directly or indirectly, in particular through an identifier such as a name, identification number, location data, an online identifier or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
For the purposes established in this Privacy Policy, the controller collects and processes the personal data described in each type of processing, depending on the services requested or the contractual relationship maintained with our organisation.
Our organisation is committed to processing such data with total confidentiality and applying appropriate physical, technical, and organisational security measures to protect personal data.
You guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided and commit to keeping them duly updated.
Below, we describe the data processing activities we carry out:
Processing of data from “Clients and Suppliers”
1. What types of personal data do we process?
• Identifying data: name and surname, ID number (DNI), address, telephone, email address.
• Financial data: bank account.
• Academic and professional data: profession, position, experience, qualifications.
• Transaction-related data: products and services supplied.
2. For what purpose do we process your personal data?
We process the personal data you provide for the management of our commercial or business relationship, accounting management, administrative tasks, billing, and tax obligations.
The personal data provided will be retained as long as the commercial relationship continues. If you decide to delete your data, they may still be retained in our databases for the periods established by law in order to comply with tax and accounting obligations, and will be deleted once those legal deadlines have expired.
In accordance with Article 1964 of the Civil Code, actions derived from a contractual obligation expire after 5 years; therefore, this will be the general retention period for your data.
3. What is the legal basis for processing your data?
The legal basis for processing your data is the performance of a contract, as well as compliance with a legal obligation by the controller.
4. To whom will your data be communicated?
Your personal data will not be transferred to any entity, except to public authorities when legally required.
There are data processors who may process data on our behalf and in our name.
There are joint controllers involved in data processing.
No international data transfers are foreseen.
Processing of data from “Contacts and Potential Customers”
1. What types of personal data do we process?
• Identifying data: email address, telephone.
• Browsing information in the case of Online Services (IP address or information derived from cookies or similar devices — you can consult our Cookie Policy on the website).
2. For what purpose do we process your personal data?
We process the personal data you provide in the contact form for the management of commercial contacts and potential clients.
Personal data will be retained unless you communicate your objection to the processing. If you request deletion, the data will be removed from our contact database.
If you expressly authorise us, we may also process your data for promotional or advertising purposes.
3. What is the legal basis for processing your data?
The legal basis for processing your data is the express consent requested.
4. To whom will your data be communicated?
Your personal data will not be transferred to any entity.
There are data processors who may process data on our behalf and in our name.
There are joint controllers involved in data processing.
No international data transfers are foreseen.
Processing of data within the Internal Reporting System (IRS) or “Whistleblowing/Ethics Channel”
1. What type of personal data do we process?
Our whistleblowing channels are integrated into the Internal Reporting System and allow reports to be submitted anonymously as well as confidentially.
If the reporting person chooses to provide their data, the following will be collected:
• Identifying data: name and telephone number.
• Other data may be processed if uploaded by the reporting person, although such data cannot be determined in advance.
• Special categories of personal data will not be processed under any circumstances, and if the reporting person includes them, they will be deleted.
2. For what purpose do we process your personal data?
The purpose of the processing is to report potential risks and breaches to the body responsible for monitoring the operation and compliance of the prevention model, in order to avoid, prevent, or stop criminal offences or other irregularities.
In any case, the channel can be used without providing personal data, anonymously.
Under no circumstances will special categories of personal data be processed, and if received, they will be immediately deleted unless essential public interest reasons apply, as provided for in Article 9.2(g) of the General Data Protection Regulation (GDPR).
Our organisation is committed to processing all data with total confidentiality and applying appropriate physical, technical, and organisational security measures to protect personal data.
Personal data will be kept for the maximum legal period (one month).
3. What is the legal basis for processing your data?
The legal basis for processing your personal data is compliance with a legal obligation under Article 6.1(c) of the GDPR, as the whistleblowing channel is mandatory under Spanish Law 2/2023 of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption.
4. To whom will your data be communicated?
The identity of whistleblowers will be confidential and will not be disclosed to the persons concerned by the reported facts nor to third parties.
The identity of the whistleblower may only be communicated to the Judicial Authority, the Public Prosecutor’s Office, or the competent administrative authority in the context of a criminal, disciplinary, or sanctioning investigation.
No international transfers of personal data are foreseen.
What are your rights when you provide us with your data?
In accordance with applicable data protection regulations, you have a series of rights regarding the processing of your personal data. Exercising these rights will be free of charge, except where requests are manifestly unfounded or excessive, particularly if repetitive.
These rights are as follows:
a. Right to information:
You have the right to be informed in a concise, transparent, intelligible, and easily accessible manner, using clear and simple language, about the use and processing of your personal data.
b. Right of access:
You have the right to request at any time confirmation as to whether we are processing your personal data, to access such data, to obtain information about their processing, and to receive a copy.
The copy provided will be free of charge, although requests for additional copies may be subject to a reasonable fee based on administrative costs.
We may ask you to verify your identity or request additional information necessary to process your request.
c. Right to rectification:
You have the right to request the rectification of inaccurate, outdated, or incomplete personal data concerning you.
You may also request completion of incomplete personal data, including by means of an additional statement.
d. Right to erasure (“right to be forgotten”):
You have the right to request the deletion of your personal data when, among other reasons, such data are no longer necessary for the purposes for which they were collected.
This right is not absolute, and our organisation may retain the data, duly blocked, in the cases provided by applicable regulations.
e. Right to restrict processing:
You have the right to request that we restrict the processing of your personal data, meaning that we may store them but not continue processing them if any of the following conditions apply:
• you contest the accuracy of the data, for a period enabling verification;
• the processing is unlawful and you oppose deletion, requesting restriction instead;
• our organisation no longer needs the data for processing purposes, but you need them to establish, exercise, or defend legal claims;
• you have objected to processing while verifying whether our legitimate grounds override yours.
f. Right to data portability:
You have the right to have your data transmitted to another controller in a structured, commonly used, machine-readable format.
This right applies when processing is based on consent or on a contract, and is carried out by automated means.
g. Right to object:
This right allows you to object to the processing of your personal data, including profiling.
We may refuse only when we demonstrate compelling legitimate grounds or for the establishment, exercise, or defence of legal claims.
h. Right not to be subject to automated decision-making, including profiling:
This right allows you not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you, unless the decision is necessary for a contract, authorised by law, or based on your consent.
i. Right to withdraw consent:
Where we rely on your consent for processing specific activities (for example, sending commercial communications), you may withdraw it at any time.
We will then stop the activity for which consent was given unless another legal basis justifies continued processing, in which case you will be informed.
j. Right to lodge a complaint with a supervisory authority:
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD),
C/ Jorge Juan, 6, 28001 Madrid — Tel: 901 100 099 / 912 663 517 — www.agpd.es
or electronically at:
https://sedeagpd.gob.es/sede-electronica-web/vistas/formQuejasSugerencias/seleccionarQuejaSugerencia.jsf
You may exercise the above rights by sending us a communication to the physical or electronic address indicated at the beginning of this document, attaching proof of your identity and providing the necessary details to process your request.
Data subjects may obtain additional information on their rights at: www.agpd.es
In accordance with the provisions of Article 23 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that you may restrict unwanted advertising by voluntarily registering your data free of charge in an advertising exclusion file. There are currently two:
• the Robinson List, which is managed by the Spanish Association of Digital Economy (ADIGITAL): https://www.listarobinson.es/
• the stop advertising exclusion system, managed by the Asociación Española Para La Privacidad Digital, headquartered at Calle Médico Temístocles Almagro, nº 18, local 2, C.P. 03300 Orihuela (Alicante)
Advertising exclusion lists are regulated under the legislation described in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights. According to this law, all companies are required to check whether a user is registered, in order to respect their right not to receive unwanted advertising. Companies may be sanctioned for sending advertising to individuals included in advertising exclusion lists through any communication channel. However, even if you are registered in the Robinson List, businesses may send you advertising about their products or services if you are a customer or if you have given your consent.
You can check the advertising exclusion systems on the website of the Spanish Data Protection Agency:
https://www.aepd.es/areas/publicidad/index.html
Worldwide Fishing Company, S.L. reserves the right to modify its privacy policy at its discretion or due to legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Changes or updates to this privacy policy will not be explicitly notified to the user. Users are recommended to consult this page periodically to stay informed of the latest changes or updates.
This policy was last revised on 29 December 2025
Companies of the WOFCO group for the purposes of joint responsibility in personal data protection:
WORLDWIDE FISHING COMPANY, S.L. (WOFCO)
• NIF: ESB94135779
• Address: LUGAR VERDEAL-DOMAIO, S/N, FACTORIA (Pontevedra)
• Contact phone: +34 986 122 549
• Activity: wholesale trade of fish, seafood and other food products
• Email: rgpd@wofco-ltd.com
FANDICOSTA, S.A.U
• NIF: A36226645
• Address: LUGAR VERDEAL-DOMAIO, S/N, FACTORIA (Pontevedra)
• Contact phone: +34 986 326 800
• Activity: processing and marketing of frozen seafood products
• Email: rgpd@fandicosta.es
SAN MARCO PESCA, S.L.
• NIF: B27855477
• Address: Camiño do Laranxo, 17, interior, 36216 Vigo, Pontevedra
• Contact phone: +34 986 616 066
• Activity: processing, preparation and classification of fish, crustaceans and molluscs, and related cold-storage activity
• Email: rgpd@marinadesanmarco.com
BONFRIG FDC ULTRACONGELADOS, S.A.
• NIF: A36911246
• Address: LUGAR VERDEAL-DOMAIO, S/N, FACTORIA (Pontevedra)
• Contact phone: +34 986 326 800
• Activity: processing and marketing of frozen seafood products
• Email: rgpd@bonfrig.es
ILULIAQ, S.L.U
• NIF: B94135779
• Address: LUGAR VERDEAL-DOMAIO, S/N, FACTORIA (Pontevedra)
• Activity: wholesale trade of fish and other fishing and aquaculture products
• Email: rgpd@iluliaqseafood.com