Privacy Policy.

Version 2.3 · Last updated: 9 October 2026 · Replaces version 2.2

1. Data controller

• Trading Plus Icon Alliance, S.L. (Spanish tax ID B88953138), owner of the «The Cargo Room» brand.
• Email: privacy@thecargoroom.co.
• Our registered address and commercial registry details are set out in the Legal Notice (thecargoroom.co/legal).

2. Data we process and where it comes from

• Data from the application form: identification, contact and professional profile data.
• Data from public sources: corporate websites, the public professional activity of the profiles you give us, commercial registries and EU VAT records, and official sanctions lists of the European Union and the United Nations.

3. Purposes and legal bases

• Assessing your application for admission: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Verifying your profile, to prevent identity theft and fraud in the admission process: legitimate interest (Art. 6(1)(f) GDPR).
• Screening against the official sanctions lists of the European Union and the United Nations: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Keeping the file of applications that are not admitted, so that the decision can be evidenced later: legitimate interest (Art. 6(1)(f) GDPR).
• Managing the relationship with admitted members, video calls and introductions: performance of a contract (Art. 6(1)(b) GDPR).

4. Assisted decisions

• Applications are analysed with the support of software and artificial intelligence tools that prepare assessment proposals. The final decision on admission is always taken by a person.
• We do not always request additional information before deciding. If we request it and it is not provided, a person decides on the basis of the information available; no application is decided merely by the passage of time.
• We will only contact you if your application is successful, to invite you to a validation video call. You may at any time ask about the status of your file, express your point of view and challenge the decision by writing to privacy@thecargoroom.co.

5. Recipients

• Other members or counterparties, only to the extent necessary to put you in contact and with your knowledge.
• Providers acting as data processors: hosting, email, storage and video conferencing, forms, security and artificial intelligence.
• Public authorities, law enforcement and courts where there is a legal obligation.

6. International transfers

• Some providers are located outside the European Economic Area. Transfers are based on adequacy decisions or on standard contractual clauses approved by the European Commission.
• You may request a copy of the applicable safeguards by writing to privacy@thecargoroom.co.

7. Retention period

• Applications not admitted: 24 months from the decision that closes the file.
• Clients and members: for as long as the relationship lasts and, afterwards, for the applicable statutory limitation periods.

8. Your rights

• You may exercise your rights of access, rectification, erasure, objection (see the next paragraph), restriction and portability by writing to privacy@thecargoroom.co, or lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Mandatory information

• The fields of the form are necessary to process your application; if they are not completed, your application cannot be assessed.