Privacy Policy

Privacy

This Privacy Policy explains how OceanID collects, uses and protects personal data through the website oceanid.ai.

Last updated: 2026-07-05

Data Controller

This Privacy Policy explains how OceanID collects, uses and protects personal data through the website oceanid.ai. The data controller is THALASSA VENTURES SL with Tax ID B22488753 under the trading name OceanID.

Registered office: Avenida Alcalde José Aranda 55, Esc. D, 4 C, 28924 Alcorcón, Madrid, Spain.

Contact: info@oceanid.ai.

Website: oceanid.ai.

For the purposes of this Legal Notice, the website owner may be referred to as “OceanID”, “we”, “us” or “our”.

Personal Data We Collect

OceanID may collect the following categories of personal data through this website. Data provided directly by users: when users join our waitlist, contact us or complete a form on the website, we may collect email address, name if requested, company, dive center, school, organization or professional role if provided, and any information voluntarily included by the user in a message or form field. Business and customer contact data: if a user contacts OceanID on behalf of a company, dive center, school, conservation organization, tourism provider, partner or potential customer, we may process professional contact details and information related to that organization, such as name and surname, professional email address, company or organization name, role or job title, business enquiry details, and information about the user’s interest in OceanID’s products, services, partnerships or future commercial opportunities. This data is used to manage business relationships, respond to enquiries, evaluate potential partnerships, provide information about OceanID and, where applicable, prepare or manage a commercial relationship. Technical and usage data: when users browse the website, we may collect certain technical information necessary for the operation and security of the website, such as IP address, browser type and version, device information, operating system, pages visited, date and time of access, approximate location derived from technical data, and cookie identifiers or similar technologies where applicable. At this stage, OceanID does not use analytics tools for tracking user behaviour across the website. If analytics tools are introduced in the future, this Privacy Policy and the Cookie Policy will be updated accordingly, and any required consent will be requested where applicable.

Purposes of Processing

OceanID processes personal data for the following purposes. Waitlist management: we use the personal data submitted through the waitlist form to register users’ interest in OceanID, manage the waitlist and contact users about product updates, launch information, early access or related communications. Responding to enquiries: we use personal data submitted through contact forms or email to respond to requests, questions, comments or other communications sent by users. Business development and customer relationship management: where users contact OceanID in a professional capacity, we may process their business contact details to manage commercial enquiries, assess partnership opportunities, provide information about OceanID’s services, organize demos or calls, and maintain a relationship with potential customers, partners, dive centers, schools, conservation organizations or other professional contacts. Marketing communications: where users have given their consent, we may use their email address to send newsletters, updates, product news, launch announcements or other commercial communications related to OceanID. Users may withdraw their consent or unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at info@oceanid.ai. Website operation and security: we may process technical and usage data to operate, maintain, monitor and secure the website, prevent misuse, detect technical issues and improve website performance. At this stage, OceanID does not use analytics tools. If analytics tools are introduced in the future, we will update this Privacy Policy and our Cookie Policy accordingly. Compliance with legal obligations: we may process personal data where necessary to comply with applicable legal obligations, respond to lawful requests from public authorities, or exercise or defend legal claims.

Legal Basis for Processing

OceanID processes personal data on the following legal bases: consent for joining the waitlist, receiving marketing communications, and using non-essential cookies where applicable; legitimate interest for maintaining website security, preventing misuse, improving the website, responding to business enquiries, managing professional contacts and maintaining commercial relationships with potential customers, partners or collaborators; pre-contractual or contractual necessity where a user contacts us to request information about OceanID’s services, early access, demos, partnerships or a potential business relationship; and legal obligation where processing is necessary to comply with applicable laws or regulatory requirements. Where processing is based on consent, users may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Data Retention

OceanID will retain personal data only for as long as necessary for the purposes for which it was collected. Waitlist data will be retained while the waitlist remains active and for as long as necessary to manage product launch, early access or related communications, unless the user requests deletion earlier. Marketing data will be retained until the user withdraws consent, unsubscribes or requests deletion. Contact and enquiry data will be retained for the time necessary to manage and respond to the request, and afterwards for the period required to address possible legal responsibilities. Business contact data may be retained for as long as there is a potential or ongoing business, partnership or customer relationship, unless the data subject requests deletion or objects to the processing where applicable. Technical and security data will be retained for the period necessary to ensure website operation, security and fraud prevention. Data required for legal compliance may be retained for the applicable statutory limitation periods.

Recipients and Service Providers

OceanID may share personal data with trusted third-party service providers where necessary to operate the website and provide related services. These providers may include email marketing and waitlist management providers, such as Mailchimp; website hosting and infrastructure providers; IT, security, maintenance or technical support providers; legal, accounting or professional advisers where necessary; and public authorities, courts or regulators where required by law. At this stage, OceanID does not use analytics providers to track user behaviour across the website. If analytics tools are introduced in the future, this Privacy Policy and the Cookie Policy will be updated accordingly. Service providers acting on behalf of OceanID process personal data under appropriate contractual obligations and only for the purposes instructed by OceanID.

Email Marketing and Mailchimp

OceanID may use Mailchimp to manage the waitlist, email subscriptions and marketing communications. When users join the waitlist or subscribe to receive updates from OceanID, their personal data may be processed through Mailchimp for the purpose of managing subscriptions, storing consent preferences, sending communications and allowing users to unsubscribe. OceanID has configured GDPR-related settings in Mailchimp to help collect and manage consent preferences where applicable. Users can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in our emails or by contacting OceanID at info@oceanid.ai.

International Data Transfers

Some of OceanID’s service providers may be located outside the European Economic Area or may process personal data in countries that do not provide the same level of data protection as the European Union. Where international transfers occur, OceanID will take appropriate safeguards in accordance with applicable data protection laws. These safeguards may include adequacy decisions, Standard Contractual Clauses approved by the European Commission, data processing agreements or other legally recognized transfer mechanisms. If OceanID uses Mailchimp for waitlist or email marketing management, personal data may be processed outside the European Economic Area. In such cases, the relevant transfer safeguards provided by Mailchimp and applicable data protection laws will apply.

User Rights

Users may exercise the following rights under applicable data protection laws: right of access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability, and right to withdraw consent at any time where processing is based on consent. Users can exercise their rights by contacting OceanID at info@oceanid.ai. OceanID may request additional information to verify the user’s identity before responding to a rights request. Users also have the right to lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos, particularly if they believe that their data protection rights have not been properly addressed.

Security Measures

OceanID applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure or destruction. However, no website, system or transmission over the Internet can be guaranteed to be completely secure. Users are responsible for ensuring that the information they provide is accurate and for using the website in a secure and lawful manner.

Children’s Privacy

The website is not intended for children under the age of 14, and OceanID does not knowingly collect personal data from children under that age through this website. If OceanID becomes aware that it has collected personal data from a child without appropriate authorization, it will take reasonable steps to delete such data.

Future OceanID App and Customer Data

This Privacy Policy applies to personal data collected through the public website oceanid.ai, including the waitlist, contact forms and related communications. OceanID may in the future provide an application or platform that allows users or customers to upload dive photos, log underwater experiences, identify marine species, tag dive sites or access related product features. The personal data processed through such application or platform may differ from the data processed through this website. Before launching or making such services available, OceanID will provide appropriate privacy information covering the relevant product data processing activities. Where OceanID processes personal data on behalf of business customers, such processing may be governed by separate contractual terms, including a data processing agreement where required by applicable data protection laws.

Automated Decision-Making

OceanID does not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on users. Any future AI-assisted marine life identification features provided by OceanID will be intended for informational and educational purposes and will be covered by the relevant product terms and privacy information when such services become available.

Changes to this Privacy Policy

OceanID may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, website functionality, service providers or data processing activities. The updated version will be published on this website, indicating the date of the latest update.