GDPR — Additional Information

Data Controller

SHIP2B VENTURES SGEIC, S.A. Via Augusta, 9 – 4º 2ª – 08006 Barcelona NIF: A01876572 info@ship2bventures.com

Purpose of processing

To manage inquiries, provide information about our funds and investment activities, maintain investor and partner relationships, send newsletters and commercial communications (with consent), and comply with legal obligations under applicable financial regulation.

Legal basis

• Consent of the data subject (Article 6.1.a GDPR) for sending commercial communications and newsletters. • Performance of a contract or pre-contractual measures (Article 6.1.b GDPR) for investor and partner relationships. • Compliance with legal obligations (Article 6.1.c GDPR) applicable to regulated fund managers (SGEIC). • Legitimate interests pursued by Ship2B Ventures (Article 6.1.f GDPR) for business management and relationship maintenance.

Data categories

Identification and contact data (name, email, phone, address), professional data (company, role), financial data where applicable for investor relationships, and any information voluntarily provided through our contact forms or communications.

Recipients

Data will not be sold or transferred to third parties except: • When required by law or regulatory obligation. • To service providers acting as data processors under data processing agreements (e.g., IT providers, email platforms). • To public authorities when legally required.

International transfers

In general, data is processed within the European Economic Area (EEA). Should any transfer outside the EEA be necessary, Ship2B Ventures will ensure adequate safeguards are in place in accordance with Chapter V of the GDPR (e.g., Standard Contractual Clauses).

Retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected, and thereafter for the periods required by applicable law. Specifically: • Contact and inquiry data: up to 3 years from last contact. • Investor/contractual data: duration of the relationship plus statutory retention periods (minimum 6 years under Spanish commercial law). • Newsletter subscribers: until consent is withdrawn.

Data subject rights

You have the right to: • Access your personal data. • Rectify inaccurate or incomplete data. • Erasure ('right to be forgotten') where applicable. • Restriction of processing. • Data portability. • Object to processing based on legitimate interests. • Withdraw consent at any time (without affecting prior processing). To exercise your rights, contact us at: info@ship2bventures.com or write to: SHIP2B VENTURES, Via Augusta 9, 08006 Barcelona, Spain.

Right to lodge a complaint

You have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es, or with the supervisory authority of your country of residence within the EU.

Automated decision-making

Ship2B Ventures does not carry out automated decision-making or profiling that produces legal or similarly significant effects on data subjects.

Source of data

Personal data is collected directly from the data subject through website forms, email communications, events, or business relationships. In some cases, data may be obtained from publicly available professional sources (e.g., LinkedIn) in the context of investor or partner outreach.