PRIVACY POLICY (GDPR)

This Privacy Policy governs the processing of personal data carried out through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. Data Controller

Responsible party: Buceo y Servicios Andalucía 2018, SL
CIF: B04901088
Address: Calle Dársena de la Batea, 40, Bajo, 04711 Almerimar (Almería), Spain
Email: diving@buceoandalucia.com

2. Data we process

We can process the following categories of data:

Identification and contact information: name, surname, email, telephone.

Query data: information that the user provides in the message (e.g., experience, dates, preferences).

Browsing data/cookies: only if the user authorizes it through the cookie banner (see Cookie Policy).

3. Purposes of the processing

We process the data for:

Attend to information requests and respond to inquiries received via form, email or WhatsApp.

Administrative and commercial management of the requested services (budgets, reservations, coordination, invoicing if applicable).

Compliance with legal obligations (e.g., tax/accounting where applicable).

No marketing actions or newsletters are sent with the data collected on the website, unless the user expressly requests it.

4. Legal basis

Consent of the interested party (art. 6.1.a GDPR) when the user sends a form or contacts voluntarily.

Execution of pre-contractual measures or contract (art. 6.1.b GDPR) when the user requests a reservation or quote.

Compliance with legal obligations (art. 6.1.c GDPR) where applicable.

5. Recipients

Data will not be transferred to third parties except when legally required or when necessary for the provision of the service.

Data may be accessed by, as data processors, providers who provide necessary services (e.g., web hosting, email, management tools).

6. International Transfers

In the event that any technology provider uses servers outside the European Economic Area, it will be ensured that there are adequate legal mechanisms in place (standard contractual clauses or other mechanisms provided for by the GDPR).

7. Storage periods

Inquiries: for the time necessary to address the request and, at most, 12 months from the last interaction (unless there is a contractual relationship).

Customer/service data: during the relationship and subsequently for the legal (tax/accounting) periods, usually 6 years.

8. User Rights

The user may exercise their rights to:

Access, rectification, deletion

Opposition, limitation of treatment

Portability

Withdraw consent at any time

To exercise these rights, send an email to buceo@buceoandalucia.com
indicating the right you wish to exercise and attaching a copy of a document that proves your identity (if necessary).

The user may also file a complaint with the Spanish Data Protection Agency (AEPD).

9. Security measures

The data controller applies appropriate technical and organizational measures to ensure the security and confidentiality of the data.

10. Minors

In the case of services for minors, data will be processed solely for the purpose of managing the service, and parental/guardian authorization will be requested when necessary. For audiovisual content (photos/videos), specific consent will be requested.