Privacy Policy
At Dive Around Madeira, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us or enquire about our scuba diving experiences and courses.
We aim to handle your information responsibly and transparently, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection legislation.
By using our website, you can learn about our diving services, explore Madeira's underwater world and contact our team for further information.
We encourage you to read this policy to understand how your personal data may be processed and what rights you have.
Who We Are?
Dive Around Madeira is a mobile diving centre based at the Whale Museum in Caniçal, Madeira Island, Portugal.
We offer scuba diving experiences, guided dives and SSI-certified diving courses for beginners and certified divers.
For matters relating to personal data processed through our website and services, you can contact us using the following details:
Business name: Dive Around Madeira
Business address: R. Garcia Moniz nº1, 9200-031 Caniçal
Email: divearoundmadeira@gmail.com
Phone: +351 938 343 410
The legal entity operating Dive Around Madeira is responsible for determining the purposes and means of processing personal data described in this policy.
Personal Data We May Collect
Depending on how you interact with our website and services, we may collect different categories of personal information.
Contact Information
When you contact us by email, telephone, WhatsApp or through a website form, we may collect:
Your name.
Your email address.
Your telephone number.
The content of your enquiry.
Any additional information you choose to provide.
We use this information to respond to your questions and communicate with you about our services.
Booking and Diving Information
When you enquire about or book a scuba diving experience, we may collect information necessary to organise your activity, such as:
Your name and contact details.
Your preferred diving experience or course.
Your preferred date and time.
The number of participants.
Your diving experience and certification level.
Other relevant information needed to organise your booking.
Certain diving activities may require additional information to assess participation requirements and comply with applicable safety obligations.
Where health-related information is required, we will provide appropriate information about its collection, purpose, legal basis and handling.
We aim to collect only the information reasonably necessary for the relevant service.
Payment Information
If online payments or deposits are available, payment information may be processed by an external payment service provider.
Depending on the payment method, we may receive transaction details, payment status and information necessary for invoicing or booking administration.
Payment card information is handled according to the arrangements and security standards of the relevant payment provider.
Website Usage Information
When you visit our website, certain technical information may be collected automatically.
Depending on the website configuration, this may include:
IP address.
Browser type and version.
Device and operating system information.
Pages visited.
Website interaction and performance information.
Approximate geographical information derived from technical data.
Cookie preferences.
Such information may be processed for website security, functionality and, where applicable, analytics purposes.
For further information, please consult our Cookie Policy.
How We Use Your Personal Data
We may process personal information for the following purposes:
Responding to enquiries
To answer questions about our scuba diving experiences, SSI courses, availability, prices and other services.
Managing bookings
To organise reservations, communicate booking details and provide information relevant to your diving experience.
Providing diving services
To administer the activities requested, verify applicable participation requirements and support the safe organisation of our services.
Processing payments
To manage payments, refunds, invoices and related administrative obligations where applicable.
Improving our website
To maintain website functionality, monitor technical performance and, with the necessary consent, understand how visitors interact with our content.
Complying with legal obligations
To meet applicable accounting, tax, regulatory and other legal requirements.
Marketing communications
If we introduce newsletters or promotional email communications, we will use personal information for these purposes only where permitted by applicable law, including obtaining consent when required.
Legal Basis for Processing Personal Data
Under the GDPR, personal data must be processed on an appropriate legal basis.
Depending on the circumstances, Dive Around Madeira may rely on:
Performance of a Contract
Where processing is necessary to manage a booking, provide a diving experience or take steps requested by you before entering into a contract.
Legal Obligations
Where processing is necessary to comply with applicable legal requirements, including relevant accounting and tax obligations.
Legitimate Interests
Where processing is necessary for legitimate business interests, such as responding to certain enquiries, maintaining website security or managing business operations, provided these interests are not overridden by your rights and freedoms.
Consent
Where consent is required, such as for non-essential cookies, certain marketing communications or other activities requiring your permission.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where special categories of personal data, such as health information, are processed, an additional legal condition under Article 9 of the GDPR must also apply.
Sharing Your Personal Data
We may share personal information with trusted third parties when necessary to operate our website, manage bookings or provide our services.
Depending on the services used, these may include:
Website hosting and management providers.
Booking and scheduling platforms.
Payment service providers.
Email and communication services.
IT and technical support providers.
Diving certification organisations, where relevant to a requested course.
Public authorities, where disclosure is required by law.
Personal data will only be shared where there is an appropriate purpose and legal basis.
Where third parties process personal data on our behalf, we seek to ensure that suitable contractual and organisational safeguards are in place.
We do not disclose personal information to unrelated third parties for their independent marketing purposes without an appropriate legal basis.
Squarespace and Third-Party Services
Our website is developed using Squarespace, which provides website hosting and management services.
Squarespace may process technical and personal information in connection with website functionality, security and other enabled features.
For information about Squarespace's own data processing activities, please consult:
https://www.squarespace.com/privacy
Our website may also include third-party services, including:
Visitors may contact Dive Around Madeira through WhatsApp.
Communications through this service may involve the processing of personal information by WhatsApp or its associated service providers, subject to their applicable privacy policies.
Booking and Payment Providers
Where external booking or payment services are used, personal information may be processed by the relevant provider in accordance with its role and applicable privacy information.
Embedded Content
Videos, maps or other embedded content may be provided by external services.
These services may collect technical information or use cookies according to their own policies and the consent requirements applicable to the website.
Cookies and Similar Technologies
Our website may use cookies and similar technologies to support functionality, security and optional features.
Essential cookies may be necessary for the website to operate correctly.
Non-essential cookies, including certain analytics and marketing technologies, will only be used where the necessary consent has been obtained.
Visitors can manage their cookie preferences through the cookie consent tools available on our website.
For further details, please read our Cookie Policy.
How Long We Keep Your Data
We retain personal information only for as long as necessary for the purposes for which it was collected or where retention is required by applicable law.
Retention periods may vary depending on the type of information and the processing activity.
For example:
Contact enquiries may be retained for as long as reasonably necessary to respond and manage subsequent communications.
Booking information may be retained for the duration of the service relationship and any applicable legal limitation periods.
Accounting and transaction records may be retained for periods required by Portuguese law.
Information processed on the basis of consent will be retained according to the relevant purpose, withdrawal of consent and applicable retention requirements.
Once information is no longer required, we will take appropriate steps to delete or anonymise it, unless continued retention is legally justified.
Data Security
We take the protection of personal data seriously and aim to use appropriate technical and organisational measures to protect information against:
Unauthorised access.
Accidental loss.
Unlawful disclosure.
Alteration or misuse.
Other forms of unlawful processing.
These measures may include access controls, secure communication methods and security features provided by our technology suppliers.
Although we take reasonable precautions, no method of transmitting or storing information online can guarantee absolute security.
International Data Transfers
Some of our technology providers may process or store personal information outside the European Economic Area (EEA).
Where personal data is transferred internationally, we aim to ensure that appropriate safeguards are applied in accordance with the GDPR.
Depending on the circumstances, these may include adequacy decisions recognised by the European Commission or appropriate contractual safeguards, such as Standard Contractual Clauses.
Further information about relevant transfers and safeguards may be requested using the contact details provided in this policy.
Your Data Protection Rights
Under the GDPR, you may have the following rights in relation to your personal data:
Right of Access
You can request information about the personal data we hold about you and obtain a copy, subject to applicable conditions.
Right to Rectification
You can request the correction of inaccurate or incomplete personal information.
Right to Erasure
You can request the deletion of your personal data in circumstances provided for by law.
Right to Restrict Processing
You may request restrictions on the use of your information in certain situations.
Right to Data Portability
Where applicable, you can request to receive certain personal data in a structured, commonly used and machine-readable format.
Right to Object
You may object to certain processing activities, including processing based on legitimate interests, subject to applicable legal conditions.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
Rights Relating to Automated Decision-Making
Where applicable, you have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, please contact:
We will respond to requests within the time limits established by applicable data protection legislation.
Complaints and Supervisory Authority
If you have concerns about how your personal information is processed, we encourage you to contact us first so that we can address your enquiry.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
In Portugal, the relevant authority is:
Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt
You may also contact another competent supervisory authority where applicable under the GDPR.
Children's Privacy
Our website provides information about scuba diving experiences that may be relevant to families and younger participants.
Where personal information relating to minors is required for a diving activity, we will follow applicable legal requirements, including any necessary involvement or authorisation of a parent or legal guardian.
We do not intend to collect personal information from children through our website without an appropriate lawful basis.
If you believe that personal information relating to a child has been provided inappropriately, please contact us.
External Websites
Our website may contain links to external websites, including booking services, social media platforms, tourism resources and diving certification organisations.
We are not responsible for the privacy practices of independent third-party websites.
We recommend reviewing the privacy policies of external services before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, website functionality, data processing activities or applicable legislation.
The latest version will be published on this page, together with its revision date.
Where required by law, we will take additional steps to inform individuals of material changes.
Contact Us
If you have questions about this Privacy Policy, the processing of your personal information or the exercise of your data protection rights, please contact us:
Dive Around Madeira
R. Garcia Moniz nº1, 9200-031 Caniçal
Whale Museum, Caniçal
Madeira Island, Portugal
Email: divearoundmadeira@gmail.com
Phone: +351 938 343 410
We are committed to handling your personal information responsibly and helping you enjoy a safe and transparent experience with Dive Around Madeira.
