Effective Date: July 12, 2026

At Diving Atlantis (referred to as "we," "us," or "our"), we operate the website www.divingatlantis-tenerife.com and are committed to protecting the privacy and personal data of our customers, students, and website visitors.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book a dive or excursion, or enroll in a PADI certification course at our dive center in Los Cristianos, Tenerife, Spain, in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws (LOPDGDD).

1. Information We Collect

We collect personal information that you voluntarily provide to us when booking a course, filling out a contact form, subscribing to our newsletter, or communicating with us.

• Identity Data: First name, last name, date of birth, gender, and passport/ID number (required for boat manifests and official PADI course registrations).

• Contact Data: Email address, phone number, and hotel/accommodation address in Tenerife (for pickup services).

• Medical & Health Data: Divers are required by maritime and PADI regulations to complete a medical questionnaire. We collect health-related information solely to ensure your physical safety during diving activities.

• Diver Certification Data: Your current certification level, number of logged dives, and certifying agency details.

• Payment Data: Credit/debit card details and billing information processed securely via our third-party payment gateways. We do not store raw credit card numbers on our servers.

• Technical Data: IP address, browser type, operating system, and browsing behavior collected via cookies when you navigate our website.

2. How We Use Your Information

We process your personal data based on lawful grounds under the GDPR, including the performance of a contract, legal obligations, and our legitimate business interests. We use your data to:

• Process, manage, and confirm your dive bookings and course reservations.

• Register you with PADI (Professional Association of Diving Instructors) to process your digital certification cards (eLearning and C-cards).

• Assess your physical fitness for diving based on medical statements.

• Arrange logistics, including hotel pick-ups and rental gear sizing.

• Send booking updates, administrative notices, and respond to inquiries.

• Send promotional newsletters or special discounts, provided you have given explicit consent to receive them (you can opt-out at any time).

3. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We only share your data with trusted partners necessary to conduct our operations:

• PADI: To process your official diving training, certification records, and eLearning materials.

• Payment Processors: To securely handle online payments and refunds.

• Local Authorities: When strictly required by Spanish maritime laws or insurance regulations (e.g., passenger manifests for boat excursions).

• Emergency Medical Services: In the highly unlikely event of a medical emergency, relevant health data will be shared with healthcare professionals.

4. Data Security and Retention

We implement robust technical and organizational security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed without authorization.

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, insurance, or reporting requirements. Under PADI and Spanish legal standards, certain training records and liability waivers must be archived for a minimum designated legal period.

5. Your GDPR Privacy Rights

If you are a resident of the European Economic Area (EEA), you possess the following rights regarding your personal data under the GDPR:

• Right of Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can request that we correct inaccurate or incomplete information.

• Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, subject to legal or regulatory retention limits (e.g., tax laws or active training records).

• Right to Restrict or Object: You can object to or restrict the processing of your data, including direct marketing.

• Right to Data Portability: You can request the transfer of your data to another service provider.

To exercise any of these rights, please contact us directly at the email address provided in Section 7.

6. Cookies Policy

Our website uses cookies to improve your user experience, analyze traffic, and remember your preferences (such as language settings). You can configure your internet browser to refuse cookies or to alert you when cookies are being sent. However, disabling cookies may cause some features of our online booking system to function incorrectly.

7. Contact Us

If you have any questions about this Privacy Policy, how we handle your data, or if you wish to exercise your data privacy rights, please reach out to our team:

• Company Name: Diving Atlantis Tenerife

• Location: Los Cristianos, Arona, Tenerife, Spain

• Email: info@divingatlantis-tenerife.com

• Website: www.divingatlantis-tenerife.com