Privacy Policy – Underwater Academy

Who we are

The website www.underwateracademy.eu is operated by Underwater Academy, an independent professional activity run by a certified diving instructor.

Underwater Academy does not operate from a fixed public office, but delivers its services through collaborations with selected diving centers that manage the logistical aspects of activities.

For any privacy-related inquiries, you can contact:
Email: privacy@underwateracademy.eu

What personal data we collect and why we collect it

Types of data collected

Through the website and related activities, the following personal data may be collected:

Identification data: first name, last name
Contact data: email address, phone number
Information voluntarily provided in messages
Technical data: IP address, browsing data
Diving-related information (where required)
Health-related data voluntarily provided (e.g. fitness to dive)

Purpose of processing

Personal data are collected for:

Responding to inquiries submitted via the website
Organizing diving courses and experiences
Administrative and operational management
Ensuring safety during diving activities
Issuing official certifications through recognized agencies
Compliance with legal obligations

Legal basis

Processing is based on:

User consent
Pre-contractual and contractual measures
Legal obligations
Legitimate interest of the Controller

Comments

If the website allows comments, the data entered in the comment form, along with the IP address and browser data, may be collected for security purposes.

Media

If users upload images or media files, they should avoid including sensitive or personal data. Uploaded content may be publicly accessible.

Contact forms

When submitting a contact form, we collect:

Name
Email address
Optional phone number
Message content

These data are used exclusively to respond to inquiries and are not used for marketing purposes without consent.

Cookies

The website uses:

Technical cookies necessary for functionality
Analytical cookies (possibly anonymized)
Third-party cookies (if external services are integrated)

Users can manage their preferences via the cookie banner.

Analytics

The website may use analytics tools to collect anonymous data such as visited pages and time spent on the site.

These data are used solely to improve user experience and do not directly identify users.

Who we share your data with

Personal data may be shared, where necessary, with:

Partner diving centers for logistical management of activities
Certification agencies such as PADI for issuing certifications
Technical service providers (hosting, email services)
Administrative or legal consultants

Data are shared strictly for operational purposes and are never sold.

How long we retain your data

Personal data are retained:

For as long as necessary to handle inquiries
For the duration of the training or contractual relationship
In accordance with legal and tax obligations
Until consent is withdrawn, where applicable

What rights you have over your data

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Request data portability
Withdraw consent at any time

Requests can be sent to: privacy@underwateracademy.eu

Where your data is sent

Some data may be transferred:

To service providers located outside the European Union
To international certification platforms

Such transfers are carried out in compliance with GDPR safeguards, including:

Standard Contractual Clauses (SCCs)
Other appropriate legal safeguards

Contact information

For any data protection inquiries:
Email: privacy@underwateracademy.eu

Additional information

How we protect your data

We implement appropriate technical and organizational measures, including:

Secure connections (SSL)
Restricted data access
Server protection systems
Regular backups

Data breach procedures

In the event of a personal data breach, we will:

Notify competent authorities when required
Inform affected users if necessary
Take immediate action to mitigate risks

What third parties we receive data from

We may receive user data from:

Partner diving centers
Certification organizations
Booking or course management platforms

Automated decision-making

We do not use automated decision-making or profiling.

Industry regulatory requirements

Diving activities are subject to international safety and certification standards. Certain personal data are required to comply with these standards and to issue official certifications.