Privacy Policy

The Dive Club Cipreia Dive Center (hereinafter referred to as the Dive Club Cipreia) respects the privacy of its customers / users and suppliers. This Privacy Policy describes who we are, for what purposes we may use your data, how we treat it, who we share it with, how long we keep it, and how to contact us and exercise your rights. The rules foreseen in this Data Protection Policy complement the provisions on the protection and processing of personal data provided for in the contracts that the Customers celebrate with the Dive Club Cipreia, as well as the rules set forth in the terms and conditions that regulate the offer of the various products and services and that are duly publicized in the respective websites. Your data is collected by Dive Club Cipreia, headquartered at Rua João Saraiva Nº 34 A / B 1700-250 Lisboa. Dive Club Cipreia) processes and stores personal data within the European Union (EU) and respects best practices in the field of personal data security and protection, taking the necessary technical and organizational measures to General Regulation on Data Protection (Regulation (EU) 2016/679), which is a directly binding legislative act for natural and legal persons who, whether or not resident in the EU, treat data of citizens of the European Union and ensure that treatment personal data is lawful, loyal, transparent and limited to authorized purposes. The privacy statement is under the responsibility of Dive Club Cipreia which is considered the data controller for the purposes of the RGPD and will determine the purpose and means of processing personal data presented and collected online. The Data Protection Officer (DPO) ensures compliance with the regulations and is involved in all matters relating to the protection of personal data. Your identification and contact details are indicated at the end of this document.

What is personal data?

Personal data is any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. Any identifiable person, directly or indirectly, identified by reference to a name, identification number, location data, identifiers by electronic means or one or more specific elements of his or her physical, physiological, genetic, mental, economic, cultural or social.

What is the processing of personal data?

The processing of personal data consists of an operation or set of operations carried out on personal data or personal data sets, by automated means or not, namely collection, registration, organization, structuring, preservation, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure or destruction.

Our data protection policy guarantees that the data is: Object of lawful, fair and transparent treatment in relation to the data subject ('lawfulness, loyalty and transparency'); Collected for specific purposes, explicit and legitimate and can not be further processed in a way incompatible with those purposes; Appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed; Accurate and up-to-date whenever necessary; taking all appropriate measures to ensure that inaccurate data, taking into account the purposes for which they are processed, are erased or rectified without delay; Preserved in a way that allows the data subjects to be identified only for the period necessary for the purposes for which they are processed; Treaties in a manner that guarantees their safety, including protection against their unauthorized or unlawful treatment and against their accidental loss, destruction or damage by adopting appropriate technical or organizational measures;

Purposes of Treatment of Personal Data.

Guaranteeing, where necessary, the prior consent of the holder of the personal data, we will collect, among others, the following information: Name and Surname, Civil Identification Number; Tax Identification Number; Date of Birth, Email and Telephone. In general, the personal data collected are based on the management of the contractual relationship, the provision of contracted services, the suitability of the services to the needs and interests of the Customer, namely for the purpose of accessing specific features of the services, suggestions for content, proximity information services as well as information and marketing actions. In addition, personal data may also be processed for the purpose of complying with legal obligations and for the purposes of investigation, detection and prosecution of serious crimes.

Cookies

Our website uses cookies or similar technologies to ensure the best user experience and to analyze trends, track user movement within the website, and collect demographic information about our user base as a whole. Our Cookies record information such as Internet Protocol (IP) address, browser type, Internet Service Provider (ISP), reference / exit pages, files accessed on our site (for example HTML pages), operating systems, date and time, to analyze trends on the site.

Shelf life:

The length of time during which personal data are stored and stored varies according to the purpose for which the information is processed. Effectively, there are legal requirements that require you to retain the data for a minimum period of time. Thus, and whenever there is no specific legal requirement, the data will be stored and kept only for the minimum period necessary for the pursuit of the purposes that led to their collection or subsequent processing, under the terms defined by law.

Adulthood

By accepting this privacy policy guarantees to be 18 years or older.

Use of personal data

Dive Club Cipreia will contact you to present the goods and / or services you sell. The processing of such data is based on the consent given by the data subject. Access to personal data is strictly limited to the personnel of the data controllers and subcontractors. Sharing of personal data Dive Club Cipreia guarantees that it does not intend to transfer data to third countries to the General Regulation of Data Protection and if it does, it will ask for this consent. Dive Club Cipreia entered into an agreement with its subcontractors to oblige them not to transfer data to third countries. In certain situations, both Dive Club Cipreia and its Subcontractors may be notified to disclose personal information in response to requests by supervisory authorities to fulfill the requirements of the RGPD.

Processing Security

The Cipreia Dive Club is committed to ensuring the protection of the personal data that is made available to it, and has adopted and implemented strict rules in this regard. Compliance with these rules is an obligation of all those who legally access them. Bearing in mind the concern and commitment that Dive Club Cipreia reveals in the defense of personal data, a number of technical and organizational security measures have been adopted in order to protect the personal data made available to it against its dissemination, loss, use unauthorized alteration, processing or access, as well as against any other form of illicit treatment. In addition, third parties who, in the scope of the provision of services, process the personal data of the Customer in the name and on behalf of the Dive Club Cipreia, are obliged in writing to carry out adequate technical and safety measures which, at any time, comply with the requirements of the legislation in force and ensure the protection of the rights of the data subject (in particular, the protection of the privacy and personal data of Customers).

Access and rectification or deletion of personal data

As the holder of the data, the Client has the right to request access to the data concerning him, to ask for rectification and to eliminate them. It may also limit the processing of data as well as oppose it and still require data portability. You may do so, either directly or by written request, addressed to the person responsible for the treatment, through the contacts made available for this purpose in this document. You may also request clarification from the Data Protection Officer or submit a complaint to the CNPD whenever you understand that your rights are being violated.

Right of access

The holder of the personal data has the right to obtain from the Dive Club Cipreia the confirmation that the data relating to him are treated or not and, if appropriate, to access his personal data and access the information provided by law .

Direito de retificação

The holder of personal data has the right to obtain from the company of the Dive Club Cipreia without undue delay the rectification of inaccurate or incomplete data concerning him.

Right to erase data ("right to be forgotten")

The holder of the personal data has the right to obtain from the Dive Club Ciprei the erasure of his data without undue delay and the latter has the obligation to erase the personal data without undue delay when one of the following applies in particular: (a) personal data are no longer necessary for the purpose for which they were collected or processed; (b) the consent holder has withdrawn his consent for the processing of data (in cases where treatment is based on consent) and there is no other basis for such treatment; (c) the proprietor is opposed to the treatment and there are no prevailing legitimate interests justifying the treatment;

Right to limit treatment

The data subject has the right to obtain from the Dive Club Cipreia the limitation of the treatment if one of the following applies in particular: a) To answer the accuracy of the personal data, during a period that allows the Dive Club Cipreia to verify its accuracy; b) The processing of data is lawful and the holder of the data opposes the erasure of personal data and request, on the other hand, the limitation of its use; c) Dive Club Cipreia no longer needs personal data for treatment purposes, but such data are required by the holder for the purposes of declaration, exercise or defense of a right in a legal process; (d) if he opposes the processing until it is established that the legitimate grounds of the controller prevail over those of the data subject.

Right of portability of data

If the processing depends on the consent of the data subject and such consent has been provided by automated means, the data subject has the right to receive the personal data relating to him and which he has provided to the Dive Club Cipreia in a structured, current use and automatic reading.

Right of opposition

In cases where the processing of data is carried out for 1) effect of the legitimate interests pursued by the Dive Club Cipreia; or 2) the processing of data is carried out for the purposes of direct marketing or 3) definition of profiles, you can also, at any time, oppose the treatment of your personal data.

Marketing E-mails

Data controllers are allowed, after explicit consent, to send marketing emails to site users. At any time the user may cancel the consent through the link, existing for this purpose, in each email sent.

Changes to this policy

This policy may be updated from time to time, for example due to changes to relevant legislation. If any material changes are made, customers will be notified by email or notification on the website.

Contacts

RESPONSIBLE FOR TREATMENT
Dive Club Cipreia
Tel: +351 21 843 55 80
E-mail: info@diveclubcipreia.com