PRIVACY POLICY – DIVE HOUSE BALTIC
- Data Controller
The controller of your personal data is:
Dive House Sp. z o.o.
ul. Jana Heweliusza 11/811
80-890 Gdańsk
NIP: 5833470488
KRS: 0001018128
e-mail: info@divehouse.pl
For any matters related to personal data, you may contact us at:
📧 info@divehouse.pl
- What data we process
We may process the following data:
- Name and surname
- E-mail address
- Phone number
- invoicing details
- delivery address (for orders)
- information provided in contact forms
- technical data (IP address, cookies, site statistics)
Providing data is voluntary, but in some cases necessary to provide our services.
- Purposes of data processing
Your data may be processed for the following purposes:
- fulfilling orders placed in the online store
- organizing training, diving events and trips
- responding to inquiries and reservations
- sending newsletters (if you give consent)
- issuing accounting documents
- ensuring the security of the website and services
- Newsletter
If you subscribe to our newsletter:
- we process your e-mail address based on your consent
- you may unsubscribe at any time
- each message includes an unsubscribe link
Newsletter data is not sold or shared with third parties for marketing purposes.
- Online store
If you purchase products from our store:
- data is processed to fulfill the order
- data may be shared with courier companies and payment providers
- the legal basis is performance of a contract and accounting obligations
For online payments, data may be shared with payment operators to process the transaction.
Data may also be processed to handle returns, complaints, and consumer law obligations.
- Legal bases for processing
We process data based on:
- Art. 6(1)(b) GDPR – performance of a contract
- Art. 6(1)(c) GDPR – legal obligations (e.g. accounting)
- Art. 6(1)(f) GDPR – legitimate interest of the controller
- Art. 6(1)(a) GDPR – consent (e.g. newsletter)
- Data retention period
We store personal data:
- for the duration of the service or cooperation
- for the period required by accounting regulations
- until consent is withdrawn (e.g. newsletter)
In some cases, data may be retained for the limitation period of claims resulting from a contract.
- Your rights
You have the right to:
- access your data
- rectify your data
- erase your data
- restrict processing
- data portability
- object to processing
- lodge a complaint with the Polish Data Protection Authority (UODO)
- Cookies
The website uses cookies to:
- ensure proper functioning of the site
- analyze traffic and statistics
- improve service quality
You may manage cookies in your browser settings.
Detailed information is available in our Cookie Policy.
- Data transfers outside the EEA
If we use tools such as:
- Google Analytics
- MailerLite mailing system
your data may be transferred outside the EEA in accordance with GDPR safeguards. Transfers are based on Standard Contractual Clauses or other GDPR-compliant mechanisms.
- Analytics and tracking technologies
We use Microsoft Clarity and Microsoft Advertising to understand how users interact with our website through behavioral metrics, heatmaps and session recordings.
This information helps us improve and promote our products and services.
Usage data is collected through first-party and third-party cookies and other tracking technologies to determine product popularity and user activity.
Dodatkowo wykorzystujemy te dane do optymalizacji witryny, celów związanych z bezpieczeństwem i zapobieganiem nadużyciom oraz do działań reklamowych.
To learn more about how Microsoft collects and uses data, please visit Microsoft’s Privacy Statement.
These tools are used only after obtaining user consent through cookie settings.
- Data recipients
Your data may be shared with partners necessary to provide our services, including:
• courier and logistics companies
• payment operators
• accounting service providers
• hosting and IT service providers
• mailing system providers
• analytics tool providers
• diving organizations issuing certifications
These entities process data only under data processing agreements and in accordance with applicable law.
- Data collected outside the website
Your data may also be processed when:
- registering for training or events at our facility
- purchasing equipment directly from us
- participating in events organized by Dive House Baltic
- contacting us by phone or e-mail
Such data is processed under the same principles as data collected via the website.
- Data related to diving and training
When registering for training, trips or dives, we may process additional information such as:
- diving qualification level
- certifications held
- diving experience
- information required by training organizations
- dane ubezpieczenia nurkowego
- diving insurance details
These data are processed solely to ensure safety and provide training and travel services.
The legal basis for processing is performance of a contract and the legitimate interest of the controller in ensuring participant safety.
Such data may be retained for the period necessary to pursue potential claims related to the services.
- Profiling
We may use statistical data and activity information to tailor content and marketing messages to user interests.
Profiling does not result in automated decisions producing legal effects.
- Changes to this Privacy Policy
We reserve the right to update this Privacy Policy.
The current version is always available on our website.