Privacy Policy
Version 1.0 · Scharendijke, March 2025
Diving School Zeeland (trade name of Expeditie 82 B.V.) attaches great importance to the protection of your personal data. In this privacy policy we explain which data we collect, why, on what legal basis, and how we handle it. We act in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
| Trade name | Diving School Zeeland |
|---|---|
| Legal entity | Expeditie 82 B.V. |
| Location | Scharendijke, Zeeland |
| info@duikschoolzeeland.nl | |
| Phone | +31 6 4490 7735 |
2. What personal data do we process?
Contact form & reservations
First name, last name, email address, phone number, preferred date(s), experience level, desired activity, and any additional information you provide.
Newsletter
Email address and optionally first name (for personalised salutation).
WhatsApp contact
Your phone number and the content of messages you send us.
Medical questionnaire
Health declaration and any copy of a diving medical as required for dive participation. These are special category data which we process solely on the basis of your explicit consent and only insofar as necessary for the safety of the activity.
SSI registration
For students following an SSI course: name, date of birth, email address, and course results. These data are shared with SSI for certification purposes.
Website analytics
Technical data such as IP address, browser type, pages visited, and session duration, processed via privacy-friendly analytics (no cookies without consent).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Handling reservation and contact requests | Performance of a contract (Art. 6(1)(b)) |
| Sending confirmations and booking-related communication | Performance of a contract (Art. 6(1)(b)) |
| Newsletter and offers | Consent (Art. 6(1)(a)) — you can unsubscribe at any time |
| Safety during diving activities (medical questionnaire) | Explicit consent for special category data (Art. 9(2)(a)) |
| SSI certification of students | Performance of a contract (Art. 6(1)(b)) |
| Compliance with legal obligations (e.g. accounting) | Legal obligation (Art. 6(1)(c)) |
| Improvement of our website and services | Legitimate interest (Art. 6(1)(f)) |
4. Retention periods
We do not retain your personal data longer than necessary for the purpose for which it was collected, or for as long as required by law:
- Contact form (no booking): 12 months after last contact
- Data related to a booking or course: 7 years (statutory retention obligation)
- Medical questionnaire / diving medical (copy): 6 months after the activity, then destroyed
- SSI course data: in accordance with SSI policy (minimum 10 years for certification)
- Newsletter: until unsubscription, then removed within 30 days
- WhatsApp messages: 12 months, unless longer retention is required for service delivery
5. Sharing data with third parties
We never sell your data to third parties. We may share data with:
- SSI (Scuba Schools International): for certification of students; legally required for issuing diving certificates.
- Email marketing service: for sending the newsletter. We conclude a data processing agreement for this purpose.
- Website host / IT suppliers: parties that host or maintain our website and systems, on the basis of a data processing agreement.
- Accounting / administration software: for invoice processing and financial administration.
- Government authorities: only where legally required (e.g. tax authority, police in the event of an incident).
Transfer of data outside the European Economic Area (EEA) only takes place where appropriate safeguards have been put in place (e.g. Standard Contractual Clauses of the European Commission or an adequacy decision).
6. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes: encrypted connections (HTTPS/TLS), restricted access rights, use of strong passwords, and regular backups. In the event of a data breach that may affect your rights, we will notify you and the relevant supervisory authority in accordance with GDPR obligations.
7. Your rights under the GDPR
You have the following rights regarding your personal data:
- Access: you can request which data we process about you.
- Rectification: you can have incorrect or incomplete data corrected.
- Erasure: you can request deletion of your data ("right to be forgotten"), unless we have a legal obligation to retain it.
- Restriction: you can request that the processing of your data be temporarily restricted.
- Objection: you can object to processing based on legitimate interest.
- Data portability: you can receive your data in a commonly used format.
- Withdrawal of consent: where processing is based on consent, you may withdraw that consent at any time without giving reasons. This does not affect the lawfulness of prior processing.
- Lodge a complaint: you have the right to lodge a complaint with your national data protection authority.
To exercise your rights, please contact us at info@duikschoolzeeland.nl. We will respond to your request within four weeks, in accordance with the GDPR.
8. Analytics and cookies
Our website uses Matomo Analytics — a privacy-friendly, open-source analytics platform that we self-host. Your data is processed on servers within the European Economic Area and is never shared with third parties.
Matomo is configured so that no cookies are placed. Because no cookies or similar tracking technologies are used, your consent is not required. We collect only anonymised visitor data (such as pages visited and referring websites). IP addresses are anonymised immediately after processing and never stored.
We do not use Google Analytics or any other third-party analytics service. You can opt out of tracking at any time via your browser settings (e.g. Do Not Track) or via the Matomo opt-out page.
- No analytical cookies: Matomo is configured without cookies.
- No marketing cookies: we do not place advertising cookies.
- Social media: our Instagram and Facebook pages are external platforms. When using them, their privacy policies also apply.
9. Social media and external platforms
Our website contains links to our Instagram and Facebook pages. When you visit external platforms via these links, the privacy rules of those platforms apply. We are not responsible for data processing by Meta Platforms, Inc. or other third parties. We recommend consulting the privacy policy of the relevant platform.
10. Changes to this policy
We may update this privacy policy from time to time, for example as a result of changes to our services, legislation, or case law. For material changes we will notify you by email or a prominent notice on our website.
11. Contact and questions
Questions, comments, or requests about this privacy policy or the processing of your personal data? Please contact us:
| Organisation | Diving School Zeeland (Expeditie 82 B.V.) |
|---|---|
| Address | Elkerzeeseweg 34, 4322 NB Scharendijke |
| info@duikschoolzeeland.nl | |
| Phone | +31 6 4490 7735 |