Your data is in good hands with us – we take care of it.

Privacy Policy

We, Scubatours Dive & Liveaboard Travel, as the operator of the website www.scubatours.eu and the responsible entity, take our obligation to protect your personal data very seriously. We design our website to collect, process, and use as little personal data as possible. Under no circumstances will personal data be rented or sold to third parties for advertising purposes.

Access to personal data is granted only to individuals who require such data to perform their duties within the responsible entity, have been informed about legal data protection regulations, and are obligated to comply with these regulations under Article 5 of the EU General Data Protection Regulation (EU-GDPR). The collection, processing, use, and transmission of personal data are carried out in accordance with Article 6(1) of the EU-GDPR.

Changes in the Purpose of Data Processing and Use

Due to advancements in technology or organizational changes to the processing methods we use, we reserve the right to further develop this Privacy Policy in line with new technical requirements. Therefore, we encourage you to review our Privacy Policy periodically. Should you disagree with any future developments, you can request the deletion of your data in writing, according to Article 17 EU-GDPR, provided it is not stored under other legal obligations such as commercial or tax law requirements.

Anonymous Data Collection

You can visit the website of the responsible entity without revealing your identity. We only learn the name of your Internet Service Provider, the website from which you accessed us, and the pages you visited on our site. The legal basis for this data collection is Article 6(1)(b) GDPR. This information is evaluated solely for statistical purposes, keeping you as an individual user anonymous.

General Information on Collecting and Processing Personal Data

Personal data is only collected when you voluntarily provide it to us, for instance, by subscribing to our newsletter, booking one of our services via our website (Art. 6(1)(b) GDPR), or when required for the operation of the website or other legitimate interests (Art. 6(1)(f) GDPR). The responsible entity adheres to Articles 5 and 6 of the EU-GDPR.

Under personalized services, your registration data will be processed with your consent for purposes such as sending newsletters, customizing the offered electronic services, responding to inquiries, or processing orders.

You may object to the storage of your personal data at any time by sending an email to info@scubatours.eu

with the subject line “Remove Data Records.” Please include the relevant website in your email. Note that this may prevent us from responding to inquiries or providing services.

The processing and use of your personal data are carried out in accordance with the EU-GDPR.

Data Retention

We store your personal data only for as long as it is needed to provide the web services you use, fulfill contractual obligations, or as long as we have your consent or another legitimate interest in the processing of your data. Data retention beyond this occurs only to comply with statutory obligations, e.g., under tax or commercial law.

Rights of Data Subjects

If we process your personal data, you have the following rights:

1. Right to Withdraw Consent If data processing is based on your consent, you may withdraw this consent at any time. The withdrawal applies to future processing.
2. Right to Access You may request confirmation as to whether we process personal data concerning you. If so, you may request details, including:
• The purposes of processing;
• The types of personal data processed;
• Recipients or categories of recipients;
• Storage duration;
• The existence of the right to lodge a complaint with a supervisory authority;
• Information on the origin of the data if not collected from you directly.

Information will be provided within one month of your request, provided your identity is verified.

1. Right to Rectification You have the right to request the immediate correction of inaccurate personal data.
2. Right to Data Deletion You may request the deletion of your personal data if:
• The data is no longer necessary for its original purpose;
• There is no legal obligation for retention;
• You withdraw your consent, and no other legal basis exists;
• You object to the processing, and no overriding legitimate grounds exist;
• The data was unlawfully processed.
3. Right to Restriction of Processing You may request restriction of data processing if:
• You dispute the accuracy of the data;
• The processing is unlawful but you oppose deletion;
• The data is no longer needed for processing but required for legal claims;
• You have objected to processing, and the outcome of the objection is pending.
4. Right to Data Portability You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller without hindrance.
5. Right to Object You may object at any time to the processing of your personal data under Article 6(1)(e) or (f) GDPR. If no overriding legitimate grounds exist, we will stop processing the data.
6. Right to Lodge a Complaint You have the right to file a complaint with the relevant supervisory authority.

Use and Sharing of Personal Data

Personal data collected on the website will only be used for contract execution and handling inquiries (Art. 6(1)(b) GDPR). Additionally, the responsible entity may use data for promoting its services and products or for market analysis if you have used or purchased services/products, as this constitutes a legitimate interest (Art. 6(1)(f) GDPR). Further use of your data requires your explicit consent, such as for newsletter subscription (Art. 6(1)(a) GDPR). You may withdraw this consent at any time.

For inquiries, contact: info@scubatours.eu.

The responsible entity does not share data with other third parties. Where service providers are used, necessary contracts under Article 28 GDPR have been concluded. For details on such agreements, please contact our Data Protection Officer.

External Links

For your information, our website contains links that lead to third-party websites. If this is not clearly evident, we would like to point out that such links are external. The entity responsible for this site has no influence on the content or design of these third-party pages. Therefore, the guarantees provided in this privacy policy do not apply to external providers.

Online Appointment Booking

If you book a consultation appointment through our website, we use the Calendly service for appointment scheduling and optimization. The legal basis for data processing is Article 6(1)(b) GDPR for appointment scheduling and Article 6(1)(f) GDPR for optimization purposes. Your data will only be processed to organize and schedule the appointment you have requested.

Use of Cookies

Our website, scubatours.eu, uses "cookies" to personalize and optimize the user's online experience and time on the website. A cookie is a text file that is either temporarily stored in the computer’s memory ("session cookie") or permanently stored on the hard drive ("permanent cookie"). Cookies contain, for instance, information about the user’s previous accesses to the respective server or information about the services previously viewed. Cookies are not used to run programs or transfer viruses to your computer. Their primary purpose is to provide an offer tailored to the customer’s needs and to make the use of the service as convenient as possible.

Session Cookies

We primarily use "session cookies," which are not stored on the user’s hard drive and are deleted when the browser is closed. These cookies are necessary for login authentication and system load balancing. They are essential for providing our web services (Article 6(1)(b) GDPR).

Permanent Cookies

We also use "permanent cookies" to save the user’s personal preferences entered while using the services of the responsible entity. This enables personalization and improvement of the service, provided that you have given your consent (Article 6(1)(a) GDPR). Permanent cookies ensure that the user finds their personal settings during future visits to the website.

Service providers such as Google Analytics, specializing in analyzing user behavior, use permanent cookies to recognize returning users. Data transmitted by these cookies is stored anonymously and is not linked to your IP address.

More detailed information about the permanent cookies used by the responsible entity or its service providers can be found in the following sections of this privacy policy.

Data Transmission via Google Analytics

When you visit our website, the following personal data is transmitted to Usercentrics:

• Your consent(s) or the withdrawal of your consent(s),
• Your IP address,
• Information about your browser,
• Information about your device,
• The time of your visit to the website.

Google Analytics also stores a cookie in your browser to associate the consent you have given or its withdrawal. This data is stored until you request its deletion, delete the cookie yourself, or the purpose for the data storage ceases. Legal retention obligations remain unaffected.

The use of Google Analytics is to obtain the legally required consents for using specific technologies, based on Article 6(1)(c) GDPR.

Privacy Policy for the Use and Application of Google Remarketing

The data controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google Ads that enables companies to display advertisements to internet users who have previously visited their website. The integration of Google Remarketing allows businesses to create user-specific advertisements and display interest-based ads to internet users.

The service provider for Google Remarketing is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display interest-based advertising. Google Remarketing allows us to show ads through the Google Advertising Network or on other websites that are tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on the affected person’s device. Cookies have already been explained above. By setting the cookie, Google can recognize the visitor to our website when they subsequently visit other websites that are also part of the Google Advertising Network. Each time a website integrated with Google Remarketing is accessed, the affected person’s browser automatically identifies itself to Google. Through this technical process, Google obtains personal data, such as the user’s IP address or browsing behavior, which Google uses for displaying interest-based advertising.

The cookie stores personal information, such as the websites visited by the affected person. Whenever our website is visited, personal data, including the IP address of the internet connection used by the affected person, is transmitted to Google in the United States. This personal data is stored by Google in the United States. Google may share this personal data collected via the technical process with third parties.

The affected person can prevent the setting of cookies by our website at any time by adjusting the settings in their internet browser, as explained above, to permanently object to the setting of cookies. Such a browser setting would also prevent Google from setting a cookie on the affected person’s device. Additionally, cookies already set by Google Analytics can be deleted at any time through the internet browser or other software programs.

Furthermore, the affected person has the option to object to interest-based advertising by Google. To do this, the affected person must access the link www.google.de/settings/ads

from each browser they use and adjust the desired settings.

Further information and Google’s applicable privacy policies can be found at https://www.google.de/intl/en/policies/privacy/.

Privacy Policy for the Use and Application of Google Ads

The data controller has integrated Google Ads services on this website. Google Ads is an online advertising service that allows advertisers to display ads in Google’s search engine results and the Google Advertising Network. Google Ads enables advertisers to predefine specific keywords that ensure an ad is displayed in Google’s search results only when a user retrieves a keyword-relevant search result. In the Google Advertising Network, ads are distributed to topic-relevant websites using an automatic algorithm based on the pre-set keywords.

The service provider for Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Ads is to promote our website by displaying interest-based advertising on the websites of third-party companies and in Google’s search engine results, as well as displaying third-party advertisements on our website.

If an affected person reaches our website through a Google advertisement, Google sets a conversion cookie on their device. Conversion cookies lose their validity after 30 days and are not used to identify the affected person. If the cookie has not yet expired, it tracks whether certain sub-pages, such as the shopping cart of an online store, were accessed on our website. Through the conversion cookie, both we and Google can track whether an affected person who came to our website via an Ads advertisement generated revenue or abandoned the purchase.

The data and information collected through the use of conversion cookies are used by Google to create visit statistics for our website. These visit statistics help us determine the total number of users who were referred to us through Ads advertisements, evaluate the success of each Ads advertisement, and optimize our Ads campaigns for the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify the affected person.

Further sections (e.g., Google Maps, Facebook Pixel) can also be translated if required. Would you like me to continue?

Legal or contractual provisions regarding the provision of personal data; Necessity for contract conclusion; Obligation of the data subject to provide personal data; Possible consequences of non-provision

We inform you that the provision of personal data is partially legally required (e.g., tax regulations) or may result from contractual provisions (e.g., information about the contractual partner). Sometimes, the provision of personal data may be necessary for the conclusion of a contract, and such data must then be processed by us. For example, the data subject is required to provide us with personal data when our company enters into a contract with them. If the personal data is not provided, the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact one of our employees. Our employee will explain to the data subject on a case-by-case basis whether the provision of personal data is legally or contractually required or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of non-provision would be.

Transfer of your personal data outside the EEA

The personal data you transmit to us is sent to our servers in the European Economic Area ("EEA") and stored there.

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if this happens in the context of using third-party services or the disclosure or transfer of data to third parties, this will only occur to the extent necessary for the fulfillment of our contractual or pre-contractual obligations under Art. 6, para. 1, sentence 1, letter b of the GDPR, based on your consent under Art. 6, para. 1, sentence 1, letter a of the GDPR, due to a legal obligation, or based on our legitimate interests under Art. 6, para. 1, sentence 1, letter f of the GDPR.

Subject to legal or contractual permissions, we process or have the data processed in a third country only if the conditions of Art. 44 et seq. of the GDPR are met. As a rule, we will forward your booking data to companies in third countries as part of fulfilling the contract we have concluded with you (e.g., when transferring your data to airlines, car rental companies, or accommodations). The legal basis for this is Art. 49, para. 1, letter a) and/or b) of the GDPR.

Cookie Settings

Here, you have the option to change your cookie settings.

Legal Notice

Information / Complaint / Revocation / Deletion

You can contact us free of charge regarding questions about the collection, processing, or use of your personal data, as well as for its correction, blocking, deletion, or the withdrawal of a given consent, or in the case of a complaint, in accordance with the General Data Protection Regulation (GDPR). Please note that you have the right to request the correction of incorrect data or the deletion of personal data, unless a legal obligation to retain the data applies.

Email: info@scubatours.eu

or by mail to:

Scubatours Dive & Liveaboard Travel

26, Simirat, GSM1535

Malta

Online Dispute Resolution / Dispute Resolution Body

Online dispute resolution pursuant to Art. 14 para. 1 ODR-VO: The European Commission provides an online dispute resolution (ODR) platform, which you can find at ec.europa.eu/consumers/odr/.

Scubatours does not participate in dispute resolution procedures before a consumer arbitration board and is not obligated to do so.

Important for travelers to the USA

Due to a US federal law on terrorism prevention, airlines are required to transmit the flight and booking details of each passenger to US immigration authorities before entering the United States. Without this data transfer, entry into the USA is not possible.

Changes to Privacy Notices

Scubatours reserves the right to change these security and privacy measures if necessary due to technical developments. In such cases, we will also adjust our privacy policy accordingly. Please ensure you refer to the current version of our privacy statement.

Malta 10.08.24