Privacy policy

1. Controller

Squatina Ronjenje d.o.o., Zarok 88a, HR-51523 Baška, Croatia, email: info@squatinadiving.com, phone: +385 99 433 2980.

2. Hosting

This website is hosted by Wix.com Ltd. and its affiliates. When you visit it, technical data such as your IP address, browser type and time of access is processed by the hosting provider to deliver and secure the site. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

3. Contact form, email, phone and WhatsApp

If you write to us through the contact form, we process the data you enter: name, email address, optional phone number, your area of interest and your message. We use it only to answer your enquiry and to prepare your booking. Legal basis: steps prior to a contract and contract performance (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f)). The form data is stored in our Wix account. The same applies if you contact us by email, phone or WhatsApp; WhatsApp is provided by Meta and is only used if you click a WhatsApp link and start a chat yourself.

We keep enquiries as long as needed to handle them and for any legal retention periods, then delete them.

4. Google Maps and Google Fonts

The contact and about pages embed a Google Map, and the site loads fonts from Google Fonts. When these load, your IP address and browser data are sent to Google. Legal basis: our legitimate interest in an attractive, useful website (Art. 6(1)(f) GDPR).

5. Cookies

We do not use advertising or tracking cookies. Our hosting provider may set technically necessary cookies or similar storage that the site needs to work.

6. Your rights

You have the right to access, correction, deletion, restriction of processing, data portability and objection. Write to info@squatinadiving.com. You may also complain to the supervisory authority: Croatian Personal Data Protection Agency (AZOP), www.azop.hr.

7. Online check-in and health data

If you complete the online check-in for Discover Scuba Diving, we process your name, contact details, date of birth, emergency contact, your answers to the medical questionnaire and the acceptance of the liability release. Health data is a special category of personal data. We process it only with your explicit consent (Art. 9(2)(a) GDPR) to assess whether you can dive safely and to document your participation. Access is limited to our instructors and management. The data is stored in our Wix account and kept for as long as legally required for diving operations, then deleted. You can withdraw your consent at any time by writing to info@squatinadiving.com; we will then no longer be able to let you dive.