Personal Data Protection

1. Who processes your data

The following entities cooperate under the Divers Direct brand:

We operate the joint Shark account and customer records together for logins, bookings, communication and service continuity. The relevant provider is responsible for its own contractual, accounting and statutory agenda; the Sportovní klub Divers keeps the membership register.

Both joint controllers ensure the provision of information and the handling of rights within the joint records. Each is responsible for the data and access in its own agenda and provides the other with the necessary cooperation. For all requests you may use one contact point: info@divers.cz, +420 222 947 314, Čs. armády 404/13, 160 00 Prague 6. You may also exercise your rights directly with any of the controllers.

2. What data we use and why

Account, enquiries and services

Identification, contact and login details, bookings, participation, qualifications and communication for handling your request and performing the contract (Article 6(1)(b) GDPR).

Payments and membership

Payment and document details for the contract and statutory accounting and tax obligations; membership and subscription details for managing the membership relationship and the association's obligations (Article 6(1)(b) and (c) GDPR).

Security and legal claims

Reasonable operational records, change history and complaints for service security, misuse prevention and protection of legal claims on the basis of legitimate interest (Article 6(1)(f) GDPR).

Marketing

News based on consent, or our own similar offers to existing customers under the conditions of Section 7(3) of Act No. 480/2004 Coll. Consent may be withdrawn and offers may be declined at any time. A joint account does not in itself mean consent to marketing from both entities.

The necessary contractual details are required to provide the requested service; without them it may not be possible to process the order. Voluntary details and marketing consent are not a condition of purchase.

3. Medical fitness and children

For safe participation, it may be necessary to provide proof of medical fitness. Health data may only be processed to the extent necessary and when the conditions of Articles 6 and 9 GDPR are met. The specific controller, purpose, legal basis, recipients and retention period must be stated when the data are obtained. Where the basis is explicit consent, it is given separately and may be withdrawn; this page or acceptance of the Terms and Conditions does not replace it.

Do not enter diagnoses or medical reports in the general order note. For minors, we also process the necessary details of the legal guardian.

4. Sources and recipients of data

We obtain data from you, the legal guardian or the person registering you, and during the provision of the service. If another person registers you, we also inform you of the source of the data to the extent set out in Article 14 GDPR.

To the extent necessary, we disclose data to authorised staff and instructors, hosting, database, IT support and email providers, accountants, payment institutions, the relevant training organisations and the delivery partners of the event. We disclose them to public authorities in cases laid down by law. Processors act in accordance with our instructions and contractual obligations.

Transfer outside the European Economic Area is possible only under the conditions of Chapter V GDPR. For a service that uses such a transfer, the relevant country and data protection safeguards must be stated in advance, in particular an adequacy decision or standard contractual clauses; a copy of the safeguards used may be requested at our contact point.

5. Retention period

Retention periods depend on the purpose and type of record:

• We keep enquiries until they are dealt with and related requests are settled; account data for as long as the account is maintained.
• Contractual, membership and training records for the duration of the relevant relationship and subsequently to the extent necessary to evidence performance and protect claims for as long as they may be enforced, or until the dispute is concluded.
• Accounting and tax documents for the relevant statutory retention period according to the type of document.
• Marketing data until consent is withdrawn or offers are declined, at most for the duration of the given purpose. A necessary record of refusal may be retained so that we can respect your choice.

Once the purpose and the relevant periods have ended, we delete or anonymise the data. Account closure does not affect the mandatory retention of documents or the necessary protection of legal claims. The specific retention period for health, CCTV and similar special records is stated in the information provided when they are obtained.

6. Cookies and analytics

Necessary technical storage enables login, security and requested functions, such as the basket. Google Analytics 4 analytics on the public website are triggered only after consent to the analytics category in the CookieScript banner (Article 6(1)(a) GDPR). Consent is not a condition for ordering services and may be changed or withdrawn in the cookie settings.

Information on individual cookies, their providers, purpose and duration is available in the cookie settings, where you can familiarise yourself with their use before giving consent.

7. Your rights

Under the conditions of the GDPR, you have the right of access and to a copy of the data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interest; to direct marketing at any time. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Send requests to info@divers.cz, +420 222 947 314. We will verify your identity appropriately if necessary. We will reply without undue delay, at the latest within one month; any lawful extension by up to a further two months will be justified to you within the initial one-month period. Handling is usually free of charge.

You may submit a complaint to the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7. The right to judicial protection remains unaffected.

8. Information on specific services

For CCTV, medical documents and any other special processing, separate information is required, available no later than when the data are obtained. An order or account registration does not in itself constitute consent to the use of your likeness in advertising.

You can find the service terms in the T&Cs. The divers-direct.cz e-shop has its own information on data processing.