+1 (262) 938-6827

DATA PROTECTION POLICY General Data Protection Policy for this website

  • Home
  • Data Protection Policy

Our Privacy Policy

This privacy policy was last updated on 30 May 2019.

Definitions

Company: Aquatic Adventures Inc.
GDPR: The General Data Protection Regulation
Responsible Person: MaryEllen Franson - Business Manager

Who We Are

Aquatic Adventures, Inc. is a PADI 5 Star Dive Center headquartered at 13830 W. Greenfield Avenue in Brookfield, Wisconsin. Our website address is https://diveaai.com. Additional details regarding our company can be found on Our Company page.

Data Protection Principles

Aquatic Adventures, Inc. is committed to processing data in accordance with its responsibilities under the GDPR.

Article 5 of the GDPR requires that personal data shall be:

  1. processed lawfully, fairly and in a transparent manner in relation to individuals;
  2. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes;
  3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  4. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
  5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals; and
  6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.”

 General Provisions

  1. This policy applies to all personal data processed by Aquatic Adventures, Inc. or its agents.
  2. The Responsible Person shall take responsibility for the Company’s ongoing compliance with this policy.
  3. This policy shall be reviewed at least annually.

 Lawful, Fair and Transparent Processing

  1. To ensure its processing of data is lawful, fair and transparent, the Company shall maintain an up-to-date privacy policy.
  2. The privacy policy shall be reviewed at least annually.
  3. Individuals have the right to access their personal data and any such requests made to Aquatic Adventures, Inc. shall be dealt with in a timely manner.

Lawful Purposes

  1. All data processed by Aquatic Adventures, Inc. must be done on one of the following lawful bases: consent, contract, legal obligation, vital interests, public task or legitimate interests (see ICO guidance for more information).
  2. Aquatic Adventures, Inc. shall note the appropriate lawful basis in the Register of Systems.
  3. Where consent is relied upon as a lawful basis for processing data, evidence of opt-in  consent shall be kept with the personal data.
  4. Where communications are sent to individuals based on their consent, the option for the individual to revoke their consent should be clearly available and systems should be in place to ensure such revocation is reflected accurately in the Company’s systems. 

Data Minimisation

  1. Aquatic Adventures, Inc. shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy

  1. Aquatic Adventures, Inc. shall take reasonable steps to ensure personal data is accurate.
  2. Where necessary for the lawful basis on which data is processed, steps shall be put in place to ensure that personal data is kept up to date.

Archiving / Removal

  1. To ensure that personal data is kept for no longer than necessary, Aqauatic Adventures, Inc. shall put in place an archiving policy for each area in which personal data is processed and review this process annually.
  2. The archiving policy shall consider what data should/must be retained, for how long, and why.

Security

  1. Aquatic Adventures, Inc. shall ensure that personal data is stored securely using modern software that is kept-up-to-date. 
  2. Access to personal data shall be limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.
  3. When personal data is deleted this should be done safely such that the data is irrecoverable.
  4. Appropriate back-up and disaster recovery solutions shall be in place.

Breach

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, Aquatic Adventures, Inc. shall promptly assess the risk to people’s rights and freedoms and if appropriate report this breach to the ICO (more information on the ICO website).

What Information Do We Collect?

We collect information from you when you register on our site, place an order or subscribe to our newsletter. When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address, phone number, credit card information and date of birth. You may, however, visit our site anonymously.

What Do We Use Your Information For?

Any of the information we collect from you may be used in one of the following ways:

  1. To personalize your experience (your information helps us to better respond to your individual needs)
  2. To improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you)
  3. To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs)
  4. To process transactions
  5. To register you for a PADI scuba training course

Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested, or the following:

  1. To administer a contest, promotion, survey or other site feature
  2. To send periodic emails
  3. To assist you in creating an account with PADI for online scuba training

The email address you provide for order processing, may be used to send you information and updates pertaining to your order, in addition to receiving occasional company news, updates, related product or service information, etc. Note: If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email. However, we caution that unsubscribing from our emails could mean that you will not receive vital information relating to a course you are registering for. When a customer unsubscribes from our emails, they are assuming full responsibility for any costs or inconveniences that may result.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Contact Forms

In order to allow customers to contact us with questions or request they be added to our GET WET! Newsletter, we collect customer names, email address and phone numbers. This information is used to build a customer record that is necessary to respond to these inquiries and requests. Aquatic Adventures does not sell this information to any outside parties for any purposes. However, this information may be provided to third party credit card processing companies as validation during credit card purchases. This is to protect our customers from credit card fraud.

How Do We Protect Your Information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order. We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway provider's database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential. After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be stored on our servers.

Do We Use Cookies?

Like most professional websites, we use cookies (tiny files downloaded to your computer) to improve your experience. While it is possible for you to prevent these cookies from being stored, you should be aware that doing so could downgrade or break certain elements of this site's functionality.

For more general information on cookies, see the Wikipedia article on HTTP Cookies.

Disabling Cookies

You can prevent the setting of cookies on this site by adjusting the settings in your browser. Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. For this reason, we recommended that you do not disable cookies.

The Cookies We Set

Account related cookies. If you create an account with us, we will use cookies for the management of the signup process and general administration. These cookies will usually be deleted when you log out. However, in some cases they may remain afterwards to remember your site preferences when you log back in.

Login related cookies. We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in.

Orders processing related cookies. This site offers e-commerce or payment facilities and some cookies are essential to ensure that your order is remembered between pages so that we can process it properly.

Forms related cookies. When you submit data through a form such as those found on contact pages or comment forms, cookies may be set to remember your user details for future correspondence.

Third Party Cookies. In some special cases we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site.

Google Analytics. Google Analytics is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. For more information on Google Analytics cookies, see Analytics below.

Social media buttons. Social media buttons allow you to connect with your social network in various ways. For these to work the Facebook, LinkedIn, Instagram, Twitter and YouTube may set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold as outlined in their respective privacy policies.

More Information

If you are looking for more information regarding our use of Cookies, you can contact us via email at staff@diveaai.com.

Embedded Content From Other Websites

Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

In order to provide you with the best possible experience, this website uses Google Analytics to link a referral to a purchase. This enables us to determine the success of our advertising. This data, however, is anonymous and is not personally identifiable.

Do We Disclose Any Information to Outside Parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

What Rights You Have Over Your Data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Children's Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Childrens Online Privacy Protection Act). We do not collect any information from anyone under 13 years of age except in the case of class registration information required by PADI (Professional Association of Scuba Divng Instructors). Our website, products and services are all directed to people who are at least 13 years old or older unless they are under the direct supervision of a parent or guardian.

Commercial Transactions

Portions of this site are used for commercial purposes. When you are purchasing classes or products from Aquatic Adventures, we collect name, address, phone number, birthdate and email address information during the checkout process. This information, along with payment information, is collected by our credit card processing companies. We use Cayan or Stripe to process all transactions online and otherwise. This website itself does not collect or store credit card numbers, expiration dates or security codes.

What We Collect and Store

While you visit our site, we track:

When you purchase from us, we ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We use this information for purposes, such as, to:

We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses. We will also store comments or reviews, if you choose to leave them.

How We Protect Your Information

In order to protect your information on this website, we use SSL to provide firewall and security protection.

Who On Our Team Has Access To Commercial Transaction Information

Only website administrators and shop managers have access to commercial transaction information. This is to enable them to process your purchase.

Your Consent

By using our site, you consent to our website's privacy policy.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page, and/or update the Privacy Policy modification date above.

Contacting Us

If there are any questions regarding this privacy policy you may contact us using the information below.

Aquatic Adventures, Inc.
13830 W. Greenfield Avenue
Brookfield, Wisconsin 53005
USA

Web: https://diveaai.com
Email: staff@diveaai.com
Phone: (262) 938-6827