Privacy Policy
Dive School de Grevelingen · Version 1.2 · Scharendijke, April 2026
Dive School de Grevelingen (trading name of Expeditie 82 B.V.) attaches great importance to protecting your personal data. In this privacy policy, we explain what data we collect, why, on what basis and how we handle it. We act in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
| Trading name | Dive School de Grevelingen |
| Legal entity | Expeditie 82 B.V. |
| Location | Scharendijke, Zeeland |
| Website | https://diveschool.pro |
| info@diveschool.pro | |
| Phone | +31 6 4490 7735 |
2. What personal data do we process?
Contact form & reservations
First name, last name, e-mail address, phone number, desired dates, level of experience, desired activity and any additional information you provide yourself.
Newsletter
E-mail address and optional first name (for personal salutation).
WhatsApp contact
Your phone number and the content of messages you send us.
Medical questionnaire
Health declaration and any copy of a diving medical as a requirement for diving participation. These are special category personal data that we only process on the basis of your explicit consent and to the extent necessary for the safety of the activity.
SSI registration
For students attending an SSI course: name, date of birth, e-mail address and course results. This data is shared with SSI for certification purposes.
Website analytics
Technical data such as IP address, browser type, pages visited and session duration, processed through privacy-friendly analytics (no cookies without consent).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Handling reservation and contact requests | Performance of a contract (Art. 6(1)(b)) |
| Sending confirmations and booking communications | Performance of a contract (Art. 6(1)(b)) |
| Newsletter and offers | Consent (Art. 6(1)(a)) — you can unsubscribe at any time |
| Safety during diving activities (medical questionnaire) | Explicit consent for special category data (Art. 9(2)(a)) |
| SSI certification of students | Performance of a contract (Art. 6(1)(b)) |
| Compliance with legal obligations (e.g. accounting) | Legal obligation (Art. 6(1)(c)) |
| Improving our website and services | Legitimate interest (Art. 6(1)(f)) |
4. Retention periods
We will keep your personal data no longer than necessary for the purpose for which it was collected, or for as long as required by law. The following retention periods apply:
- Contact form (no booking): 12 months after last contact
- Data related to a booking or course: 7 years (statutory retention obligation)
- Medical questionnaire / diving medical (copy): 6 months after the activity, then destroyed
- SSI course data: In accordance with SSI policy (minimum 10 years for certification)
- Newsletter: Until unsubscription, then removed within 30 days
- WhatsApp messages: 12 months, unless longer required for service delivery
5. Sharing data with third parties
We never sell your data to third parties. We may share data with:
- SSI (Scuba Schools International): For certification of students; legally required for issuing dive certifications.
- Email marketing service: For sending the newsletter. We enter into a data processing agreement for this purpose.
- Website host / IT suppliers: Parties that host or maintain our website and systems, on the basis of a data processing agreement.
- Accounting / administration software: For invoice processing and financial administration.
- Government authorities: Only if legally required (e.g. Tax Authority, police in case of emergency).
Transfer of data outside the European Economic Area (EEA) only takes place if appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Security
We take appropriate technical and organisational measures to secure your personal data against unauthorised access, loss or misuse. These include: encrypted connections (HTTPS/TLS), restricted access rights, use of secure passwords and regular backups. In the event of a data breach that may affect your rights, we will inform you and the Dutch Data Protection Authority in accordance with the GDPR.
7. Your rights under the GDPR
You have the following rights regarding your personal data:
- Access: You can request what data we process about you.
- Rectification: You can have inaccurate or incomplete data corrected.
- Erasure: You can request deletion of your data ("right to be forgotten"), unless we have a legal obligation to retain it.
- Restriction: You can request that the processing of your data be temporarily restricted.
- Objection: You can object to processing based on legitimate interest.
- Data portability: You can receive your data in a commonly used format.
- Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time without giving reasons. This does not affect the lawfulness of processing carried out prior to withdrawal.
- Lodge a complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
To exercise your rights, please contact us at info@diveschool.pro. We will respond to your request within four weeks, in accordance with the GDPR.
8. Cookies and tracking technologies
Our website uses functional cookies that are strictly necessary for the functioning of the site. For all other cookies, we ask for your prior consent via a cookie banner. You can change your preferences at any time on our Documents page.
- Functional cookies: Necessary for the operation of the website (session, language preference, cookie consent). No consent required.
- Analytics (Matomo): For measuring visitor behaviour and improving the website. We use Matomo, self-hosted software without tracking cookies: IP addresses are anonymised and no data is shared with third parties. No consent required.
- Maps (Google Maps): On dive site pages we display interactive maps via Google Maps. Google loads cookies (including
NID,1P_JAR) for personalisation and advertising purposes. Maps are only loaded after you have given consent. See also Google's privacy policy. - Newsletter (MailerLite): The sign-up form runs via our own server — your browser makes no direct connection to MailerLite's servers. Submitted data (email address, name) is forwarded server-side to MailerLite for newsletter delivery. No consent required to display the form.
- Social media / video embeds: For embedded videos and posts from external platforms (YouTube, Facebook, Instagram, Vimeo). When these embeds are loaded, the privacy rules of the relevant platforms also apply. Only with your consent.
You can adjust cookie preferences via your browser settings, the cookie banner on your first visit, or at any time via our Documents page. More information about cookies can be found at consuwijzer.nl.
9. Social media and external platforms
Our website contains links to our Instagram and Facebook pages. When you visit external platforms via these links, the privacy rules of those platforms apply. We are not responsible for data processing by Meta Platforms, Inc. or other third parties. We recommend that you consult the privacy policy of the relevant platform.
Instagram widget in the footer
In the footer of our website we display a selection of our most recent Instagram posts. We retrieve the post information via the Instagram Graph API and store the images on our own server. Your browser loads the images exclusively from our own server — no connection is made to the servers of Meta Platforms, Inc. when visiting our website.
Legal basis for the use of this widget: legitimate interest (Art. 6(1)(f) GDPR) — displaying current images of our diving activities to inform visitors about our services.
10. Changes to this policy
We may update this privacy policy from time to time, for example due to changes in our services, legislation or case law. The current version is always available at diveschool.pro/en/privacy/. We advise you to consult this page periodically. In the event of material changes, we will inform you via e-mail or a clear notification on our website.
11. Contact and questions
Do you have any questions, comments or requests about this privacy policy or the processing of your personal data? Please contact us:
| Organisation | Dive School de Grevelingen (Expeditie 82 B.V.) |
| Address | Scharendijke, Zeeland, Netherlands |
| info@diveschool.pro | |
| Phone | +31 6 4490 7735 |
| Website | https://diveschool.pro |
This privacy policy was first published in April 2026 and last updated in April 2026. · Version 1.2