Privacy policy
Last updated : 2026-05-20
This privacy policy describes how Atabey Dive Center collects, uses and protects the personal information you provide. It complies with the General Data Protection Regulation (GDPR, EU regulation 2016/679) and the French Data Protection Act.
Data controller
The controller of your personal data is Atabey Dive Center, located at 2 rue du Président JF Kennedy, Marina Royale, Marigot 97150 Saint-Martin.
For any question regarding the processing of your data or to exercise your rights, please contact Atabey Dive Center via our contact form or by phone at +590690474852.
Data collected
The personal data that may be collected through this site is:
- Contact data : first name, last name, email, phone number, when you contact us via WhatsApp, email or phone for an information request or booking.
- Booking data : diving level, number of people, desired date, services considered.
- Technical data : IP address, browser type, pages visited, connection date and time. This data is collected automatically for technical purposes only (security, fraud prevention).
No sensitive data (health, religion, etc.) is collected through the site. Medical information required for diving is requested directly on site, on paper, in accordance with regulations.
Purposes of processing
Your data is used to:
- Reply to your information or booking requests
- Manage your activity at the center (scheduling, training records)
- Comply with our legal obligations (diving regulations, accounting)
- Ensure the security and proper operation of the site
Your data is never sold or transferred to third parties for commercial purposes.
Legal basis
The processing of your data is based on:
- Performance of a contract : for diving bookings and services.
- Your consent : for information requests by email or WhatsApp.
- Legitimate interest : for the security of the site and the prevention of fraud.
- A legal obligation : for the retention of accounting and regulatory documents.
Retention period
- Contact requests : 3 years from the last contact.
- Booking and customer data : up to 10 years (accounting and tax obligations).
- Technical logs : 1 year maximum.
Your rights
In accordance with the GDPR, you have the following rights:
- Right of access : obtain confirmation that your data is being processed and obtain a copy.
- Right to rectification : have inaccurate or incomplete data corrected.
- Right to erasure : request the deletion of your data under the conditions provided by the GDPR.
- Right to restriction : request a temporary suspension of the processing of your data.
- Right to portability : receive your data in a structured, machine-readable format.
- Right to object : object to the processing of your data on legitimate grounds.
To exercise these rights, send your request via our contact form, specifying the purpose of your request (e.g. "GDPR access request", "erasure request"). A response will be provided within one month.
You also have the right to lodge a complaint with the French data protection authority CNIL (www.cnil.fr) if you consider that your rights have not been respected.
Security
Atabey Dive Center implements appropriate technical and organizational measures to protect your data against any unauthorized access, modification, disclosure or destruction: end-to-end HTTPS encryption, hosting on professional infrastructure (DigitalOcean LLC), regular backups, restricted access to authorized personnel only.
Subprocessors
To provide its services, Atabey Dive Center relies on the following subprocessors, which may have access to some of your data strictly within the scope of their missions:
- MABADIVE SAS (··· ··· ···) : hosting and technical maintenance of the site, provision of the mabaweb platform.
- DigitalOcean LLC (101 Avenue of the Americas, New York, NY 10013, USA) : technical infrastructure (cloud servers).
All our subprocessors are bound by contractual commitments requiring them to respect the confidentiality and security of your data.
Cookies and trackers
The Atabey Dive Center website does not currently use any advertising tracking, profiling or third-party audience measurement cookies (such as Google Analytics). Only cookies strictly necessary for the proper technical operation of the site may be placed; in accordance with regulations, these cookies do not require prior consent.
Policy changes
This privacy policy may be modified at any time to reflect legal or technical changes. Any substantial modification will be notified by updating the date at the top of this page.
