1. Data controller
- Controller: Sergio del Val Aldecoa (DiveScan)
- Tax ID (NIF): 53868076Y
- Address: C/ Marqués de Santa Cruz, 3, El Puertito de Güímar, Santa Cruz de Tenerife
- Email: info@divescan.es
2. What data we process and why
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact or assessment form | Name, center, location, WhatsApp, email and message | To reply to your request, schedule the call and prepare a proposal | Steps taken at your request prior to entering into a contract (art. 6.1.b GDPR) |
| WhatsApp or email messages | The data you send us | To answer your enquiry | Consent (art. 6.1.a) and pre-contractual steps (art. 6.1.b) |
| Customers | Contact and billing details | To provide the contracted service and meet tax obligations | Performance of a contract (art. 6.1.b) and legal obligation (art. 6.1.c) |
We do not make automated decisions with legal effects on you, nor do we create profiles.
3. How long we keep your data
- Contact requests that do not lead to a contract: up to 12 months from the last contact.
- Customers: for the duration of the relationship and, afterwards, for the legally required periods (generally 6 years for accounting and tax records).
4. Recipients and data processors
We do not share your data with third parties unless required by law. To provide the service we use providers who process data on our behalf under a data processing agreement:
- Hostinger: web hosting and email.
- Google: spreadsheets, calendar and email to manage requests.
- WhatsApp (Meta): if you message us on WhatsApp.
Some of these providers may process data outside the European Economic Area. In that case they do so with the safeguards provided for in the GDPR (an adequacy decision, such as the EU-US Data Privacy Framework, or standard contractual clauses).
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to info@divescan.es and stating which right you wish to exercise. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.
7. Minors
This site is aimed at professionals. We do not knowingly collect data from children under 14.
8. Changes to this policy
We may update this policy. The current version is always the one published on this page.
Last updated: 28 September 2026.
This English version is provided for convenience. In case of discrepancy, the Spanish version shall prevail.
