Privacy Policies

• DIVEPT is a brand responsible for the processing of your data collected through this website or during contact with our clients for booking purposes.

• The organization in charge can be contacted via the following email address: info@divept.com

• Responsible Person: Nuno Veloso Azevedo

• Part of the MN Hub Consultancy, Ltd.

• Address: Rua das Ceiras, lote 6, No. 3, Vilamoura, Quarteira, Portugal

What Personal Data is Collected and Why?

Under the General Data Protection Regulation (GDPR), Personal Data refers to any information relating to an identified or identifiable individual. An identifiable individual is someone who can be identified, directly or indirectly, by reference to an identification number or specific attributes related to their physical, physiological, psychological, economic, cultural, or social identity.

Personal data is collected and processed by DIVEPT only when clients contact us directly, either in-store, via phone, email, or WhatsApp, for bookings (diving or courses), inquiries about reservations, or any other client-initiated contact.

The data collected will include only the essential information needed to reserve a spot for a course or dive, provide event quotes, contact clients upon their request, and ensure optimal service delivery. This data may include the client’s name, email address, phone number, tax identification number, and payment method details.

Access Data Collection and Log Files

Access to our online offerings is logged through server log files. These files may record:

áNames and addresses of accessed sites or files,

• Date and time of access,
• Amount of data transferred,
• Successful access notifications,
• Browser type and version,
• User’s operating system,
• Referrer URL (previously visited page),
• IP addresses, and
• The requesting provider.

Server log files are used for security purposes (e.g., to prevent server overload from abusive attacks like DDoS) and to ensure server stability. They are retained for a maximum of 30 days, after which they are deleted or anonymized unless needed for investigative purposes.

Purpose and Use of Collected Data

Data is collected in the context of preparing and executing service contracts between DIVEPT and its clients, in compliance with contractual obligations and legal requirements of Portugal.

If consent is granted for data to be used for purposes beyond service delivery, such as promotional activities (event invitations, marketing), this consent will guide the data’s storage and processing scope.

All personal data is stored in databases and processed under strict compliance with applicable data protection laws. Backup copies are encrypted to allow data recovery in case of cyberattacks, technical errors, or accidental deletion.

Personal data will be stored within the EU but may be transferred outside the EU to countries with equivalent data protection regulations.

SSL or TLS Encryption

To ensure security and protect the confidential information you send us, our website uses SSL or TLS encryption. You can identify an encrypted connection when the browser’s address bar changes from “http://” to “https://” and displays a padlock icon. Data transmitted to us cannot be accessed by third parties.

Data Sharing and Third-Party Data

We do not share your personal data with third parties for purposes that reveal your personal information (such as email or name) unless it is necessary for providing online booking services. Exceptions include:

FareHarbor – If you make a reservation through our website, you may be required to provide data such as your name, email address, mailing address, phone number, credit card details, certification level, clothing sizes, and hotel information.

Subcontracted Entities – DIVEPT may engage subcontractors to process your data on our behalf. These entities are selected based on their ability to implement sufficient technical and organizational measures to safeguard your data and will act solely according to our instructions.

WhatsApp – Provided by WhatsApp Ireland Limited, using the WhatsApp button redirects you to its website, where data may be collected under WhatsApp’s privacy policy.

Data Retention Period

Data retention periods depend on the purpose for which the data is processed. If no legal retention period exists, data will be stored only as long as necessary to fulfil its purpose, after which it will be deleted.

For promotional and marketing purposes, personal data will be retained until you request its deletion or it ceases to serve its original purpose.

Your Rights Regarding Personal Data

You are entitled to exercise the following rights regarding your data:

• Access –

Request confirmation of whether your data is processed and access the data itself (Article 15 of GDPR).

• Rectification – Correct inaccurate personal data without undue delay.

• Erasure – Also known as the “right to be forgotten,” under certain circumstances, you can request that your data be deleted from our records.

• Objection – Object to certain types of data processing, including for direct marketing purposes.

• Data Portability – Transfer your personal data to another organization or receive it in a structured, commonly used format.

• Restriction of Processing – Temporarily limit data processing, for example, while verifying its accuracy.

To exercise these rights, please email info@divept.pt. You will receive a form to complete and return. Once we receive it, DIVEPT will process your request within the legally established timeframe.

Cancellation Policy

• Courses: A 50% deposit is required to register for courses, and no refunds are offered after registration.

• Clients will receive a 90% refund for cancellations made more than 72 hours in advance (not applicable to courses).

• Clients will receive a 50% refund for cancellations made 24-72 hours in advance (not applicable to courses).

• No refund is provided for cancellations made less than 24 hours in advance.

• Full refunds or credits are offered if DIVEPT cancels due to weather or unforeseen circumstances.