Privacy policy

This policy explains what personal data we collect, what we use it for and what rights you have. For users located in the European Union, it has been drawn up in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

1. Data controller

Dive in Red Sea, a company incorporated in Egypt with its registered address at Marina de Hurghada 1, Hurghada (Egypt) and represented by Sayed Abdelbaset. Privacy contact: info@diveinredsea.com.

2. What data we process

• Contact details: name, email and phone number that you give us through the form, by WhatsApp or by email.
• Booking details: chosen departure, cabin, number of places, extras and payment details.
• Data needed for the trip: passport, date of birth, certification level and number, diving experience and dive insurance, required by the port and marine park authorities.
• Health data: the diving medical questionnaire, which we only process with your explicit consent and to ensure your safety.
• Browsing data: obtained through cookies, as explained in our Cookie policy.

3. What we use your data for and on what legal basis

4. How long we keep your data

Data from enquiries that do not lead to a booking is kept for a maximum of one year. Booking data is kept for as long as the relationship lasts and, afterwards, for the periods required by tax law and to handle possible claims. The medical questionnaire is deleted at the end of the trip, unless it needs to be kept because of an incident. Data for marketing communications is kept until you withdraw your consent.

5. Who we share your data with

• The boat, crew and guides who provide the service.
• The Egyptian port and marine park authorities, when required by law.
• Transfer companies and, if you ask us to, your insurer.
• The providers that give us services, who only process your data on our instructions:
  • Cloudflare, Inc. (USA): website hosting.
  • Web3Forms: receiving the place request form, which reaches us by email.
  • Tally (Belgium): trip documentation forms and the medical questionnaire.
  • Google: storage in Google Drive of the spreadsheets we use to organise bookings and, only if you accept the corresponding cookies, website analytics and campaign measurement.
  • WhatsApp (Meta), if you write to us that way.
  • Pomatio: the agency that manages our domain and through which our email service is contracted, hosted on Amazon Web Services servers.

We do not sell your data to third parties.

6. International transfers

Our company and the service you book are in Egypt, so your data is processed outside the European Economic Area. This transfer is necessary to perform the travel contract you request (Article 49(1)(b) GDPR). When we use providers such as Cloudflare, Web3Forms or Google, which may process data outside the European Economic Area, transfers are made with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to info@diveinredsea.com and stating which right you wish to exercise. If you believe we have not handled your request properly, you can lodge a complaint with the data protection authority of your country.

8. Security

We keep your data in our email and in spreadsheets stored in Google Drive that we use to organise bookings and trips, with access limited to the people who need it. We apply appropriate technical and organisational measures to protect it against loss, unauthorised access or misuse.

9. Minors

The minimum age to take part in our trips is 10. Bookings for minors under 18 must be made by their parents or legal guardians, who will provide their details and give any consent required.

10. Changes to this policy

We may update this policy to adapt it to legal changes or changes in our services. The date of the last update appears at the top of this page.

This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.