Privacy

Who we are

Sipa Diving, [legal name and form], [address], OIB [OIB]. Email: contact@sipadiving.com. We are a family business of two SDI instructors, and we are the controller for the personal data on this page.

What this website collects

Nothing on its own. No cookies, no analytics, no tracking pixels, no advertising, and nothing stored in your browser. Our fonts come from our own server, so loading a page sends nothing to Google or anyone else.

The site is hosted by Cloudflare. To deliver pages and block attacks, Cloudflare processes your IP address and basic details of each request. We rely on our legitimate interest in a working, secure website.

When you contact us

If you message us on WhatsApp or by email, we get what you send and your number or address. WhatsApp is run by WhatsApp Ireland under its own privacy policy.

We use this only to answer you and plan your diving. If an enquiry does not turn into a booking, we delete it within 12 months.

When you book

• Your name, contact details, date of birth, certification and agency, dive experience and equipment sizes. We need them to run your session safely, so the basis is our contract with you.
• A medical questionnaire. This is health data. Diving with some conditions is dangerous, so we ask, and we process it only with your explicit consent and only to decide whether you can dive safely.
• For SDI courses, we send your name, date of birth, contact details and course data to SDI so it can issue your certification.
• If a session runs with a partner dive centre, we share what that centre needs for your safety: your name, certification and anything medical you agreed we may pass on.
• Our accountant sees invoices. Croatian accounting law requires us to keep them for up to 11 years. Training records stay as long as SDI standards require, [period: to confirm].

If you are under 16, a parent or guardian gives consent for you.

Underwater video

We film you to coach you, and we watch the footage together afterwards. We delete it 30 days after the debrief, unless you ask for a copy or agree in writing that we may use it on our website or social media. You can withdraw that agreement at any time, and we stop using the footage from then on.

What we never do

We do not sell your data, use it for advertising or pass it to anyone not named on this page.

Your rights

You can ask to see, correct or delete your data, to limit or object to how we use it, or to get it in a portable form. You can withdraw any consent at any time. Write to [business email] and we answer within a month.

You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Changes

When we change what we collect, we update this page and the date at the top.

This page follows the GDPR (Regulation (EU) 2016/679), the Croatian Act on the Implementation of the GDPR (NN 42/18) and the Electronic Communications Act (NN 76/22).