In order to use this website, a user must first complete the registration form. During registration a user is required to give certain information (such as name and email address). This information is used to provide a secure login mechanism for you. At your option, you may also provide demographic information (such as gender or age) about yourself, but it is not required.
If you decide to register with facebook, we will collect the following information from your facebook profile:
So you will be able to tag them in your dive as a buddy
So we are able to show your profile picture.
So we are able to send you stuff, if you want to. Also a good way to login without facebook in case you ever get sick of them.
Upon sign up you can decide how your information is shared.
This means all your given information is publicly available on the internet.
This means all your given information is visible to logged in users of Diveary.
This means all your given information is only available to the people you follow.
This means all your given information is available to you only. We will use your dive log entry in aggregations only.(E.g. 2300 people dived at the Great Barrier Reef - you might be one of them but nobody will know it was you, since only that number was of importance.)
We use "cookies" on this site. A cookie is a piece of data stored on a site visitor's hard drive to help us improve your access to our site and identify repeat visitors to our site. For instance, when we use a cookie to identify you, you would not have to log in a password more than once, thereby saving time while on our site. Cookies can also enable us to track and target the interests of our users to enhance the experience on our site. Usage of a cookie is in no way linked to any personally identifiable information on our site.
We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline.
In case of collecting sensitive information (such as your email or password), that information is encrypted and transmitted to us in a secure way (SSL). You can verify this by looking for a lock icon in the address bar and looking for "https" at the beginning of the address of https://diveary.com.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, updating your dive shop location) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.
We will comply with the principles of data protection set out in the GDPR for the purpose of fairness, transparency and lawful data collection and use.
We process your personal information as a Processor and/or to the extent that we are a Controller as defined in the GDPR.
We must establish a lawful basis for processing your personal information. The legal basis for which we collect your personal information depends on the data that we collect and how we use it.
We will only collect your personal information with your express consent for a specific purpose and any data collected will be to the extent necessary and not excessive for its purposes. We will keep your data safe and secure.
We will also process your Personal Information if it is necessary for our legitimate interests, or to fulfill a contractual or legal obligation.
We process your personal information if it is necessary to protect your life or in a medical situation, it is necessary to carry out a public function, a task of public interest or if the function has a clear basis in law.
We do not collect or process any personal information from you that is considered “Sensitive Personal Information” relating to your sexual orientation or ethnic origin unless we have your explicit consent, or if it is being collected subject to and in accordance with the GDPR.
You must not provide us with your personal information if you are under the age of sixteen without the consent of your parent or someone who has parental authority for you. We do not knowingly collect or process the personal information of children.
If you are an individual residing in the EU, you have certain rights as to how your personal information is obtained and used. We comply with your rights under the GDPR as to how your personal information is used and controlled if you are an individual residing in the EU.
Except as otherwise provided in the GDPR, you have the following rights:
Please contact us at any time to exercise your rights under the GDPR. We may ask you to verify your identity before acting on your requests.