Who we are
We are Calypso Sub-Aqua Club (“CSAC”), a Voluntary organisation registered with the Office of the Commissioner of Voluntary Organisations. You can contact us by email at firstname.lastname@example.org and email@example.com.
We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.
What personal data do we collect?
When you request to apply for a CSAC Membership, participate in our diving and social activities or when you make an enquiry, you may provide or be requested identification details, scuba diving qualifications and contact information. This information is collected to provide you with a service.
For your own safety to safeguard your own interest, and to meet legal obligations for Diving activities, we request medical self-certification and/or a medical certificate and details of next of kin.
When you pay for your membership via Bank or Paypal, we also collect payment information.
During social or diving events, club officials or attendees may also take photographs capturing the presence of attendees for sharing within club media. Please advise us beforehand if you wish not to be photographed and let photographers know. If such photos are published through the club’s media on facebook.com or calypsosac.org, kindly contact us to remove such material immediately.
When you visit our website, within the web server access logs we collect your IP address, page visited or requested, date and time, browser and operating system version.
We retain provided information as follows:
|Membership Form Information||up to 10 years (due to tax legislation)|
|Identification for Social Events||up to 10 years (due to tax legislation)|
|Payment Information when a payment is made||up to 10 years (due to tax legislation)|
|Medical Information||up to 2 years (or after final legal settlement of any potential claims in respect of the club)|
|Diving Log Sheets||up to 2 years (or after final legal settlement of any potential claims in respect of the club)|
|Diving Log Slate||until transferred to a Diving Log Sheet|
|Attendance to Ordinary or Extraordinary General Meetings||up to 10 years (due to tax legislation)|
Why do we collect this information?
We will use your information to:
- be able to provide you with the services normally expected of a diving club
- organisation of diving and social activities and keep you informed of such activities
- assist in any diving incident inquiry by law enforcement, the courts or any other relevant authority
- manage club accounts and audit
- general administrative matters to maintain your membership
Our website access logs are only collected for tracking visits to our site for statistical and performance optimisation purposes and to assist should any visitor, including you, not be able to access websites.
Your personal information is stored in our online website system and our organisation’s information systems which are based within the European Union. We do not share your information with other entities, and neither we transfer data with organisations that are based outside of the European Union or countries with equivalent Data Protection safeguards unless we inform you.
We do follow basic security practices in order to secure your personal data as best as we can. Should we identify a breach which might put your data at risk, we will inform you either via a public message or by direct communication.
We do not use the information you provide to make any automated decisions that might affect you.
Your rights over your information
By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.
You can also ask us to give you a portable copy of the information you have provided us through electronic means (website membership form) and to stop using your information for a period of time if you believe we are not doing so lawfully.
Where we have no legitimate reason to further hold your data, except your consent for marketing purposes, you can ask us to delete your data.
To submit a request to exercise any of the above rights, please contact us on firstname.lastname@example.org .
Your right to complain
If you have a complaint about our use of your information, you can contact the Information Commissioner’s Office via their website at www.idpc.org.mt or write to them at:
Information and Data Protection Commissioner
Level 2, Airways House
Sliema SLM 1549
Tel: (+356) 2328 7100
This Privacy notice has last been updated on the 27th April 2018