Who we are
We are Calypso Sub-Aqua Club (“CSAC”), a Voluntary organisation registered with the Office of the Commissioner of Voluntary Organisations. You can contact us by email at info@calypsosac.org.
The club is also affiliated with the British Sub-Aqua Club (BSAC). If you maintain a BSAC membership, you need to read their Privacy Policy which you may find on their website at www.bsac.com. CSAC acts only as a data processor for BSAC in the case of BSAC membership processing as we do not determine the scope, retention and use of data passed on to BSAC.
We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.
What personal data do we collect?
Main personal data processing
When you request to apply for a CSAC Membership, participate in our diving and social activities or when you make an enquiry, you may provide or be requested identification details, scuba diving qualifications and contact information. This information is collected to provide you with a service.
For your own safety to safeguard your own interest, and to meet legal obligations for Diving activities, we request medical self-certification and/or a medical certificate and details of next of kin.
When you pay for your membership via Bank or Paypal, we also collect payment information.
During social or diving events, club officials or attendees may also take photographs capturing the presence of attendees for sharing within club media. Please advise us beforehand if you wish not to be photographed and let photographers know. If such photos are published through the club’s media on facebook.com or calypsosac.org, kindly contact us to remove such material immediately.
We do not use any cookies on our website but links on the website may lead you to third party websites which may include such cookies. You need to check the Privacy Policy of such websites individually to understand what they do with this data.
When you visit our website, within the web server access logs we collect your IP address, page visited or requested, date and time, browser and operating system version.
We retain provided information as follows:
| Membership Form Information | up to 10 years (due to tax legislation) |
| Identification for Social Events | up to 10 years (due to tax legislation) |
| Payment Information when a payment is made | up to 10 years (due to tax legislation) |
| Medical Information | up to 2 years (or after final legal settlement of any potential claims in respect of the club) |
| Diving Log Sheets | up to 2 years (or after final legal settlement of any potential claims in respect of the club) |
| Diving Log Slate | until transferred to a Diving Log Sheet |
| Attendance to Ordinary or Extraordinary General Meetings | up to 10 years (due to tax legislation) |
Why do we collect this information?
We will use your information to:
- be able to provide you with the services normally expected of a diving club
- organisation of diving and social activities and keep you informed of such activities
- assist in any diving incident inquiry by law enforcement, the courts or any other relevant authority
- manage club accounts and audit
- general administrative matters to maintain your membership
Our website access logs are only collected for tracking visits to our site for statistical and performance optimisation purposes and to assist should any visitor, including you, not be able to access websites.
Your personal information is stored in our online website system and our organisation’s information systems which are based within the European Union. We do not share your information with other entities, and neither we transfer data with organisations that are based outside of the European Union or countries with equivalent Data Protection safeguards unless we inform you.
We do follow basic security practices in order to secure your personal data as best as we can. Should we identify a breach which might put your data at risk, we will inform you either via a public message or by direct communication.
We do not use the information you provide to make any automated decisions that might affect you.
Social Media and other data processing
In the course of its activities, the Club may share or post information related to its activities in the public domain for the aim to pursue its main organisational aims, including that of bringing awareness of issues related to the sport of scuba diving and for the public interest beyond the members of the club. Where such information may contain personally identifiable information, the same rights as below apply.
Your rights over your information
By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.
You can also ask us to give you a portable copy of the information you have provided us through electronic means (website membership form) and to stop using your information for a period of time if you believe we are not doing so lawfully.
Where we have no legitimate reason to further hold your data, except your consent for marketing purposes, you can ask us to delete your data.
To submit a request to exercise any of the above rights, please contact us on info@calypsosac.org .
Your right to complain
If you have a complaint about our use of your information, you can contact the Information Commissioner’s Office via their website at www.idpc.org.mt or write to them at:
Information and Data Protection Commissioner
Level 2, Airways House
High Street
Sliema SLM 1549
Malta
Tel: (+356) 2328 7100
Email: idpc.info@idpc.org.mt
This Privacy notice has last been updated on the 26th August 2022
