Privacy Policy and Data protection declaration
in accordance with the
General Data Protection Regulation (“GDPR”)
1. Preamble
As an IT service provider, Alpha ITC is responsible for the processing of ProTec’s personal data. Alpha ITC works in cooperation with partners such as ProTec country representatives and ProTec training centres as licensees. These partners are independent companies or persons.
For all activities and processing of the partners which are not directly related to the certification process within the diving education, the customer communication and customer care by the EU country representation or the general information on the Internet, the partners themselves are obliged to process your customer data according to the guidelines of the GDPR and to inform you accordingly.
We recognize the importance of honest and responsible handling of your personal data. We want you to feel safe with us and will ask you again for your consent in case of changes or extensions of this declaration.
2. Name and address of the responsible person
The person responsible within the meaning of the ” GDPR ” is the:
Alpha ITC GmbH
Division ProTec
Zeppelinstrasse 73
81669 Munich
Germany
E-Mail: dsgvo@protecdive.com or contact@alpha-itc.com
3. To which areas does this privacy policy apply
- General Internet Presentations
- Online ordering platform
- Certification data management
- Member area
- Smart Card App
- Card and validity check
- Smart Learning platform
4. Basic information on the processing of your personal data
1. We always process your data on a legal basis according to Art. 6 GDPR
The processing of personal data is only permitted if there is a legal basis in accordance with Art. 6 GDPR, e.g. if you have given us your consent, if you want to make a purchase from us, or if we assert our legitimate interest in the processing.
We process your personal data to process an order which you have placed in one of our shops, e.g. when you conclude a purchase contract with us. This includes, for example, information about which articles you have ordered at what time.
We require your consent for all matters that go beyond the actual processing of an order, e.g. sending a newsletter, and will obtain this separately in these cases.
An exception for your consent is made in cases where prior obtaining of your consent is not possible for factual reasons, but the processing of your data is permitted by law.
In addition to your consent, we may also process your personal data on the basis of our legitimate interests (Article 6 paragraph 1 letter f GDPR).
A legitimate interest exists, for example, in the case of e-mail advertising to our existing customers.
2. We store your data only as long as necessary
Personal data relating to you will be deleted when the data is no longer required and none of the above-mentioned legal bases apply. A legal storage obligation, which our company must observe, can lead to longer storage.
We can store your data for longer – e.g. for improved service to you – if you give us your consent to do so or if we have a justified interest.
If we are unable to delete your personal data for technical reasons, your data will in any case be excluded from further processing (“blocked”).
5. Which personal data do we process?
We process your personal data, which fall under the following data categories:
- Access data for online systems (user, password)
- Personal data (name, date of birth, address, gender, photo, diving course and training data)
- Contact details (telephone number, e-mail address, etc.)
- Proof of identity, diving education, etc.
- Proof of identity (passport, etc.)
- Proof of diving qualifications (scuba diving diplomas, certificates, letters of reference, etc.)
- Company master data (name/company, company registration number, contact person, business address and other addresses, UID number)
- ProTec member status (training authorization, active status)
6. For what purposes do we process your personal data?
1. General internet presences
ProTec operates a generally accessible website and pages on Facebook, Instagram, YouTube and LinkedIn. The cookies and system-related storage used on the website are used exclusively for the functionality of the pages.
ProTec does not create any evaluations of the persons or their behavior on the website. Please read the information on data protection on our website https://www. protecdive.com/privacy-policy/
Analyses and evaluations that are created by Google Inc. are available at https://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/. This also applies to the pages on Facebook. Here too, ProTec does not carry out any evaluations of the visitor data. Analyses and evaluations that Facebook creates are to be read separately in the Facebook data protection conditions. https://www.facebook.com/about/privacy/.
2. Online ordering platform
- You register as our online customer
You register as an online customer in our shop. The data provided by you will be saved for a possible order. Your e-mail will be used to send you an activation e-mail.
You can change the data stored about you in your account at any time. If you no longer wish to use the account, it can be deactivated. Please send us a message from your customer account. A final deletion of your online customer account can take place when any open purchase and payment transactions have been completed and the legal retention periods have expired. - You order articles
If you order an article from us, we will collect the data necessary for the processing of the order (such as your name and address).
In addition, we also collect your telephone number and e-mail address so that we can contact you in the event of any queries or, in the case of Internet orders, to send you an order confirmation. - You contact us
On our website we have a contact form which you can use to contact our company electronically. You can also send us an e-mail.
By sending the contact form, your consent is assumed for the use of the data for processing your contact.
Alternatively, it is possible to contact us via the provided e-mail address. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Paragraph 1 Letter f GDPR. If the e-mail contact is aimed at concluding an order, an additional legal basis for processing is Art. 6 para. 1 letter b GDPR. This data is also used exclusively for processing your contact.
We keep your contact and therefore also your personal data for the purpose of conversation history in your customer account.
3. Certification data management
- Which categories of data do we process
- Person master data
- Training level
- Price date
- Trainers
- Dive Center
- For what purpose do we process your data
- Preparation of the certification
- Creation of the identity card
Your ProTec diving certificates are stored in our certification database. The ID cards/plastic cards are a graphic copy of this information. All ID cards can only be verified with the original data in the ProTec certification database. Thus, replacement ID cards or confirmations can be requested at any time.
We grant the order processor the right to pass on your data to subcontractors (diving centers) for printing. Some of your data will also be processed outside the EU or EEA, in the country where you completed your diving training. The adequate level of protection results from an adequacy decision of the European Commission according to Art 45 GDPR and from an exception for the specific case according to Art 49 para. 1 GDPR.
4. Online Member Area
As a certified ProTec diver, we provide you with an administration area for your personal data and training.
- Which categories of data do we process
- Access data for online systems (all members)
- Person master data (Divers, Professionals)
- Enterprise master data (professionals and centers)
- Training level
- Price date
- Trainers
- Dive Center
- Member Status (Professionals and Center)
- Professionals to Center connections (Professionals and Center)
- For what purpose do we process your data
- Updating your personal data
- Administration of your ProTec training courses
- Your possibility to register for diving courses
- Validation of the training authorization and its disclosure in case of customer inquiries (only professionals and centers)
5. Card and validity check
For the proof of a valid ProTec identification card or for the confirmation of its current status, ProTec has created the possibility of an online check. If you pass on your ProTec number to a third party, you agree that this third party may create a request via the validity check and ProTec may transmit your status to the third party. In this case ProTec stores the e-mail address of the requestor and the date of the request.
6. Creation of evaluations
We compile statistics and evaluations of the dive certifications stored in our data management. Evaluations with personal reference are only shown to the dive center where you have done your training. All other evaluations are created without personal reference (pseudonymized).
7. Processing of personal data on the basis of interests justified by ProTec
We use your contact details to offer you the best possible support and to provide you with up-to-date information.
This includes
- Customer Service
- Processing of customer service requests
- Own information This includes
8. Encryption
To protect the data you provide, we use SSL encryption on our pages. When ordering in our shops, please always make sure that your browser shows the secure connection to us.
9. Your rights
In principle, you have the rights of information, correction, deletion, restriction,
Data transferability and contradiction to. For this you turn to us. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact the supervisory authority responsible in your country.
1. Right of rectification
You have the right to rectify and/or complete your personal data if they are incorrect or incomplete. We will make the correction without delay.
2. Right to restrict processing
You may, under certain conditions, request the restriction of the processing of your personal data.
- If you dispute the accuracy of personal information concerning you for a period of time that allows us to verify the accuracy of the personal information;
- If the processing is unlawful and you object to the deletion of your personal data and request instead the restriction of the use of your personal data;
- If we no longer need your personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims; or
- If you have lodged an objection to the processing and it is not yet clear whether the legitimate reasons of our company outweigh your reasons.
3. Right of cancellation
In certain cases, you can require us to delete your personal data immediately, and we are then obliged to delete this data immediately in such cases.
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed
- you revoke your consent (see 6. and 7.), or there is no other legal basis for the processing
- You object to the processing (see below) and there are no legitimate reasons for the processing to take precedence
- We have processed your personal data unlawfully
The right to deletion does not exist insofar as the processing is necessary
- To exercise the right to freedom of expression and information;
- To comply with a legal obligation requiring processing under Union or national law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
- For reasons of public interest in the field of public health pursuant to Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR, or
- To assert, exercise or defend legal claims.
4. Right to data portability
You have the right to receive the personal data you have provided us with in a structured, common and machine-readable format. You also have the right to have us transfer this data to another company, as far as this is technically feasible. The freedoms and rights of other persons may not be impaired thereby.
5. Right of objection
You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, without incurring any costs other than connection charges.
In this case, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
6. Right of revocation of the declaration of consent under data protection law
By confirming this privacy policy, you give your active consent to the storage/processing of your data.
You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until revocation.
The data provided by you is absolutely necessary for the creation of the certifications. Without this data, we cannot carry out the certification and cannot confirm the training and examination you have carried out. This would invalidate all your ProTec certifications, since the associated identification cards lack the basis.
For a revocation please contact: dsgvo@protecdive.com
7. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, if it significantly affects you legally.
This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you and us,
- is authorized by Union or national legislation to which the person responsible is subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent.
With regard to the cases referred to in (1.) and (3.), the responsible person shall take reasonable measures to protect the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person from our company to present his or her own point of view and to challenge the decision.
You may revoke this consent at any time. A revocation has the consequence that we will no longer process your data for the above-mentioned purposes from this point in time and your ProTec certification is therefore invalid.
For a revocation please contact: dsgvo@protecdive.com .
10. Checking the correctness of the information
You may contact us at any time to verify the accuracy of any information we hold about you or to request that the information be updated, corrected or deleted by contacting dsgvo@protecdive.com (please include your ProTec ID and name).
11. Duration of data storage
We store your personal data and your certification data until you actively request us to delete them. Please note that this will invalidate all your ProTec certifications.
The data for the badge printing (incl. shipping data) will be deleted by our order processor directly after the successful printing and shipping of your badge.
12. Explanation of terms
ProTec Member or Member: All persons or companies registered with ProTec.
Diver: Sports diver without professional / commercial activity.
Professionals: Diving instructors and diving centres.
13. You can reach us at the following contact details
Responsible:
Alpha ITC GmbH, ProTec IT Department, Zeppelinstrasse 73, D-81669 Munich
e-mail dsgvo@protecdive.com
Contractor:
Alpha ITC GmbH, Engelsberggasse 4 / Top 2b, A-1030 Vienna
e-mail contact@alpha-itc.com
For further questions we are available at any time.
