Privacy policy
This policy explains how Raie Manta Diving Tikehau collects, uses and protects the personal data of visitors to raiemantadiving.com.
Raie Manta Diving Tikehau is established in French Polynesia. As our website is also addressed to visitors residing in the European Union, we apply the General Data Protection Regulation (GDPR) and the French Data Protection Act to all our visitors, wherever they live.
1. Who is responsible for your data
Romain Dorard et Flavia Flinois
Raie Manta Diving Tikehau
SARL Scubatiki diving - N° Tahiti F33494
98778 Tuherahera, Tikehau, Tuamotu, French Polynesia
Email:
Phone: (+689) 87 24 60 65
For any question about your personal data, write to us at
2. What data we collect
We only collect the data required for the purposes described below.
- Data you give us — when you use our contact form: your name, your email address, your phone number, the date you are interested in, the number of participants, Note and the content of your message.
- Technical data — recorded automatically when you visit: IP address, browser type and language, pages viewed, date and time of the visit.
- The dive registration form — before your dives, we ask you to fill in a form for your group: the contact person, an emergency contact, your stay, then, for each diver, their name, date of birth, certification level and diving experience, their answers to the health questionnaire and, if they wish, their certification card (PDF, JPG or PNG, 1 MB maximum). The answers to the health questionnaire are health data. The form is sent only to the dive centre; certification cards are stored outside the public part of the site, under a random name. The form and its cards are deleted automatically one year after your departure date (or arrival date if you did not give one).
- Unanswered questions — when a search in our contact form returns no answer, the text of your question is kept so that we can extend our FAQ. It is kept on its own: it is not linked to your name, your e-mail address or your IP address. It is deleted after 24 months, together with the messages.
The only health data we collect is that of the dive registration form described above: it is used solely to prepare your dives and ensure your safety. This site collects no banking data.
3. Why we use it, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your enquiry or booking request | Steps taken at your request prior to entering into a contract | 3 years from our last exchange |
| Keeping the website running and secure (server logs) | Legitimate interest: keeping the site available and safe | 12 months |
| Preparing your dives and ensuring your safety (dive registration form and health questionnaire) | Your explicit consent, given by filling in and sending the form (Article 9 GDPR, health data) | 1 year after your departure date, then automatic deletion |
| Measuring how the site is used, in order to improve it | Your consent | Cookies: 13 months at most. Statistics: retained by Google Analytics. |
We only send you informational emails if you have expressly asked us to. You can object to this at any time.
4. Who has access to your data
Your data is never sold, rented or traded. It is accessible to Raie Manta Diving Tikehau and to the technical providers acting on our behalf:
| Provider | Role | Where data is processed |
|---|---|---|
| Swisscenter | Website hosting | Switzerland |
| Swisscenter | Delivery of the emails exchanged with you | Switzerland |
| Google Ireland Ltd. (Google Analytics) | Audience measurement | European Union and United States |
We may also have to disclose data to an administrative or judicial authority where the law requires it.
5. Transfers outside the European Union
Switzerland, where the website is hosted, benefits from an adequacy decision of the European Commission: your data is protected there at a level equivalent to that of the Union.
Some of our providers belong to the Google group and may process data outside the European Union, in particular in the United States. Those transfers are covered by the European Commission's standard contractual clauses and by the EU–US Data Privacy Framework, to which Google adheres.
6. How we protect your data
The whole site is served over HTTPS, which encrypts the exchange between your browser and our server. Access to the site administration is restricted to authorised people, the software is kept up to date, and regular backups are taken.
7. Your rights
You have the following rights over your personal data:
- Access — obtain a copy of the data we hold about you;
- Rectification — have inaccurate or incomplete data corrected;
- Erasure — ask for your data to be deleted;
- Restriction — ask us to suspend the processing of your data;
- Objection — object to processing based on our legitimate interest;
- Portability — receive your data in a machine-readable format;
- Withdrawal of consent — withdraw at any time a consent you have given us, without affecting what was done before that withdrawal;
- Post-mortem directives — set out what should happen to your data after your death.
To exercise these rights, write to
8. Complaints
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
If you reside in the European Union, you may also contact the data protection authority of your country of residence.
9. Automated decision-making
We do not take any automated decisions about you and we do not build any profile.
10. Cookies
The use of cookies on this site is covered by a dedicated page: Cookies policy.
11. Changes to this policy
We may update this policy, in particular if the services offered on the site change. Any change is published on this page and takes effect as soon as it is published.