Last Updated: 18.05.2026
At [Insert Company Name] (“We”, “Us”, “Our”), we are deeply committed to protecting the privacy and security of your personal data. This Privacy and Cookie Policy outlines how we collect, process, and protect your information when you visit our website, utilize our online store, or interact with our digital channels.
This policy is designed to fully comply with the European General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and the Spanish Law on Information Society Services and Electronic Commerce (LSSI-CE, Law 34/2002).
1. IDENTITY OF THE DATA CONTROLLER
In accordance with the principle of transparency, we inform you that the entity responsible for the processing of your personal data (the Data Controller) is:
- Company Name: [Insert Company Name]
- Tax Identification Number (NIF): [Insert NIF]
- Registered Office:
- Contact Email for Privacy Matters: [Insert Email Address]
2. WHAT PERSONAL DATA WE COLLECT AND WHY
We collect personal data only when it is strictly necessary to provide our services, fulfill legal obligations, or with your explicit consent.
- Order and Delivery Data: When you purchase our products, we collect your name, email address, phone number, and delivery location details (e.g., your name as registered at your hotel or diving center). Legal Basis: Execution of a contract (Art. 6(1)(b) GDPR).
- Payment Data: Financial transactions are directly handled by our payment processor, Stripe. We do not collect or store your full credit card numbers on our servers. Legal Basis: Execution of a contract (Art. 6(1)(b) GDPR).
- Communication Data: If you contact us via email or forms, we process your contact details to respond to your inquiries. Legal Basis: Legitimate interest in providing customer support (Art. 6(1)(f) GDPR).
- Technical and Navigation Data: Your IP address, browser type, and interaction metrics are collected automatically through cookies (detailed in Section 5). Legal Basis: Consent for marketing/analytics (Art. 6(1)(a) GDPR) and Legitimate Interest for strictly necessary technical operations (Art. 6(1)(f) GDPR).
3. THIRD-PARTY DATA SHARING AND PROCESSORS
To operate our online store efficiently, we rely on trusted third-party service providers who act as Data Processors. We have ensured that these providers comply with stringent GDPR standards.
3.1. Payment Processing (Stripe) We use Stripe for payment, analytics, and other business services. Stripe collects transaction and personally identifying information, which it analyzes and uses to operate and improve the services it provides to us, including for advanced fraud detection (Stripe Radar). By completing a purchase, you acknowledge that your payment data is shared with Stripe. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.
3.2. Local Deliveries (Hotels and Diving Centers)
Due to our localized delivery model in Tenerife, we must share the name associated with your order and your expected delivery date with the management or concierge staff of your selected hotel or diving center, exclusively for the purpose of successfully handing over your package.
4. INTERNATIONAL DATA TRANSFERS
Some of the digital tools we use (such as Google, Meta, and Stripe) operate servers outside the European Economic Area (EEA), primarily in the United States. We ensure that any transfer of your personal data outside the EEA is protected by appropriate legal safeguards, such as the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs) approved by the European Commission, guaranteeing a level of protection equivalent to the GDPR.
5. COOKIE POLICY AND TRACKING TECHNOLOGIES
Our website utilizes cookies and similar tracking technologies to function, analyze traffic, and support our marketing and affiliate efforts. In compliance with the guidelines set by the Spanish Data Protection Agency (AEPD), you have the right to accept all, configure, or reject all non-essential cookies via our Cookie Consent Banner.
5.1. Google Tag Manager (GTM)
We use Google Tag Manager to manage and deploy tracking tags on our website. GTM itself does not set cookies or collect any personally identifiable information. It operates solely as a structural tool that triggers other tracking scripts (like Analytics or Facebook Pixel) based on the consent preferences you select in our Cookie Banner.
5.2. Google Analytics 4 (GA4)
With your explicit consent, we utilize Google Analytics 4 to understand how users interact with our website. GA4 uses cookies to track session durations, pages visited, and general geographic data. We have configured GA4 to anonymize IP addresses to enhance your privacy. You may opt-out of GA4 tracking at any time by modifying your preferences in our Cookie Banner.
5.3. Facebook Pixel (Meta)
With your explicit consent, we use the Facebook Pixel to measure the effectiveness of our advertising campaigns and to deliver relevant ads to you on Meta platforms (Facebook, Instagram). This tool tracks actions such as adding an item to a cart or completing a purchase.
5.4. Custom Affiliate Tracking Cookies
We operate an affiliate program that rewards partners for referring customers to our store. If you arrive at our website via an affiliate link, a proprietary tracking cookie will be placed on your device (subject to your explicit consent via the Cookie Banner).
- Purpose: Affiliate cookies help us track when you click through from partner sites. If you make a purchase, we may pay them a commission.
- Data Collected: These cookies do not contain personal information such as your name or email. They strictly create an anonymous, unique identifier to correctly attribute the conversion to the respective affiliate.
5.5. Google Search Console
We utilize Google Search Console strictly for website SEO maintenance and monitoring our presence in search results. Please note that Google Search Console relies on aggregated search data from Google’s environment and does not use cookies, nor does it collect, track, or expose any personal data from visitors on our website.
6. AGE REQUIREMENTS
In accordance with the Spanish LOPDGDD, you must be at least 14 years of age to validly consent to the processing of your personal data and the use of non-essential cookies on our website. If you are under 14, you may only use our website and provide data with the explicit authorization of a parent or legal guardian.
7. YOUR DATA PROTECTION RIGHTS (ARCO RIGHTS)
Under the GDPR and Spanish law, you possess absolute control over your personal data. You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct any inaccurate or incomplete data.
- Erasure (Right to be Forgotten): Request the deletion of your data when it is no longer necessary for the purposes collected.
- Restriction: Request the suspension of the processing of your data in certain scenarios.
- Portability: Receive your data in a structured, commonly used format.
- Objection & Withdraw Consent: Object to processing for direct marketing or withdraw your consent for cookies at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please send an email to [Insert Email Address] attaching a copy of your ID or equivalent identification document.
If you believe your data protection rights have been violated, you have the right to lodge a formal complaint with the competent supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD), via their website at www.aepd.es.