You are informed that the personal data that you voluntarily provide us with through the different forms on the website will be processed by Luis Rodriguez Martín with DNI: 02251177Y with address at Reina Sofía , 17, Local 5 C.P:35510, Puerto del Carmen, Tías, Lanzarote, Spain(hereinafter, TitanBlueDivers), assumes the maximum responsibility and commitment to the establishment, implementation and maintenance of this Data Protection Policy, ensuring the continuous improvement of the data controller with the aim of achieving excellence in relation to compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119/1,04-05-2016), and Spanish personal data protection regulations (Organic Law, specific sectoral legislation and its implementing rules).

The purpose of such processing is the one described in each of the forms established on the website in which you have provided us with your data.

The TitanBlueDivers. Data Protection Policy is based on the principle ofproactive responsibility, according to which the controller is responsible for compliance with the regulatory and jurisprudential framework governing this Policy, and is able to demonstrate this to the competent supervisory authorities.

In this regard, the controller shall be governed by the following principles which should serve as a guide and frame of reference for all its staff in the processing of personal data:

1. Data protection by design: the controller shall implement, both at the time of the determination of the means of processing and at the time of the processing itself, appropriate technical and organisational measures, such as pseudonymisation, designed to implement effectively data protection principles, such as data minimisation, and to integrate the necessary safeguards into the processing.
2. Data protection by default: the controller shall implement appropriate technical and organisational measures with a view to ensuring that, by default, only personal data that are necessary for each of the specific purposes of the processing are processed.
3. Data protection in the information lifecycle: measures ensuring the protection of personal data shall apply throughout the entire information lifecycle.
4. Lawfulness, fairness and transparency: personal data shall be processed in a lawful, fair and transparent manner in relation to the data subject.
5. Purpose limitation: personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes.
6. Data minimisation: personal data shall be adequate, relevant and limited to what is necessary for the purposes for which they are processed.
7. Accuracy: personal data shall be accurate and, where necessary, kept up to date; all reasonable steps shall be taken to ensure that personal data which are inaccurate in relation to the purposes for which they are processed are erased or rectified without delay.
8.Retention time limitation: personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
9. Integrity and confidentiality: personal data shall be processed in such a way as to ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by implementing appropriate technical or organisational measures.
10. Information and training: one of the keys to ensuring the protection of personal data is the training and information provided to staff involved in the processing of personal data.

During the life cycle of the information, all staff with access to the data will be adequately trained and informed about their obligations in relation to compliance with data protection regulations.

Unless you inform us to the contrary, we will assume that your data have not been modified, that you undertake to notify us of any change and that we have your consent to use them for the purpose of maintaining the relationship between the parties.

The Privacy Policy will be reviewed and adapted at all times to the provisions in force on the protection of personal data by:

• NAME: Luis Rodriguez Martín
• DNI: 02251177Y
• ADDRESS:Calle Reina Sofía 17, local 5
• PHONE: 600796593
• EMAIL: info@titanbluedivers.com
• WEB: buceoenlanzarote.com

PURPOSE OF DATA PROCESSING

The information provided can be of various kinds: name and surname, e-mail address, postal address, telephone number, ip address .....

By providing this information, the user consents to the collection, use, management and storage of this information on www.aulacem.es in the manner described in the Privacy Policy and Legal Notice. At any time, you can contact us in any way.

At TitanBlueDivers we enable the collection of personal information through contact forms.

WILL WE SEND YOUR DATA TO OTHER COUNTRIES?
There are countries in the world that are safe for your data and others that are not so safe. For example, the European Union is a safe environment for your data. Our policy is not to send your personal information to any country that is not secure from a data protection point of view.

In the event that, in order to provide you with the service, it is essential to send your data to a country that is not as secure as Spain, we will always request your prior permission and we will implement effective security measures to reduce the risks of sending your personal information to another country.

TitanBlueDivers will therefore not make any international transfer of your data.

WHO WILL KNOW THE INFORMATION WE ASK FOR?

In general, only duly authorised personnel of our organisation may have access to the information we ask for.

Similarly, those entities that need to have access to your personal information in order for us to be able to provide you with our services may also have access to your personal information. For example, our bank will know your details if payment for our services is made by credit card or bank transfer.

Public or private entities to whom we are obliged to provide your personal data in order to comply with any law will also be aware of your information.

To give you an example, the Tax Law makes it compulsory to provide the Tax Agency with certain information on economic transactions exceeding a certain amount.

In the event that, apart from the cases mentioned above, we need to disclose your personal information to other entities, we will ask for your prior permission through clear options that will allow you to decide in this respect.

CONTACT FROM THE WEB OR EMAIL

What data do we collect through the website?
We may process anonymous data such as your IP address, duration of your visit to the website, geographical origin, operating system or browser you use, all anonymously.
If you provide us with data in the contact form, you will be identified so that we can contact you, if necessary.
- Manage your queries or requests for information
- Audit improvements to the website, about our services to improve our catalogue of services.

Acceptance and consent of the interested party: In those cases where it is necessary to fill in a form and click on the send button in order to make a request, the completion of the form will necessarily imply that the interested party has been informed and has expressly given his or her consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have the symbol * in the mandatory fields. If you do not provide these fields, or do not check the checkbox to accept the privacy policy, the information will not be allowed to be sent.

El usuario podrá ejercer los derechos de acceso, rectificación, supresión, oposición, limitación del tratamiento, portabilidad de datos y a no ser objeto de decisiones individualizadas, automatizadas, en relación con los datos objeto del tratamiento, ante el responsable del tratamiento en la dirección anteriormente mencionada, o por correo electrónico a info@titanbluedivers.com, adjuntando copia de su DNI o documento equivalente.

In the event that you have not obtained satisfaction in the exercise of your rights, you may lodge a complaint with the competent Data Protection Control Authority, which is the Spanish Data Protection Agency, whose contact details are available at https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf.

TitanBlueDivers adopts the corresponding technical, organisational and security measures in accordance with current regulations on Personal Data Protection.

However, it assumes no liability for damages arising from alterations that third parties may cause to the user's computer systems, electronic documents or files.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.

In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy regarding the personal data to which they have had access by virtue of the order placed, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for processing personal data.

All these security measures are regularly reviewed to ensure their adequacy and effectiveness. The legal basis for the processing of your data is based on your consent when you provide it at the time of registration.

You also have the right to object to and/or withdraw such consent, at any time, by notifying the data controller at the above address.

However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information under our control and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected to take appropriate action.

In accordance with the provisions of Law 34/2002, on Information Society Services and Electronic Commerce in article 21, we will request your consent to send you advertising communications that we consider may be of interest to you, by e-mail or by any other equivalent means of electronic communication.