Privacy policy
Polipia matches divers to form like-minded travel groups. This page explains what data we collect, why, and how to exercise your rights (GDPR).
Who is responsible for your data?
The data controller is: [NAME OR COMPANY NAME — TO BE COMPLETED], [POSTAL ADDRESS — TO BE COMPLETED]. To contact the data controller, please send an email to: polipiadive@gmail.com.
What data do we collect?
- Identity and contact: first name, surname, date of birth, sex, email, phone number.
- Diver and travel profile: certification agency and level, time since last dive, preferences, pace, personality, languages, interests, budget, duration, group atmosphere, motivations, English level, preferred group make-up.
- Travel wishes: destinations, dates or months, duration.
- Messages sent through the contact form.
- Technical: your chosen language and a draft of your profile are kept in your browser (local storage) for convenience; no advertising cookies or tracking tools are used.
We do not collect any health or payment data.
Why, and on what legal basis?
- Forming groups of 8 compatible divers, proposing trips, contacting you and organising the stay: pre-contractual steps and performance of a contract.
- Sending the acknowledgement and information about your request: performance of a contract.
- Answering your questions: legitimate interest.
- Keeping your request in our pool of travellers: your consent, given by ticking the box on the form and which you can withdraw at any time.
The service is reserved for adults.
Who receives your data?
- Our data-hosting and email provider: Google (Google Sheets / Gmail), acting as a processor.
- Once your group is confirmed, and only where needed for the organisation: trip providers (dive centres, accommodation, carriers), with only the information required for their service.
- The other members of your group: only your first name and the profile elements needed to form the group.
We never sell your data.
Transfers outside the European Union
Google may process data outside the EU; these transfers are covered by the mechanisms provided by the GDPR (standard contractual clauses, EU–US Data Privacy Framework).
How long do we keep it?
- Request with no trip: 3 years after our last exchange, then deletion.
- Trip taken: as long as needed to manage the stay, then the statutory accounting retention periods.
- Contact-form messages: 12 months.
Your rights
You may at any time access, rectify or erase your data, restrict or object to its processing, request portability, withdraw your consent and set post-death directives. Write to us at polipiadive@gmail.com; we reply within one month. You may also lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
Security
Data is stored in a restricted-access Google space protected by authentication. The form is sent over an encrypted connection (HTTPS).