Thank you for using TridentWarriors.com. Here, we explain what personal information we may hold about you, and how we might use that information. By using our website you are agreeing to the terms of this privacy policy, and to the terms and conditions of use of this website. Words defined in those terms and conditions of use have the same meaning when we use them in this policy. If you have any questions about this privacy policy, please email dataprivacysupport@www.tridentwarriors.org.

Please note that where our website contains links to other websites, we are not responsible for the privacy policies of other organizations and websites.

General provisions

This privacy policy regulates the principles of collection, processing, and storage of personal data. Personal data is processed and stored by Trident Divers LLC DBA Trident Warriors, who is the controller of the personal data (hereinafter the controller).

For the purposes of this privacy policy, a data subject means the customer or another natural person whose personal data is processed by the controller.

This policy applies solely to any personal information collected by the controller.

For the purposes of this privacy policy, a customer means anyone who purchases goods or services on the controller’s website.

The controller observes the principles relating to personal data processing provided by legislation and, among other things, processes personal data in a lawful, fair, and secure manner. The controller is able to declare that personal data has been processed in accordance with the provisions of the legislation.

What information do we collect?

Personal information is any information that can be used to identify a living individual such as a name, date of birth, email address, postal address, and telephone number.

Any personal information that you provide us with is stored securely. We may collect this personal information when you contact us, make a donation, register for our services, join us on a trip, attend any of our training (for example, to receive our newsletter), or otherwise give us personal information.

When making a donation, your financial information such as credit and debit card details, is not stored by us and is currently processed by a third party. Controller does not have access to this information.

How do we use this information?

We use your personal information to provide you with the information or services you ask for. We may also use your information for administrative purposes, including letting you know about changes to our services and understanding more about how our website is used. In addition, we may handle any non-sensitive personal data for our legitimate purposes. We will not sell your details to any third parties or use your data in any other way than those listed above.

Controller regards the lawful and correct handling of personal information as important to the success of our work and to maintaining the confidence of those with whom we deal. This applies to any user of our services, irrespective of where they live.

We will ensure that anyone working for us uses personal information lawfully and correctly. To this end, we will ensure we fully comply with the EU General Data Protection Regulations.

How we use cookies

A cookie is a small text file passed to your computer, mobile phone or other device, through your web browser, to make your experience on a site more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

We use cookies on this website to collect anonymized data on user activity and interactions. We use website analytics tools, such as Google Analytics, to track how the website is used. These tools use cookies to gather statistics about how people use the website. For example, to see how many people look at a particular web page and which country they are from.

This information allows us to improve the website and to keep it relevant to our users’ needs. We do not store any personal information for this purpose but simply use it to see how you use the website.

If you do not wish to have cookies stored on your computer, you can easily change your web browser’s settings to refuse cookies. You can at any time change or withdraw your consent from the Cookie Declaration on our website. Information about deleting or controlling cookies is available at www.aboutcookies.org.

Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our website. The International Chambers of Commerce provides a guide to the law in this area and information about different types of cookies.

Google Analytics

Google Analytics is a web analytics service provided by Google that enables us to measure how people use our website using cookies. We use this information to improve our website experience for website visitors and to measure the effectiveness of our online advertising.

If you’d prefer to opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout

1. Accessing your data

We want to make sure that your personal information is accurate and up-to-date. You may ask us to correct or remove information you think is inaccurate. You also have the right to request a copy of the information that we hold about you at any time. To do so, please email: dataprivacysupport@www.tridentwarriors.org

If you wish to make a complaint about how we have handled your personal data, please email: inquries@www.tridentwarriors.org and we will investigate the matter.

Collection, processing, and storage of personal data

2.1. The personal data collected, processed, and stored by the controller has been collected electronically, mainly via the website, telephone, messenger apps and e-mail.

2.2. By sharing their personal data, the data subject grants the controller the right to collect, arrange, use and administer, for the purpose defined in the privacy policy, the personal data that the data subject shares with the controller either directly or indirectly when purchasing goods or services on the website.

2.3. The data subject is liable for the accuracy, correctness, and integrity of the data submitted by them. The submission of knowingly false data is regarded as a breach of the privacy policy. The data subject is required to immediately notify the controller of any changes in the data submitted.

2.4. The controller is not liable for any damage or loss caused to the data subject or a third party as a result of the submission of false data by the data subject.

Processing of personal data of customers
- The controller may collect, process, store and share with third parties the following personal data of the data subject:
  - Given name and surname
  - Date of birth
  - Telephone number
  - E-mail address
  - Home address
- Passport details including:
  - Passport number
  - Issue date
  - Expiration date
  - Issue location/country
  - Photograph of passport
  - Visa details limited to trip that the data subject is attending
- Scuba Diving certification details including:
  - Certification ID number
  - Issue date
  - Certification level
  - Issuing instructor/location
- PADI Diver Medical Participant Questionnaire:
  - Medical history
  - Psychological history
  - Surgical history
  - Prescription medication usage
  - Date of birth
  - Physician evaluation certification
- Completion of PADI Release of Liability/Assumption of Risk/Non-agency Acknowledgement Form TRAVEL AND EXCURSIONS
- Emergency point of contact information including:
  - Full name
  - Relationship to you
  - Emergency contact phone numbers
  - Home Address
  - Email address
- Diving and or Accident insurance policy information including:
  - Policy ID
  - Policy start/expiration date
  - Policy issuer
  - Policy contact information
  - Policy coverage data

In addition to the foregoing, the controller has the right to collect data about the customer that are available in public registers.
- The legal basis for the processing of personal data points (a), (b), (c) and (f) of Article 6(1) of the General Data Protection Regulation:

(a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

(b) processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;

(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Processing of personal data according to the purpose of processing:
- Purpose of processing – security and safety
  The maximum period of storage of personal data – according to the terms specified by law
- Purpose of processing – the processing of orders
  Maximum period of storage of personal data – according to the terms specified by law
- Purpose of processing – ensuring the functioning of online store services
  Maximum period of storage of personal data – according to the terms specified by law
- Purpose of processing – customer management
  Maximum period of storage of personal data – according to the terms specified by law
- Purpose of processing – financial activities, accounting
  Maximum period of storage of personal data – according to the terms specified by law
- Purpose of processing – marketing. Maximum period of storage of personal data – according to the terms specified by law.
- The controller has the right to share personal data of customers with third parties such as processors, accountants, travel, diver training, transport and courier companies, companies providing transfer services. The controller is in charge of the processing of personal data. The controller transmits the personal data necessary for vacation planning, diver safety and certification verification to the processor
- The controller processes and stores personal data of the data subject implementing the organizational and technical measures to ensure that the personal data is protected against any accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.
- The controller stores the data of the data subjects depending on the purpose of processing, but no longer than maximum according to the terms specified by law

Rights of the data subject
- The data subject has the right to gain access to and examine their personal data.
- The data subject has the right to obtain information on the processing of their personal data.
- The data subject has the right to modify or rectify inaccurate data.
- If the controller processes personal data of the data subject based on the consent granted by the latter, the data subject has the right to withdraw their consent at any time.
- To exercise their rights, the data subject can contact the customer support of the controller at dataprivacysupport@www.tridentwarriors.org
- To protect their rights, the data subject can file a complaint with the Data Protection Inspectorate.

Final provisions
- These data protection terms and conditions have been prepared in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia and legislation of the Republic of Estonia and the European Union.
- The controller has the right to amend the data protection terms and conditions in part or in full, notifying the data subjects of the amendments via https://www.tridentwarriors.org/privacy-policy/