Privacy Policy

1. Who the controller is

Harbourline Media Limited is the data controller for enquiries typed on this hostname. Registered office: 18 Strait Street, Valletta VLT 1432, Malta. MBR C 108472. VAT MT 28417592.

Privacy correspondence: [email protected]. General desk: [email protected]. Telephone: +356 2133 8460.

This desk is not Camel Dive Club & Hotel or any other operator named on this site. Visiting https://divingtours.mt does not create a booking.

2. Whose data this covers

This policy applies to readers of the directory, people who open the contact form, and anyone who emails or telephones the addresses published on this hostname. It does not apply to guests of the named houses — we never see a dive log, room booking, or student record.

3. Categories of personal data

Identity and contact data: full name, email address, and telephone number if you type them into the enquiry form or put them in a message.

Correspondence data: the text of your note and any later replies.

Technical data: ordinary server or CDN logs that a host may keep (IP address, user agent, requested path, time). We do not run a first-party analytics product on this release.

Consent data: a single localStorage flag named “divingtours_consent” that records whether you chose “Accept all” or “Necessary only”.

4. How the contact form works

There is no form server in this release. Pressing send opens your own mail application with a pre-filled message to [email protected]. We only receive the enquiry if that message is actually sent, or if you telephone the desk.

We do not operate a CRM, a newsletter list, or a lead-scoring tool. We do not sell, rent, or exchange enquiry data.

5. Lawful bases (GDPR and the Maltese Data Protection Act)

Article 6(1)(b): taking steps at your request before a reply — reading and answering an enquiry you started.

Article 6(1)(a): consent, where you accept a specific processing (for example, asking us to keep a thread open).

Article 6(1)(f): legitimate interests — keeping the site secure, remembering your cookie choice so the banner does not loop, and defending legal claims. We do not use legitimate interests to profile you for advertising.

6. Who else may see data

Your mailbox provider, if you send the pre-filled email.

Our mailbox provider, if a live inbox is later wired to [email protected].

The hosting or CDN operator that serves this HTML (standard request logs only).

The operator sites you choose to open from an outbound link. That processing is under their terms, not a contract in which we sell your data.

Professional advisers or a competent authority if the law requires it. We do not list advertising networks because we do not use them.

7. Retention

Enquiry emails, if received, are kept only as long as needed to reply and keep a short correspondence file — typically up to 24 months — then deleted unless a legal hold applies.

The consent flag divingtours_consent stays in your browser until you clear site data or change the choice from Cookie settings.

Host logs follow the host’s own rotation (often 7–30 days). We do not build a reader dossier from them.

8. International transfers

The directory is drafted under Maltese practice. If you open an operator site hosted outside the EU, that destination may process data under its own rules. That is a transfer you start by clicking out. We do not add overseas processors for advertising.

If a future mailbox or host sits outside Malta, we would expect EU standard contractual clauses plus a transfer assessment.

9. Children

These pages are written for adults. We do not knowingly collect data from anyone under 16. If you believe a child has sent us an enquiry, write to [email protected] and we will delete what we hold.

10. Automated decisions

We do not make solely automated decisions that produce legal or similarly significant effects. There is no credit check, no eligibility engine, and no dive-medical clearance on this hostname.

11. Your rights

You may request access, correction, erasure, restriction, or portability of personal data we hold, and you may object to legitimate-interest processing. You may withdraw consent where we rely on it, without affecting earlier lawful use.

You may complain to the Information and Data Protection Commissioner of Malta (idpc.org.mt) or, if you are in another EEA state, your local supervisory authority. We would rather fix the issue first: write to [email protected].

12. How to complain to us

Send the facts, the URL, and what you want done to [email protected]. We aim to acknowledge within five working days. This is a desk address, not a reservations line.

13. Changes to this policy

The “Last updated” date at the top is the version date. Material changes will be posted on this page. Continued use of divingtours.mt after a posted change is the notice. We will not bury a new advertising programme in a footnote — we do not run one.