Last updated: 17 August 2026
Data controller
The controller responsible for the personal data collected through this website is I.R.T.D.A. d.o.o. (Correct Diving), Brzac 33, 51500 Krk, Croatia. For any questions about the processing and protection of your personal data, you can contact us at kontakt@correct-diving.com or at +385 51 869 148.
What data we collect
We collect data only when you provide it to us yourself, through the registration form on the /en/registracija-en/ page. Depending on the role you choose (Guest, Group Leader or Tour Operator), we collect the following data:
- first and last name
- email address
- phone number
- address, postal code, city and country
- company/school name and its contact number (only for the Group Leader and Tour Operator roles)
- a short message/reason for registering, if you enter one (optional)
There are currently no other forms on the site that collect personal data (e.g. an online booking form) — for bookings and inquiries you still contact us directly by email or phone, and that communication takes place outside this website. If we add an online booking form to the site in the future, this privacy policy will be updated beforehand.
Why we collect this data
We use the data from the registration form solely to:
- review your application and approve or deny access to protected documents intended for your role (e.g. materials for instructors/schools or tour operators),
- contact you regarding your registration (confirmation of receipt, approval, or rejection with a reason),
- enable you, once approved, to log in and access the “My documents” page.
The legal basis for this processing is your consent, given by submitting the form (registration is entirely voluntary), and our legitimate interest in making documents intended for specific roles (e.g. internal materials for partners) available only to verified, approved users.
Who we share your data with
We do not sell or pass on your data to third parties for marketing purposes. Data from the registration form is sent by email to the site owner/administrator (at kontakt@correct-diving.com) to process the application, and is stored in this website’s database. The site does not use third-party analytics or advertising tools (e.g. Google Analytics, Facebook Pixel or similar), so your data is not shared with such services.
Protected documents
Documents available to approved users are stored outside the publicly accessible part of the server and can only be downloaded by logged-in users whose registration has been approved and whose role grants access to that particular document. File downloads go through a protected link that checks your login, approval status, and role on every access.
Cookies
This site uses only technically necessary cookies set by the WordPress system when you log in: a cookie confirming that your browser has accepted cookies (temporary, deleted when you close your browser), cookies that remember your login (lasting two days, or two weeks if you choose the “Remember me” option) and your display settings (lasting one year). These cookies contain no personal data and are only set for logged-in users — visitors who don’t use the login/registration form receive no cookies from this site. The site does not use cookies for analytics or advertising.
How long we keep your data
We keep the data from approved or rejected registrations for as long as you have an active user account on the site, or until you request its deletion. If your registration is rejected, we keep your data only for as long as necessary for record-keeping of processed applications, after which you may request its deletion at any time.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- request access to the personal data we hold about you,
- request correction of inaccurate or incomplete data,
- request deletion of your data and user account,
- request restriction of processing or object to processing,
- request transfer of your data in a machine-readable format,
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
You can send your request to kontakt@correct-diving.com. If you believe the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Data security
The site is served exclusively over an encrypted HTTPS connection. Access to protected documents is restricted to logged-in, approved users according to their assigned role, and the files themselves are not directly accessible via a public link.
Minors
The registration form is not intended for minors without the consent of a parent or guardian. If we learn that we have collected the data of a minor without appropriate consent, we will delete that data.
Changes to this privacy policy
We may update this privacy policy from time to time, for example when we add new site functionality that collects data. The date of the last update is shown at the top of this page.