Privacy Policy
Who are we?
SNUBA® Bonaire is the first and only SNUBA® Recreational Center on Bonaire. We are the data controller for all personal data collected through snubabonaire.com.
GDPR applicability: Bonaire falls under the WbpBES (Dutch BES privacy law), but we treat our entire website as GDPR-compliant — because our main audience is EU visitors, our booking system (Bokun) is EU-based and GDPR-compliant, and Google Analytics processes EU personal data.
What data do we collect?
- Contact details: name, email address, phone number (via contact form or booking).
- Booking data: names, ages, payment details — processed by Bokun. We do not store full payment details.
- Medical information: answers to the mandatory pre-dive medical questionnaire (special category data under GDPR Art. 9).
- Usage data: IP address, browser type, pages visited, timestamps — via Google Analytics 4 with IP anonymisation enabled.
- Communications: content of emails and WhatsApp messages.
Legal bases & retention
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Booking processing | Performance of contract — Art. 6(1)(b) | 7 years |
| Medical questionnaire | Vital interests + explicit consent — Art. 9(2)(a) | 6 months after activity |
| Contact form | Legitimate interests / consent | Max. 2 years |
| Analytics (cookies) | Consent via cookie banner | 26 months |
Medical questionnaire — special category data
Before participating in a SNUBA® dive, every guest completes a medical questionnaire. This is a safety requirement of SNUBA® International. This data constitutes health data under GDPR Art. 9 and is processed as follows:
- Only with explicit consent (or written parental/guardian consent for minors).
- Solely to assess whether participation is medically safe.
- By certified SNUBA® guides bound by strict confidentiality.
Retention: Medical questionnaires are retained for a maximum of 6 months after the activity and are then securely destroyed.
Third parties
| Party | Purpose | More info |
|---|---|---|
| Bokun | Booking & payment processing — GDPR-compliant | bokun.io/privacy-policy |
| Google LLC | Anonymised analytics with IP anonymisation (GA4) | policies.google.com/privacy |
| TransIP | Website hosting on servers in the Netherlands | — |
| Emergency services | We may be required to share data in case of an incident | — |
We do not sell personal data. No profiling or automated decision-making takes place.
Cookies
We use cookies to improve your visit and to analyse our website. Functional cookies are always active. Analytical cookies (Google Analytics 4) are only placed with your consent via our cookie banner.
| Cookie type | Purpose | Consent required |
|---|---|---|
| Functional | Website functionality (sessions, forms) | No — always active |
| Analytical (GA4) | Anonymous visitor statistics with IP anonymisation | Yes — via cookie banner |
We use Complianz Privacy Suite (or Cookie Notice & Compliance for GDPR) for cookie consent management — both available via the WordPress plugin directory.
Your rights
Under GDPR you have the following rights regarding your personal data:
Access
Right to know what data we process about you.
Rectification
Right to have incorrect data corrected.
Erasure
Right to have your data deleted (“right to be forgotten”).
Restriction
Right to restrict processing in certain situations.
Portability
Right to receive your data in a structured format.
Objection
Right to object to processing based on legitimate interests.
Withdraw consent
Right to withdraw consent at any time.
Submit requests to info@snubabonaire.com — we respond within 30 days. You can also lodge a complaint with the Dutch Data Protection Authority (AP).
Security
We take appropriate technical and organisational measures to protect your personal data: