Privacy Policy

Last updated: May 2026

1. Preamble and Identity of the Data Controller

La Sirène Diving Club, an establishment located in Djerba, Tunisia, attaches paramount importance to the protection of your personal data. This Privacy Policy informs you about how we collect, use, store, and protect your information, in accordance with current Tunisian legislation (Organic Law No. 2004-63 of July 27, 2004 on the protection of personal data) as well as international regulations applicable to our foreign clients, particularly the General Data Protection Regulation (GDPR) of the European Union.

Data Controller

2. Personal Data Collected

As part of our scuba diving activities and club management, we collect the following categories of data:

2.1 Identification and Contact Data

• Name, first name, date and place of birth
• Nationality and country of residence
• Passport number or identity document (required by Tunisian regulations)
• Postal address, email address, phone number
• Photograph (for membership card or diving log)

2.2 Medical and Security Data

This sensitive data is collected exclusively for security purposes and is treated with enhanced confidentiality:

• Medical certificate of fitness for scuba diving
• Blood type and known allergies
• Current medical treatments that may affect diving practice
• Emergency contact information
• Diving certification level (PADI, SSI, CMAS, etc.) and license number

2.3 Commercial and Payment Data

• History of booked services (baptisms, training, outings, equipment rental)
• Payment data (processed via PCI-DSS certified secure providers — we do not store credit card numbers)
• Preferences and history of dives carried out

3. Processing Purposes

Your data is processed for the following purposes:

4. Data Recipients

Your personal data may be communicated to the following recipients, strictly within the limits of the purposes described above:

• The instructors and trainers of Club La Sirène, as part of your supervision
• Diving certification organizations (PADI, SSI, CMAS, FFESSM, etc.) for the issuance of your certifications
• Secure payment providers, strictly within the framework of transaction processing
• Competent Tunisian authorities (Maritime National Guard, Ministry of Tourism) in accordance with legal obligations
• Emergency and medical rescue services, in case of absolute necessity
• Our insurers, within the framework of civil liability coverage

We do not sell, rent, or transfer your personal data to third parties for commercial purposes.

5. International Data Transfers

Given our international clientele, some data transfers outside Tunisia may be necessary (for example, when transmitting certifications to international organizations). These transfers are governed by appropriate guarantees in accordance with Tunisian law No. 2004-63 and, for European Union nationals, the GDPR (Articles 44 to 49).

For clients residing in the European Union, we commit to respecting your rights as defined by the GDPR, particularly regarding transfers to third countries.

6. Your Rights Regarding Your Personal Data

In accordance with applicable legislation, you have the following rights:

• Right of access: You may obtain a copy of all personal data we hold about you.
• Right to rectification: You may request the correction of inaccurate or incomplete data.
• Right to erasure: You may request the deletion of your data, subject to our legal retention obligations.
• Right to object: You may object to the processing of your data for commercial prospecting purposes.
• Right to data portability (EU clients): You may receive your data in a structured, machine-readable format.
• Right to withdraw consent: You may withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at: contact@lasirenedjerba.com. We commit to responding within 30 days.

7. Data Security

La Sirène Club implements appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive data stored and transmitted
• Restriction of data access to authorized personnel only
• Regular backup procedures
• A secure access and password management policy
• Regular awareness training for our staff on data protection

8. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve your browsing experience, analyze traffic, and personalize our content. You can configure your browser to refuse cookies, which may affect certain features of the site. A cookie management banner allows you to express your preferences during your first visit.

9. Protection of Minors

Minors under 18 years of age must obtain written authorization from a parent or legal guardian to participate in our activities. Minor data is subject to enhanced protection and is processed only with the express consent of the legal representative. This data is never used for commercial purposes.

10. Modifications to this Policy

We reserve the right to modify this Privacy Policy to maintain compliance with legal and regulatory developments as well as our internal practices. Any substantial modification will be brought to your attention by email or by a visible notice on our website before it comes into effect.

11. Contact and Data Protection Officer

For any questions regarding this policy or to exercise your rights, you can contact us:

•  Email: contact@sirene-plongee.com
•  Mail: La Sirène, BP 561 Houmt Souk 4180, Djerba, Tunisia
•  Phone: +216 98 423 718