This privacy notice tells you about the information we collect from you when you join our club or make enquiries via our website. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.


Who are we?

We are Calypso Sub-Aqua Club ("CSAC"), a Voluntary organisation registered with the Office of the Commissioner of Voluntary Organisations. You can contact us by email at This email address is being protected from spambots. You need JavaScript enabled to view it. and This email address is being protected from spambots. You need JavaScript enabled to view it..

The club is also affiliated with the British Sub-Aqua Club (BSAC). If you maintain a BSAC membership, you need to read their Privacy Policy which you may find on their website at CSAC acts only as a data processor for BSAC in the case of BSAC membership processing as we do not determine the scope, retention and use of data passed on to BSAC.

We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above.


What personal data do we collect?

When you request to apply for a CSAC Membership, participate in our diving and social activities or when you make an enquiry, you may provide or be requested identification details, scuba diving qualifications and contact information. This information is collected to provide you with a service.

For your own safety to safeguard your own interest, and to meet legal obligations for Diving activities, we request medical self-certification and/or a medical certificate and details of next of kin.

When you pay for your membership via Bank or Paypal, we also collect payment information.

During social or diving events, club officials or attendees may also take photographs capturing the presence of attendees for sharing within club media. Please advise us beforehand if you wish not to be photographed and let photographers know. If such photos are published through the club's media on or, kindly contact us to remove such material immediately.

We do not use any cookies on our website but links on the website may lead you to third party websites which may include such cookies. You need to check the Privacy Policy of such websites individually to understand what they do with this data.

When you visit our website, within the web server access logs we collect your IP address, page visited or requested, date and time, browser and operating system version. 

We retain provided information as follows:

Membership Form Information up to 10 years (due to tax legislation)
Identification for Social Events up to 10 years (due to tax legislation)
Payment Information when a payment is made up to 10 years (due to tax legislation)
Medical Information up to 2 years (or after final legal settlement of any potential claims in respect of the club)
Diving Log Sheets up to 2 years (or after final legal settlement of any potential claims in respect of the club)
Diving Log Slate until transferred to a Diving Log Sheet 
Attendance to Ordinary or Extraordinary General Meetings up to 10 years (due to tax legislation) 


Why do we collect this information?

We will use your information to:

  • be able to provide you with the services normally expected of a diving club
  • organisation of diving and social activities and keep you informed of such activities
  • assist in any diving incident inquiry by law enforcement, the courts or any other relevant authority
  • manage club accounts and audit
  • general administrative matters to maintain your membership

Our website access logs are only collected for tracking visits to our site for statistical and performance optimisation purposes and to assist should any visitor, including you, not be able to access websites.

Your personal information is stored in our online website system and our organisation’s information systems which are based within the European Union. We do not share your information with other entities, and neither we transfer data with organisations that are based outside of the European Union or countries with equivalent Data Protection safeguards unless we inform you. 

We do follow basic security practices in order to secure your personal data as best as we can. Should we identify a breach which might put your data at risk, we will inform you either via a public message or by direct communication.

We do not use the information you provide to make any automated decisions that might affect you.


Your rights over your information

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.

You can also ask us to give you a portable copy of the information you have provided us through electronic means (website membership form) and to stop using your information for a period of time if you believe we are not doing so lawfully.

Where we have no legitimate reason to further hold your data, except your consent for marketing purposes, you can ask us to delete your data.

To submit a request to exercise any of the above rights, please contact us on This email address is being protected from spambots. You need JavaScript enabled to view it. .


Your right to complain

If you have a complaint about our use of your information, you can contact the Information Commissioner’s Office via their website at or write to them at:

Information and Data Protection Commissioner

Level 2, Airways House

High Street

Sliema SLM 1549


Tel: (+356) 2328 7100

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

This Privacy notice has last been updated on the 27th April 2018