Privacy policy

This page explains what data we collect on this website, what we use it for and what rights you have. In short: we use no tracking, no advertising cookies and load no content from third-party servers. We only store data when you send us a request.

1. Controller

Escuela de buceo Merlin SRL (Divecenter Merlin)
Jürgen Rumpenhorst
La Mulata
Villas Karibik, Casa 4
57000 Sosúa
Puerto Plata, Dominican Republic

Phone: +1 809 545 0538
Email for privacy questions: info@divecenter-merlin.com

2. Hosting and server logs

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. Each time a page is accessed, the server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the referring page. These logs serve security and stable operation and are deleted after a short time. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with STRATO.

Fonts and images are stored on our own server. No services such as Google Fonts, Google Analytics, Facebook Pixel, or embedded maps and videos are loaded.

3. Cookies

We use only one technically necessary cookie (“PHPSESSID”), and only on the Book page. It protects the form against abuse and shows you the confirmation after you submit it. It contains no personal details and is deleted when you close your browser. Technically necessary cookies do not require consent (Section 25(2) TDDDG, Art. 6(1)(f) GDPR), which is why this website has no cookie banner.

4. Booking requests via the form

When you send us a request via the form, we process the details you enter: name, email, phone/WhatsApp (optional), requested activity, date, number of people, pick-up and hotel, diving certification and your message. We use this data solely to answer your request and carry out your booking.

The request is stored in our database at STRATO in Germany. Our team receives an email notification, and you receive a confirmation at your email address. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by email.

To protect against spam, we store an irreversible, encrypted check value of your IP address for no more than 24 hours. We do not store the IP address itself.

Requests are deleted automatically no later than 24 months after receipt, or earlier on request, unless statutory retention obligations apply.

5. Contact by email, phone and WhatsApp

If you contact us by email, phone or WhatsApp, we process your details to answer your enquiry (Art. 6(1)(b) and (f) GDPR).

WhatsApp is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, a Meta company. Data may also be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework. The chat window on this website does not transmit anything itself: WhatsApp only opens with your message when you click “Send”. If you enter a phone number in the form, we may reply via WhatsApp. If you prefer not, just say so in your message.

6. Links to other services

Facebook, Instagram, Tripadvisor, Google Maps and Kayak are included on this website as plain links only. No data is transferred to these providers unless you click the link. After that, the respective provider’s privacy policy applies.

7. Processing in the Dominican Republic

Our team is based in the Dominican Republic and handles your request from there. There is no EU adequacy decision for the Dominican Republic. The transfer is necessary to handle your request and carry out your booking (Art. 49(1)(b) GDPR). The Dominican data protection law Ley 172-13 also applies.

8. Your rights

You have the right to access your stored data, to rectification, erasure, restriction of processing and data portability, the right to object to processing and to withdraw consent at any time. Just write to us at info@divecenter-merlin.com.

You may also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live.

Last updated: October 2026