Privacy Policy
This policy explains how we process personal data of visitors of seabobtours.com and of our guests. Where the EU General Data Protection Regulation (GDPR) applies to you, we follow it.
1. Who we are
The controller of your personal data is Seabob Tours Aruba, L.G. Smith Blvd 135, Noord, Aruba. E-mail info@seabobtours.com, phone +297 597 7828.
2. What data we process and why
- Enquiries by e-mail or phone — name, e-mail, phone and the content of your message, to answer you and arrange a tour (steps prior to a contract at your request / our legitimate interest to respond). Kept for up to 2 years.
- Tour bookings — online bookings are made in the FareHarbor booking system (book now), which processes your booking and payment details on our behalf; we receive the details needed to run your tour (name, contact, date, number of participants, health or safety information you choose to provide). Legal basis: performance of a contract and legal obligations (accounting). Kept as long as required by law.
- Technical data and cookies — server logs (IP address, time, requested page) kept for up to 30 days for security, and browser storage remembering that you closed the cookie notice. Legal basis: legitimate interest in a secure, working website.
We do not use analytics or advertising cookies. The map on the Contact page is provided by Mapy.cz (Seznam.cz, a.s.); the booking system and social media links (Facebook, Instagram, X) open third-party services governed by their own privacy policies.
3. Who receives your data
Only providers that help us run the website, e-mail and bookings (hosting in the EU, FareHarbor), our accountants and public authorities where the law requires it. We do not sell your personal data.
4. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, contact us at the details above. If the GDPR applies to you, you may also lodge a complaint with the data protection authority of your EU country of residence.
5. Automated decision-making
We do not use automated decision-making or profiling.
6. Security
The website is served over encrypted HTTPS from servers in the EU. Access to personal data is limited to authorised persons bound by confidentiality.
7. Children
Bookings are made by adults. We do not knowingly collect personal data from children under 16; data of minors taking part in a tour is provided by their parent or guardian.
8. Changes to this policy
We may update this policy; the current version is always published on this page. Last update: October 22, 2026.