Privacy statement
Duiken Centraal processes as little personal data as possible. No cookies are placed and visitors aren't profiled. Your browser only stores what the site itself needs to work, such as the most recently fetched current data and, if you follow a dive plan, your follow code. Below, for each part of the site, you can find which data is processed and why.
Data controller
Duiken Centraal is a personal project by Mike Dumont. Questions about this privacy statement or about how your data is processed can be submitted through the contact form on About Duiken Centraal.
Visitor statistics
For visitor statistics, Duiken Centraal uses Google Analytics 4, configured in the most privacy-friendly way that service allows:
- the measurement script places no cookies and stores nothing in your browser;
- your IP address is anonymised;
- ad personalisation, advertising signals and Google Signals are switched off, and no profile is built up about you;
- if your browser has Do Not Track or Global Privacy Control enabled, the measurement script isn't loaded at all.
Because nothing is stored, visitors aren't recognised across visits. What is recorded is limited to data such as the page requested, the time, the general country or region, and the type of device and browser.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) in insight into how the site is used. Because no data is placed on or read from your device, no cookie banner is required for this. Google acts as a processor here; data may be transferred to the United States under the EU-US Data Privacy Framework.
Contact form
If you submit the contact form, your name, email address, chosen subject and message are processed. That data is used solely to read and reply to your message, and for nothing else.
Legal basis: performance of your request and legitimate interest in being able to respond to messages. Submissions are processed via Netlify Forms, the party that hosts this website, and aren't kept for longer than needed to handle your question.
Dive plans
If you create or follow a dive plan, your email address is stored. It is used only for emails about that one dive: a confirmation, a message when the forecast changes or the current forecast comes in, and afterwards an invitation to share how it went. Every email contains a link to unsubscribe immediately.
Other followers don't see your address; the plan only shows how many people are following. An evaluation (visibility, whether the forecast was right and an optional comment) is shown on the plan without a name. The administrator of Duiken Centraal can view the addresses to manage plans, for example to clean up test plans. Your browser remembers your follow code and email address so you don't have to enter them again; that data stays on your own device.
To prevent abuse of the sign-up form, the number of requests from the same IP address is counted per hour. Only an irreversible hash of your IP address is stored for this, and the counter is deleted again after about an hour.
Legal basis: performance of your request to receive updates about the dive (Article 6(1)(b) GDPR). Plans are stored with Netlify and emails are sent via Resend; both act as processors, and data may be transferred to the United States under the EU-US Data Privacy Framework or standard contractual clauses. No later than 30 days after the planned dive, all email addresses and follow codes of the plan are deleted. The evaluations are kept after that, but can then no longer be linked to a person.
Hosting and log files
The website is hosted by Netlify. As with virtually every web server, technical log files are kept, including IP addresses, in order to deliver the site, secure it and detect faults. Legal basis: legitimate interest in a working and secure website.
External services
The forecasts on this site come from Rijkswaterstaat and Open-Meteo. That data is retrieved by Duiken Centraal's servers, not by your browser: so you don't visit those services yourself and your IP address isn't shared with them.
The fonts, however, are loaded directly by your browser from Google Fonts. In doing so, Google sees your IP address. The same applies to the base layer of the maps, which your browser loads from OpenStreetMap; in doing so, the OpenStreetMap Foundation sees your IP address. More about the data sources used can be found on About Duiken Centraal.
Your rights
You have the right to access, correct or have your personal data deleted, and to object to its processing. Because the statistics don't contain data that could identify you, those requests in practice concern your email address for a dive plan and messages you've sent via the contact form.
You can submit a request via the contact form. If we can't resolve it together, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
This privacy statement may be updated when the site or the services used change. The date at the top of this page shows when the text was last updated.