PRIVACY POLICY

In compliance with applicable legislation, WorldDepths (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, in accordance with the level of security appropriate to the risk of the data collected.

Legislation included in this Privacy Policy:

This Privacy Policy complies with the General Data Protection Regulation (GDPR) of the European Union and the applicable German data protection and digital services regulations:

• The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
• The German Federal Data Protection Act (BDSG - Bundesdatenschutzgesetz).
• The Digital Services Act (DDG - Digitale-Dienste-Gesetz).

The data controller responsible for the personal data collected on WorldDepths is: Alejandro Ruiz Saldaña (hereinafter, the Data Controller).

Contact details are as follows:

• Address: Neuburger Str. 116, 94036 Passau
• Phone: +49 1575 4244704
• Email: info@worlddepths.com

In accordance with the GDPR and the German Federal Data Protection Act (BDSG), we inform you that the personal data collected by WorldDepths through the forms available on its pages will be processed for the purpose of facilitating, streamlining, and fulfilling the commitments established between WorldDepths and the user, or maintaining the relationship arising from the completion of forms, or responding to requests or inquiries.

In accordance with the GDPR, a record of processing activities shall be maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in Article 30 of the GDPR, unless the exception provided in Article 30(5) applies.

The processing of the user's personal data shall be subject to the following principles, set out in Article 5 of the GDPR and complementary provisions of the German Federal Data Protection Act (BDSG):

• Lawfulness, fairness and transparency: user consent shall always be required, after fully transparent information regarding the purposes of data collection.
• Purpose limitation: personal data shall be collected for specified, explicit and legitimate purposes.
• Data minimization: only data strictly necessary for the intended purposes shall be collected.
• Accuracy: personal data must be accurate and kept up to date.
• Storage limitation: personal data shall be retained only for as long as necessary for the purposes of processing.
• Integrity and confidentiality: data shall be processed in a manner ensuring appropriate security and confidentiality.
• Accountability: the data controller shall be responsible for and able to demonstrate compliance with the above principles.

The categories of personal data processed by WorldDepths are limited to identification data (such as first name, last name, email address, etc.). In no case are special categories of personal data within the meaning of Article 9 of the GDPR processed (such as health data, religious beliefs, or ideology).

The legal basis for the processing of personal data is the user's consent, in accordance with Article 6(1)(a) of the GDPR. WorldDepths undertakes to obtain the user's explicit and verifiable consent for the processing of their personal data for one or more specific purposes.

The user has the right to withdraw their consent at any time. Withdrawal of consent shall be as easy as giving it. As a general rule, withdrawal of consent shall not affect the use of the Website.

Where users are required to provide data through forms for inquiries or requests, they will be clearly informed which fields are mandatory, as they are necessary for the proper handling of the request.

Personal data is collected and processed by WorldDepths for the purpose of facilitating, streamlining, and fulfilling the commitments established between the Website and the user, or maintaining the relationship arising from form submissions, as well as responding to user requests or inquiries.

Additionally, data may be used for commercial, personalization, operational, and statistical purposes, as well as for activities related to the corporate purpose of WorldDepths. It may also be used for data extraction and storage and for marketing analysis in order to adapt content to users and improve the quality, functionality, and navigation of the Website.

At the time of data collection, users will be informed about the specific purposes for which their personal data will be processed.

This Website integrates third-party services to enhance user experience and support platform maintenance:

• Google Analytics: We use cookies to analyze website usage. Data generated is transmitted to Google servers in the United States.
• Google AdSense: We use advertising cookies to display personalized ads. You can manage your preferences in Google’s Privacy Center.
• YouTube: We embed YouTube videos using “enhanced privacy mode,” which prevents YouTube from storing visitor data unless the video is played.
• Social Networks: Share buttons (Facebook, Instagram, X) only transmit data if the user actively interacts with them (click).

Personal data will be retained only for the minimum time necessary for processing purposes and, in any case, no longer than: 24 months or until the user requests deletion.

At the time of data collection, users will be informed of the retention period or the criteria used to determine it.

In accordance with Article 8 of the GDPR, only individuals aged 16 or older may lawfully consent to the processing of their personal data by WorldDepths.

For users under 16, consent from parents or legal guardians is required for lawful processing.

WorldDepths undertakes to adopt the necessary technical and organizational measures, in accordance with the level of security appropriate to the risk of the data collected, in order to ensure data security and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The Website uses an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and encrypted between the server and the user.

However, since WorldDepths cannot guarantee absolute internet security or the absence of unauthorized access by third parties, the Data Controller undertakes to notify users without undue delay in the event of a personal data breach likely to result in a high risk to rights and freedoms.

According to Article 4 of the GDPR, a personal data breach is any breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.

Personal data shall be treated as confidential by the Data Controller, who ensures that confidentiality is respected by employees, collaborators, and any authorized third parties.

The user has the following rights under the GDPR and the German Federal Data Protection Act (BDSG):

• Right of access: to obtain confirmation of whether data is being processed and access to such data.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to request deletion of data when no longer necessary or lawful.
• Right to restriction of processing: to request limitation of processing in legally provided cases.
• Right to data portability: to receive data in a structured, commonly used format.
• Right to object: to object to processing and request its cessation.
• Right not to be subject to automated decision-making: including profiling.

Users may exercise their rights by written request addressed to the Data Controller with reference "GDPR-www.WorldDepths.de". The request must include:

• Name and surname and a valid identity document copy (e.g. passport or official ID).
• Specific reason or requested information.
• Contact address or email.
• Date and signature.

The Website may include hyperlinks to third-party websites not operated by WorldDepths. These websites have their own privacy policies and are solely responsible for their data processing practices.

If the user believes that their personal data rights have been violated, they have the right to lodge a complaint with a supervisory authority.

This applies in particular to the member state of habitual residence, place of work, or alleged infringement. In Germany, the competent authority for WorldDepths (Bavaria) is the Bavarian Data Protection Authority (BayLDA) or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

To improve user experience, this website uses analytics tools. Data processing is carried out based on explicit consent obtained through our cookie management system. Consent can be withdrawn at any time via browser settings or our cookie banner.