The companies responsible for processing your personal data are The Real Live Leisure Company Ltd which operates Oceanarium the Bournemouth Aquarium with registered office at Oceanarium, Pier Approach, Bournemouth, Dorset, BH2 5AA and Parques Reunidos Servicios Centrales, S.A., with registered office at Calle Federico Mompou, 5, Parque Empresarial “Las Tablas”, building 1 – 3 floor, 28050, Madrid, Spain each acting individually as controllers and together as joint controllers ( “we”, “our” or “us”).
If you have any questions about the processing of your personal data or if you would like to ask for relevant parts of the joint controller’s agreement, please contact us at info@oceanarium.co.uk
Personal data means any information about an individual from which that person can be identified. Depending on how you interact with us, we may process the following types of personal data about you. Section III provides details on what personal data will be processed for different types of interactions.
Identity data: first name, surname, date of birth, identification cards (including large family cards), group name and school name and whether you are an Annual Pass holder.
Contact data: billing address, delivery address, email address and telephone number.
Financial data: bank account and payment card details.
Transaction data: ticket locator, date of purchase, type of product purchased and reservation details.
Technical data: IP address, browser type and version, operating system and other browsing and device data collected in accordance with our Cookies Policy.
Profile data: purchase history, interests, preferences and survey responses.
Usage data: information about how you use our website.
Marketing and communications data: your preferences in receiving marketing from us and our affiliates.
We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. To avoid collecting health related personal data, we ask that wherever possible you do not provide personal data alongside information about food allergies and intolerances.
We will process your personal data for the purposes set out below:
i. Management of purchases for products and services
Summary of this section: We process your personal data to complete your ticket purchases, and we rely on the lawful basis of entering into a contract with you for this processing.
Purpose: If you purchase tickets via our online form, we will process your personal data (first name and surname, email address, telephone number, post code, date of birth, method of payment and transactional details of your purchase) to process your purchase and payment of your products and/or services and to email you the purchase confirmation, receipt and ticket. If you have purchased any product or service by using promotions that are subject to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by us. In addition, we may process your personal data to respond to your requests for information, address any incidents or complaints related to your purchased product and/or service, and to contact you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). Such communications may take place via email, SMS or telephone.
Lawfulness basis: the basis for these processing operations is the execution of the agreement entered into with you as a result of your purchase of the relevant product and/or service (purchase terms and conditions). If you do not provide the required personal data, you will not be able to complete your purchase.
ii. Management of bookings for events (birthday parties, weddings, first communions, corporate events etc.)
Summary of this section: We process your personal data to fulfil your event bookings, and we rely on the lawful basis of entering into a contract with you for this processing.
Purpose: If you book and purchase one of our events via our online booking form, we will process your personal data (name, email address, telephone number, whether you or your host are Annual Pass holders, method of payment, personal details included in the payment receipt and transactional details of your booking) to manage your booking, process the payment of your event you wish to arrange, and to email you your booking confirmation, booking receipt and relevant documentation for the celebration of your event. If you have booked your event by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by us. In addition, we may process your personal data to respond to your requests for information,, address any incidents or complaints related to the booking of your event, and to contact you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). Such communications may take place via email, SMS or telephone. If for the purpose of customising your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as we will not process such information on a personalised basis.
Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you for the booked event (terms and conditions of purchase). If you do not provide your personal data, we will not be able to process your booking. If, in order to customize your event (e.g., for decorating the event venue) you voluntarily provide personal data of a child under thirteen (13) years of age , you declare that you are his/her parent or guardian or have parental responsibility in relation to the child, and you give your express and informed consent to process his/her personal data for the above purpose.
iii. Management of bookings for school and group visits
Summary of this section: We process your personal data to fulfil your bookings for school and group visits, and we rely on the lawful basis of entering into a contract with you for this processing.
Purpose: If you book a group or school visit via our online booking form, we will process your personal data (first name, surname, post code, email address, phone number, group or school name, address, city/town, method of payment, personal data included in the payment receipt, and transactional information about your booking) to manage your booking, process your payment of the visit you wish to arrange, and to email you your booking confirmation and all relevant documentation. If at the time of booking your visit you have made use of promotions that are subject to specific conditions, please note that we may ask you to provide us with supporting documentation to confirm your eligibility for these promotions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by us. In addition, we will process your personal data to respond to your requests for information, address any incidents or complaints related to the booking of your event, and to contact you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). Such communications may take place via email, SMS or telephone. If for the purpose of customising your visit (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as we will not process such information on a personalised basis.
Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you related to the visit (terms and conditions of purchase). If you do not provide us with your personal data, we will not be able to process the booking of your visit.
iv. Customer support
Summary of this section: We process your personal data to respond to your customer support queries, and we rely on your consent for this processing.
Purpose: You may send us a query, suggestion or information request through any of the methods available for customer support purposes on our website (by phone, online form or email).When you do so, we will process your personal data and the information contained in your query to deal with and respond to it by any means, including electronic methods (by email or phone). Additionally, during the booking process, we will ask for your date of birth to ensure that you are at least thirteen (13) of age. This is required because pursuant to applicable data protection laws, if you are not over thirteen (13) years of age then we are required to obtain the consent of your parent/guardian to process your personal data. If your query relates to any product, service or event purchased by you, we might also ask you (as part of the customer support process) specific details about your purchase (transactional information, your ticket locator, date of purchase, type of product purchased, etc.) to ensure that your query is addressed properly.
Lawfulness basis: these processing operations will be carried out based on your consent - by submitting a query, suggestion or information request to us, you expressly agree that your personal data may be processed for this purpose. You may withdraw your consent at any time following the procedure described below in the section titled “What are my personal data rights?” of this Privacy Policy.
v. Sending customer satisfaction surveys
Summary of this section: We process your personal data to send you customer satisfaction surveys, and we rely on our legitimate interests for this processing.
Purpose: If you purchase any of our products or services (including any of our events) we will send you surveys by any method, including electronic means (email, SMS, phone calls) intended to gain insights into your degree of customer satisfaction with our products and/or services and your experience, to allow you to make suggestions, and to enable us to conduct market research and analysis (quantitative and qualitative) to determine our positioning in the industry and the likelihood that our customers will purchase our products and/or services again. To fulfil this purpose, we will process your email address or telephone number, and any non-personal information gathered in the surveys to which you have responded.
Lawfulness basis: this processing is based on our legitimate interests in obtaining customer feedback related to the products and services purchased by them, their needs, and suggestions, to determine their likelihood for them to purchase such products and/or services again or other similar products and/or services that we offer related to the leisure and hospitality industries, our Annual Passes, events and activities and our position in the industry to identify areas of improvement of our products and/or services and our customers' experience, and to make internal decisions to plan our business operations and our activities. We believe that your interests and fundamental rights and freedoms not undermined since we carry out this processing as part of our contractual relationship you based on your purchase of our products and/or services. We use personal data and basic, non-sensitive information to the extent strictly necessary. We do not send surveys to individuals under 14, and we only target customers who have recently purchased our products and/or services. As a result, by purchasing our products and/or services and having been specifically informed about the processing of their personal data, our customers should have a reasonable expectation regarding the processing of their personal data for this purpose. Customers may object, at any time, to the processing of their personal data or exercise any other rights under applicable data protection regulations in accordance with the procedure described below in the section titled “What are my personal data rights?” of this Privacy Policy.
vi. Sending you marketing information, discounts and promotions
Summary of this section: We process your personal data to send you marketing communications, which may include targeted information based on profiles we create, and we rely on your consent for this processing.
Purpose: If you expressly authorise us to do so via any of the forms available on this website (e.g. online purchase form, contact or request for information form, event booking form, schools and groups visit booking form, newsletter subscription form etc.), we will process your personal data to send you marketing and commercial information by any means, including electronic methods (email, SMS, phone). This may include information about discounts and promotions relating to products and services offered by any of the UK or European companies of the Parques Reunidos Group (you may find a list of these companies in the section “Who are the UK and European affiliates of the Parques Reunidos Group? ” of this Privacy Policy)related to the leisure or hospitality industries, Annual Passes or events run by any of these companies. To send you this information, we will process your first name, surname, email address and/or your phone number provided by you.
To ensure the quality of your data, we use a two-step verification process. If you agree to the processing of your personal data for this purpose, you will receive an email asking you to confirm your email and that your data can be processed for this purpose.
These communications may be sent based on prior profiling and analysis of your preferences via automated decisions so that we can suggest products and services that we think may be of interest to you. We will perform this profiling using the following sources: information provided directly by you (date of birth/age, country and post code), your purchase history (including whether you are an Annual Pass holder, whether you purchase food and drinks in the park or via our website, and how many junior tickets you purchase from which we may be able to determine if you have children), your survey responses (if you expressly agreed to the use of this personal data for profiling purposes at the time of submitting the survey response), and your reactions to our marketing communications (e.g., your decision or not to purchase the product or service offered).
This profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. This profiling will only be used to send you commercial information, discounts and promotions on products, services, events or activities of the Parques Reunidos Group that we believe may be of interest to you on the basis of the criteria described above.
Lawfulness basis: this processing will only be carried out if you give us your express consent to do so by ticking the box specifically included for this purpose in the forms available on this website (e.g., online purchase form, information request form, group and school visit booking form, newsletter subscription form, etc.). Please note that you may, at any time, withdraw your consent or exercise your rights as provided below in the section titled “What are my data protection rights?” of this Privacy Policy. A process to opt out of all marketing communications is also included in each marketing communication that we send.
If you have expressly authorised us to use the information in the surveys to which you have responded for profiling purposes and send you relevant commercial information, you may also, at any time, exercise your rights and withdraw your consent or exercise your objection rights in accordance with the procedure described below in the section titled “What are my data protection rights?” of this Privacy Policy.
We would also like to remind you that you may object to direct marketing, including related profiling at any time by sending your request to the person in charge of data protection compliance in accordance with the procedure described below in the section titled “What are my personal data rights?” of this Privacy Policy.
vii. Using information collected on surveys as an additional profiling resource
Summary of this section: We process your personal data and the responses collected in the surveys you have responded to as an additional parameter for profiling, which may be used for targeted information we send to you, and we rely on your consent for this processing.
Purpose: If you have expressly given us your consent by any of the forms included on this web site (online purchase form or event, group and school visit booking form), we will process your personal data (e-mail address and telephone number) and any non-personal information collected in the surveys to which you have responded (surveys intended to find out the degree of customer satisfaction with the products and/or services purchased, their experience and to allow customers to make suggestions and enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and whether our customers are likely to purchase our products and/or services again) will be processed as an additional parameter for profiling and for analysing your preferences to ensure that we send you relevant commercial, discounts and promotions information by any means, including electronic means (e-mail, SMS, and telephone calls) about the products and services of any of the European companies of the Parques Reunidos Group (a list of these companies is included in the section "European Companies of the Parques Reunidos Group" in this Privacy Policy) related to the leisure and hospitality industry, Park Passes, events and activities run by these companies consistent with your preferences and as long as you have authorized us to do beforehand.
Your profile will be developed using the following parameters: your history of transactions (type of products and services purchased, whether you are an Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which the Controllers will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), the analysis of your reactions when you receive any commercial communication (i.e. your decision or not to purchase the product or service offered by this commercial communication) and, only with your express permission, the information without personal data that you provide in the surveys you have chosen to respond to.
Please note that based on your profile, automated decision will be made to suggest you commercial information, discounts and promotions of products, services and events that we believe may be of interest to you according to the parameters detailed above. In any case, this profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you.
Lawful basis: we will only process your data if you give us your express permission to do so by ticking the box specifically included for this purpose in the ticket or event online purchase form or in the group and school visit booking form and if you have expressly authorized us to send you commercial information in accordance with the terms specified in this Privacy Policy. Otherwise, this processing will not occur.
If you do not agree that the information provided in surveys may be used as additional criteria for profiling purposes, you may withdraw your consent or exercise your right to object by following the procedure indicated below in the section “What are my personal data rights?” included in this Privacy Policy.
We would also like to remind you that you may also object to profiling based solely on automated decisions, request human intervention, give your point of view, and resolve any queries about and object to automated decisions by sending your request to the Controllers' Person in charge of data protection compliance following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy.
Finally, your data will also automatically ceased to be processed for the purpose described in this section if you ask us to unsubscribe from our commercial communications via any of the methods that will be made available to you on each commercial communication that you receive or through any of the methods described in the section “What are my personal data rights?” in this Privacy Policy.
viii. Use of cookies and related technologies
We use our own cookies, third-parties cookies and similar technologies (HTTP Cookies, Pixel Tracker and Premises and Local Shared) on this website. This means that we may process and store information and personal data about you and your device when you browse this website in accordance with the settings that are made available to you.
For complete information on our use of cookies and similar technologies and the processing of your personal data, please visit our Cookies Policy.
ix. Compliance with legal obligations
Summary of this section: We process your personal data to comply with any legal obligations that apply to us.
Purpose: Your personal data may be processed to allow us to comply with any legal obligations applicable to us as a result of our contractual relationship with you and the processing of your personal data. Such obligations may result from legal obligations relating to tax, personal data protection, commercial, consumer protection, information society services and e-commerce, civil law, and accounting regulations, among others.
Your personal will be processed only to the extent required by us to comply with our applicable legal duties. Such personal data may include: your first name, surname, ID, email, telephone number, post code, country, address, purchase or booking transaction information (location, date, means of payment, proof of payment and reservation details), browsing and device data in accordance with the provisions of the Cookies Policy, criteria, mechanisms and logic used to make automated decisions for profiling purposes, and any other personal data which may have been generated and which we must process to meet our legal duties.
Lawful basis: the basis for this processing is our compliance with applicable legal obligations . Without your personal data, we not be able to adequately comply with our legal duties or discharge any legal liabilities arising from our relationship with you or from the processing of your personal data.
Summary of this section: We only keep your data for as long as it is needed to carry out the purpose for which it was collected (for example, the duration of a contract or event, or as long as it is needed to fulfil a customer support request or to send you commercial offers), or otherwise as required by applicable laws.
If we process your personal data for purposes related to managing purchases of products, services, events, school visits or group visits, , your personal data will be processed for the duration of the contractual relationship created with you. If you have provided information to customise your event (e.g. decoration), we you provide the personal data of a child under thirteen (13) years of age (including his/her name, surname and age), please note that we will only retain such personal data for such time as is necessary to customize your event and until this is finished, unless you decide to withdraw your consent or exercise your right to object to the processing as the child's parent or guardian, in which case we will implement your request.
If we process your personal data for customer support purposes, we will retain your personal data for such time as is strictly necessary to process and fulfill your request. If you submit a complaint, your personal data will be processed for such time as is strictly necessary to properly address your complaint. Thereafter, your personal data will be retained to address any liabilities that may arise from your complaint and only for the applicable statute of limitations period.
If we process your personal to send you customer satisfaction surveys, we will retain your personal data for up to 12 months unless you have a valid request that your personal data be deleted or valid objection to the processing, in which case your personal data will immediately cease to be processed for this purpose.
If we process your personal data for purposes of sending you marketing communications your personal data will be kept until you withdraw your previously given express and informed consent, you send us an unsubscribe request, or you exercise your rights of erasure or objection. In all such cases, your personal data will immediately cease to be processed for this purpose.
When your personal data is no longer relevant for the purposes for which it was collected or if you withdraw your consent or exercise your right of erasure or objection to the processing (in each case where such right is available), we will delete your personal data, unless it is required to be retained on our suppression lists or under legally established retention periods so that it may be made available to audits, regulators or law enforcement during an applicable statute of limitation period. In such case, we will restrict your personal data using technical and organisational measures so that it is not used for any other purpose. Upon expiration of any legally established retention period, we will delete your personal data.
Summary of this section: We may disclose your personal data to regulators, law enforcement, courts, parties involved in litigation or the investigation of wrongdoing, professional advisers, third-party suppliers (when they provide services on our behalf that require access to your personal data), and our affiliates (when you consent to marketing communications).
i. As required by law, to enforce legal rights or to obtain professional advice
If required to meet possible legal liabilities or to comply with statutory retention periods, your personal data may be disclosed to regulators, law enforcement parties or where mandated under a court order in accordance with applicable laws. We also disclose your personal data if it is necessary in connection with a lawsuit, to protect our legal rights, to enforce our agreements with you, or to take action regarding any illegal activity or other wrongdoing. We may also disclose your personal data with our accountants, auditors, lawyers, insurers or similar advisers when we ask them to provide us with professional advice.
ii. To receive services from third-party suppliers
We rely on third party suppliers who may process your personal data to provide services related to the purposes for which your personal data is being processed including information security, customer relationship management (CRM), technology, legal consulting, marketing, customer service, professional services, and IT companies. These providers will only access your personal data to perform their services on our behalf, based on our instructions and without also using your personal data for their own purposes. One of these providers is Salesforce, a global company that provides cloud marketing platform services. If you provide your personal data via any of the forms available on this website (other than the online ticket purchase form), you agree to receive marketing communication, or you agree that the information you provide in any customer satisfaction surveys may be used as additional resource for profiling purposes, Salesforce will process your personal data on our behalf within the UK and the European Economic Area (EEA) and in compliance with applicable data protection regulations. Exceptionally (for example, in the event of a disaster recovery situation in which the process to recover data and functionalities is lost), Salesforce may need to process your data in countries outside the UK and EEA that do not offer a standard of protection commensurate with the level of protection offered by UK and EEA data protection laws (e.g. the USA). In these cases, we have entered into binding contractual commitments with Salesforce which guarantee the implementation of appropriate security measures to ensure that your personal data is at all times processed with an adequate level of protection comparable to that required in the UK and EEA (approved standard contractual clauses , additional security measures in accordance with decision C-311/18 (Schrems II) of the Court of Justice of the European Union, and subject to certification mechanisms). For further information, please do not hesitate to contact the person in charge of data protection compliance at any of the addresses (email) indicated in the section titled “What are my personal data rights?” in this Privacy Policy.
iii. To our affiliates
We disclose your personal data to our affiliates to enable them to send you marketing communications (if you consent), as further described in Section VI below.
If you expressly agree to receive commercial information, and information on discounts and promotions about products and services of the UK and European companies of the Parques Reunidos Group related to the leisure and hospitality industries, Annual Passes, events and activities run by these companies, including subject to prior profiling and analysis of your preferences via automated decisions to ensure that we are able to offer you information on the products and services that we believe may be of more interest to you, you should know that these companies are located in the UK and the European Union and their principal activity is the management and operation of leisure parks, water parks, zoos, aquariums, and travel related services, such as the sale of hotel packages and tickets to parks and leisure centers of the Parques Reunidos Group. Specifically, these companies are:
• Spanish companies of the Parques Reunidos Group: Parques Reunidos Servicios Centrales, S.A. (Parks Pass); Parque de Atracciones Madrid, S.A.U. (Parque de Atracciones Madrid); Madrid Theme Park Management, S.L.U. (Parque Warner y Parque Warner Beach); Gestión Parque de Animales Madrid, S.L.U. (Faunia); Zoos Ibericos, S.A. (Zoo Aquarium Madrid); Parques de la Naturaleza Selwo, S.L. (Selwo Aventura y Hotel Selwo Lodge); Aquópolis Cartaya, S.L.U. (Aquópolis Cartaya); Leisure Parks, S.A. (Aquópolis de Villanueva de la Cañada, Aquópolis Costa Dorada - Vilaseca, Costa Dorada-, Delfinario Costa Dorada – Vilaseca, Costa Dorada, Selwo Marina Aquópolis de Sevilla, Aquópolis de Cullera, Aquópolis de Torrevieja, Teleférico de Benalmádena); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium); Mall Entertainment Centre Murcia, S.L.U. (Nickelodeon Adventure Murcia); Travelpark Viajes, S.L.U. (products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings).
• Rest of UK and European companies of the Parques Reunidos Group: Italia - Parco della Standiana S.R.L (Miraiblandia y Mirabilandia Beach) and Travelparks Italy, S.R.L.( products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings); Norway - Tusenfryd A/S (Tusenfryd) y Bø Sommarland AS (Bo Sommarland); Belgium - Bobbejaanland, B.V.B.A (Bobbejaanland); BonBon-Land A/S (BonBon -Land); Germany - Movie Park Germany GmbH and Movie Park Germany Services GmbH (Movie Park), Event Park GmbH (Belantis), Nature Park Germany GmbH (Vogelpark Walsrode), Tropical Island Management (Tropical Island) and TI Hotel Asset GmbH (Tropical Island Hotels); The Netherlands - Attractie- at Vakantiepark Slagharen B.V. (Slagharen y Slagharen Beach); France - Marineland SAS (Marineland, Aquaplash Marineland, Marineland Resort and Kids Island) and LB Investissement (Aqualud); England- Grant Leisure Group LTD (Blackpool Zoo), Real Live Leisure Company LTD (Oceanarium Bournemouth and Lakes Aquarium) and Lakeside Mall Entertainment Centre Limited (Nickelodeon Adventure-Lakeside).
We may transfer your personal data outside the UK and EEA, including to third-party suppliers (please refer to the disaster recovery circumstances relating to Salesforce in Section V above), and we put adequate safeguards in place to do so. This includes only transferring personal data to countries that have been deemed to provide an adequate level of protection for personal data, or by otherwise using an appropriate safeguard to ensure the ongoing protection of personal data, such as standard contractual clauses approved by the applicable regulatory authority. You may request further information on the safeguards we use by contacting the person in charge of data protection compliance at any of the addresses (email) indicated in the section titled “What are my personal data rights?” in this Privacy Policy.
Summary of this section: You have certain rights available to you, depending on why your personal data is processed. You may seek to exercise your rights by contacting us in accordance with the instructions in this section.
In some circumstances, you may exercise your rights of access, rectification, objection, limited processing, portability and, where appropriate, your right not to be subject to automated individual decisions, including profiling, by sending your request to the attention of the Person in charge of data protection compliance at info@oceanarium.co.uk. We may request a copy of an ID document so that we can verify that you are the data subject of the personal data on which your request is based. For consent-based processing operations, please note that you can seek to withdraw your consent or object at any time to the processing of your data by following the instructions in this section.
If you have expressly authorised us to send you marketing communications, you may also unsubscribe from this type of communications by using the opt-out method included in each marketing communication we send.
Finally, please note that (where applicable) you have the right not to be subject to decisions based exclusively on the automated processing, or ask us for human intervention, express your point of view, raise any queries about or object to automated decisions by sending your request to the person in charge of data protection compliance at any of the addresses indicated in this section.
We respond to all requests we receive from you in accordance with applicable data protection laws. In some cases, we may reject requests for certain reasons (for example, if an exemption under data protection law applies, if the request is unlawful or if it may infringe on the privacy of another individual).
The personal data processed by us are provided directly by you as the data subject through this website and/or during your interactions with us.
If you provide any personal data of third parties, you agree to obtain their express and informed approval to provide their personal data to us in accordance with the provisions described in this Privacy Policy.
Children under thirteen (13) years of age are not authorised to purchase or book our products, services or events on this website.
However, if as a result of purchasing any of our products, services or events available on this website, you voluntarily decide to provide the personal data of a child under thirteen (13) years of age, you will be deemed to have given your express and informed consent as parent or guardian (or otherwise having parental responsibility in relation to the child) for us to process the personal data in accordance with this Privacy Policy.
You may lodge a complaint with the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk), to protect your rights at any time you deem appropriate. However, we advise you to first approach our Person in charge of data protection compliance info@oceanarium.co.uk to seek assistance with your request and to resolve any incident related to the processing of your personal data.
XII.- CAN THIS PRIVACY POLICY CHANGE?
Yes, this Privacy Policy may be updated from time to time. We will make any updates to this page and we will update the “last updated” date at the bottom of this page.
This Privacy Policy was last updated in February 2022