Privacy Policy

Introduction

Skikeme Ltd. (hereafter referred to as “we”, “us” or “our”), operating as the data controller for Berta’s Village, is dedicated to protecting your privacy and ensuring the secure handling of personal information. We manage personal data relating to our clients, partners, and collaborators transparently and in full compliance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the applicable data protection laws of Cyprus (Law 125(I)/2018). Personal Data refers to any information relating to an identified or identifiable individual (“data subject”).

This Privacy Policy outlines our practices regarding the collection, use, disclosure, transfer, and storage of your personal data. Please review it carefully, and feel free to contact us if you have any questions.

‍

Our Role under Data Protection Law

Under applicable legislation, Skikeme Ltd. is recognized as the Data Controller responsible for the personal data it holds and processes.

As the Data Controller, we collect, retain, and process personal data of our customers and partners where necessary.

In cases where we act as a Data Processor, we process personal data strictly on behalf and instructions of the Data Controller.

‍

Collection of Personal Data

This Privacy Policy applies to data obtained:

  • Directly from you;
  • Through third parties as part of our business operations to provide services requested by you;
  • Via our affiliates, associates, or collaborators.

Furthermore, please note that we maintain a separate Cookie Policy, accessible on our website, which details the use of tracking and analytical technologies.

‍

Categories of Personal Data Collected

We collect various types of personal data concerning individuals we work with, including any data that can directly or indirectly identify a person.

Moreover, this policy applies to personal data collected from tenants of residential units, artists-in-residence, participants of our events, and guests of our restaurant.

Specifically, the categories of personal data we handle may include:

A. For visitors, volunteers, next of kin to residents or patients, and members of the public:

  • Basic identity details (name, address, date of birth);
  • Identification numbers;
  • Contact details (phone numbers, email addresses, etc.);
  • CCTV footage recorded on our premises.

For residents or patients:

  • Personal data disclosed during appointment scheduling;
  • Sensitive health-related data including medical conditions, ethnicity, nationality;
  • Medical reports and notes related to physical and mental health, treatments, and support services;
  • Test results and diagnostic information;
  • Information from other health professionals;
  • Medication details, including side effects and allergies;
  • Feedback on patient experience and treatment outcomes;
  • CCTV footage from our facilities;
  • Financial details relevant to payments.

For employees and collaborators:

  • Basic identity and contact details;
  • Curriculum vitae and professional records;
  • Identification, social insurance, and bank details;
  • CCTV footage from the workplace.

For job applicants:

  • Resumes/CVs and cover letters provided during recruitment.

‍

Purpose of Processing Personal Data

We process your personal data for purposes including but not limited to:

  • Delivering requested services;
  • Managing customer relationships, including maintaining medical records, coordinating rehabilitation and healthcare services, communicating appointment information and payment processing;
  • Ensuring the security and integrity of our services by detecting and preventing fraud and unauthorized activities;
  • Complying with legal and regulatory obligations;
  • Other purposes with your explicit consent.

‍

Disclosure of Personal Data

We share personal data strictly under controlled circumstances with:

  • Medical professionals (doctors, surgeons, physicians);
  • Laboratories and other healthcare institutions;
  • Insurance providers.

We may also disclose data to governmental authorities, courts, or regulatory bodies as required by law, including in response to legal orders or investigations, to protect legal rights, or to ensure security and prevent unlawful activities.

‍

Data Storage

All personal data we collect is securely stored and processed within the European Union.

‍

Data Retention

Personal data is retained for as long as necessary to fulfill the purposes outlined or as required by law. Medical records are retained for a period of 15 years following the last appointment or the patient's passing.

For data processed based on consent, such as contact details, the data will be deleted upon withdrawal of consent. You may revoke consent at any time by contacting us at info@bertasvillage.com.

‍

Legal Grounds for Processing

Our lawful basis for processing personal data includes:

  • Your consent for purposes beyond the provision of services;
  • Performance of contracts with you;
  • Compliance with legal obligations;
  • Protection of vital interests when you are unable to consent;
  • Legitimate interests pursued by us or third parties, balanced against your fundamental rights.

‍

Security Measures

We implement appropriate technical and organizational safeguards to protect your data from unauthorized access, misuse, alteration, or disclosure. Access to personal data is limited to authorized personnel who require it to perform their duties. Employees receive training on data protection and privacy.

‍

Automated Decision-Making

Currently, we do not engage in automated decision-making or profiling.

‍

Your Rights

Under GDPR, you have rights including access to your data, correction of inaccuracies, deletion under certain conditions, restriction of processing, objection to processing, data portability, and protection from automated decision-making.

‍

Policy Updates

We may update this policy periodically. We encourage you to review the latest version available on our website at bertasvillage.com.

‍

Disclaimer

While we strive to protect your data, we do not guarantee uninterrupted or error-free operation. We commit to prompt corrective actions in case of breaches but disclaim liability for incidental damages.

‍

Contact Information

For questions about this policy or your data, contact us at info@bertasvillage.com or at our office at 16 Gladstonos, M. KYPRIANOU HOUSE, Floors 3 & 4, 3032 Limassol, Cyprus.

Complaints can also be filed with the Cyprus Data Protection Commissioner at http://www.dataprotection.gov.cy.