Privacy Policy
Last Updated: 01 May 2026
CardiaPro (“we”, “our”, or “the Clinic”) is committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable laws of the Republic of Cyprus.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or use our medical services.
1. Who We Are
CardiaPro
2 Filiou Zannetou Street
Limassol 3021
Cyprus
Email: cardiapro@cytanet.com.cy
Telephone: +357 25551222
If you have any questions regarding this Privacy Policy or your personal data, please contact us using the details above.
2. Information We Collect
Depending on how you interact with us, we may collect:
- Your name
- Telephone number
- Email address
- Information provided when requesting an appointment
- Technical information such as IP address, browser type, device information and website usage (through cookies where applicable)
3. Why We Process Your Personal Data
We process your personal data to:
- Schedule and manage appointments
- Provide medical consultations and healthcare services
- Respond to enquiries
- Maintain patient records as required by law
- Improve our website and services
- Comply with legal and regulatory obligations
4. Legal Basis for Processing
We process your personal data under one or more of the following legal bases:
- Performance of a contract (providing healthcare services)
- Compliance with legal obligations
- Your explicit consent where required
- Legitimate interests, where appropriate
- Processing of health data for the provision of healthcare in accordance with Article 9 GDPR
5. Sharing Your Information
We may share your information only when necessary with:
- Medical laboratories
- Diagnostic centres
- Healthcare professionals involved in your care
- IT service providers
- Government or regulatory authorities where required by law
- We never sell your personal data.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction.
7. Data Retention
We retain personal data only for as long as necessary to provide healthcare services and to comply with applicable legal and regulatory requirements.
Medical records may be retained for periods required under applicable healthcare legislation.
8. Your Rights
Under GDPR, you may have the right to:
- Access your personal data
- Request correction of inaccurate information
- Request deletion where legally applicable
- Restrict processing
- Withdraw consent where processing is based on consent
Some rights may be limited where healthcare or legal obligations require us to retain information.
9. Cookies
Our website may use cookies to improve user experience and analyse website traffic.
Where required by law, we will request your consent before placing non-essential cookies.
Please refer to our Cookie Policy for further information.
10. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.
11. Changes to this Policy
We may update this Privacy Policy from time to time. Any updates will be published on this page with a revised Last Updated date.
12. Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your GDPR rights, please contact us using the details below:
CardiaPro
2 Filiou Zannetou Street
Limassol 3021, Cyprus
Email: cardiapro@cytanet.com.cy
Telephone: +357 25551222
If you believe your personal data has been processed unlawfully, you also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.