Effective date: 19/11/2025
Last Updated: 19/11/2025
1. Introduction & Scope of Application
DITAION Medical Diagnostic Center (“we”, “us”, “our”, “owned”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website, contact us or apply for a job.
The policy applies to all personal data processing activities carried out by us in Cyprus where theGeneral Data Protection Regulation (GDPR) applies.
2. Processing Manager & Contact Details
Responsible for Processing:
DIKTAION Medical Diagnostic Center
Address. Strovolou Avenue, 2048, Nicosia, Cyprus
Phone: 22 32 52 52
Email:[email protected]
For any query or request regarding your personal data, you can contact us at the above details.
3. Legal Basis for Processing
We only process personal data where there is a lawful basis, such as:
- Consent – when you provide us with explicit consent (e.g. job application, informational emails).
- Performance of a contract or pre-contractual activities – where the processing is necessary to fulfil a request or cooperation.
- Legitimate interest – to improve our services, website security or customer communication, unless your rights are overridden.
- Legal obligation – when required by law or authorities.
4. Categories of Personal Data
Depending on your relationship with us, we may collect:
- Identity & contact details: first name, last name, address, email, phone number.
- Job application data: CV, cover letter, qualifications, experience, references.
- Technical & online data: IP address, browser, cookies, location data, usage logs.
- Contact data: messages, comments, questions, email correspondence.
- Other data: anything you choose to provide to us through forms or documents.
We do not collect sensitive data (e.g. political opinions) unless required or provided with explicit consent.
5. Purposes of Processing
We use your personal data to:
- Serving requests or questions you send us.
- Management of employment applications and recruitment procedures.
- Information about news, services or events (only with consent).
- Management, security and optimization of our website.
- Compliance with legal or regulatory obligations.
- Internal controls, fraud or abuse prevention.
We do not use your data for purposes incompatible with the above without prior notification or consent.
6. Recipients & Third Parties
We can share data:
- To authorised members of our staff.
- To processors (e.g. hosting, email, analytics providers), with contracts that ensure compliance with GDPR.
- To affiliated companies or subsidiaries, where appropriate.
- To legal/regulatory authorities or courts when we are required by law.
- To purchasers or successors in the event of a merger or transfer, subject to confidentiality conditions.
7. Conservation & Deletion of Data
Your personal data is kept only for as long as necessary for the purposes for which it was collected or as required by law:
- Employment applications: up to 12 months from the date of submission, unless new consent is given or a recruitment process is underway.
- Contact forms: deleted after the request is completed, unless further retention is required.
- Technical & statistical data: deleted or anonymised at regular intervals (e.g. 12-24 months).
At the end of the period, the data is securely deleted or permanently anonymised.
8. Transfers to Third Countries
If your data is stored or processed outside the European Economic Area (EEA), we ensure that appropriate measures are in place, such as:
- European Commission Standard Contractual Clauses (SCCs),
- or other approved transport and protection mechanisms.
You will be informed if there is such a transmission.
9. Cookies & Similar Technologies
Our website uses cookies and related technologies to:
- improving the user experience,
- the collection of statistical data,
- traffic and functionality analysis.
We distinguish between necessary cookies (functional) and non-essential cookies (analytical, advertising).
Non-essentials are only used with your explicit consent via a banner.
You can withdraw your consent at any time through your browser settings.
10. Automated Decision Making
We do not use automated decision making or profiling that produces legitimate outcomes for you (e.g. automatic rejection of a request).
If this changes, we will update the Privacy Policy accordingly.
11. Data Security
We take all appropriate technical and organizational measures to ensure the security of your data, such as:
- Data encryption during transport and storage,
- Access control and restriction of rights,
- Regular security checks,
- Staff training and confidentiality commitments.
12. Management of Infringement Incidents
In case of a personal data breach:
- We will inform the Data Protection Commissioner within 72 hours if there is a risk to the rights of data subjects.
- We will inform the affected persons without delay when required.
- We will keep a record of violations and take corrective action.
13. Rights of Data Subjects
Under the GDPR and Law 125(I)/2018, you have the following rights:
- Access: get a copy of your data.
- Correction: to correct inaccurate or incomplete data.
- Erasure (“right to be forgotten”): to request the deletion of data.
- Restriction of processing: request the restriction of use.
- Opposition: to object to processing based on legitimate interest or direct promotion.
- Portability: get your data in a readable format.
- Withdrawal of consent: where the processing is based on it.
- File a complaint with the Data Protection Commissioner (www.dataprotection.gov.cy).
Requests are granted within one (1) month, with the possibility of an extension of up to two (2) months for complex cases.
14. Minors
Our website is not directed to children under the age of 13.
We do not knowingly collect data of minors without the consent of a parent or guardian.
15. Links to Third Party Websites
Our website may contain links to external websites or services (e.g. social networks). We are not responsible for their privacy policies and recommend that you read them carefully.
16. Privacy Policy Updates
This Policy may be amended from time to time.
The updated version will be posted on this page and will have an updated date.
Important changes will also be notified by email or by a notice.
17. Applicable Law
The Privacy Policy is governed by the Law of the Republic of Cyprus and the Law of the European Union (GDPR).
Any dispute shall be subject to the exclusive jurisdiction of the Cyprus Courts.
Special Information for Job Candidates
We collect your contact information and CV when you apply for employment.
This data is used exclusively for the evaluation of applications and is kept for up to 12 months from the date of submission, unless you request its deletion earlier or provide new consent.
You can exercise your rights at any time by contacting us.
📩 Contact:
For any matter relating to the protection of your personal data:
DIKTAION Medical Diagnostic Center
Email: [email protected]
Phone: 22 32 52 52
Address. Strovolou Avenue, 2048, Nicosia, Cyprus