Legal
Privacy Policy
This Privacy Policy explains how Royal Artemis Hospital collects, uses and protects your personal data, in line with the EU General Data Protection Regulation (GDPR) and applicable Cyprus law.
Who we are
Royal Artemis Clinic LTD (“Royal Artemis Hospital”), 2 Pavlou Crinaiou Street, 8035 Paphos, Cyprus, is the data controller responsible for your personal data. For any data protection enquiry you can contact us at patientrights@royalhospital.eu.
Information we collect
- Identity and contact details (name, phone, email, address)
- Appointment and enquiry details you submit through our website
- Health information necessary to provide care (special category data)
- Insurance and payment information where relevant
- Website usage data and cookies
How we use your data and lawful basis
We process personal data to provide healthcare services and manage appointments (necessary for the provision of healthcare under Article 9(2)(h) GDPR), to respond to enquiries (legitimate interest), to meet legal and regulatory obligations, and, where required, on the basis of your consent.
Sharing your data
We may share data with treating clinicians, the General Healthcare System (GeSY), insurers, laboratories and trusted service providers who support our operations, and with public authorities where required by law. We do not sell your personal data.
Data retention
We retain personal and medical data for the periods required by Cyprus healthcare legislation and professional obligations, after which it is securely deleted or anonymised.
Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
Cookies
Our website uses cookies as described in our Cookie Policy.
Contact
For any privacy enquiry or to exercise your rights, contact patientrights@royalhospital.eu or call +357 26 961 600.