Privacy Policy

Last updated: 1 September, 2025


1. Introduction

At M&M Aquatic Centre LTD operating as The Aquatic Centre in Limassol, Cyprus (“we”, “our”, “us”), your privacy is very important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services, in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.

By using our services, you agree to the practices described in this Privacy Policy.


2. Who We Are

  • Business Name: M&M Aquatic Centre LTD operating as The Aquatic Centre
  • Address: 4 E-D, Georgiou A, Potamos Yermasoyias, Limassol, 4047
  • Email: dive@aquatic-centre.com
  • Phone: +357 25 313 208 We act as the Data Controller for your personal data.


3. What Data We Collect

We may collect the following types of personal data:

  • Identification details: Name, date of birth (for certifications or legal requirements).
  • Contact details: Phone number, email address, home address.
  • Diving-related information: Certification level, medical information relevant to diving safety, emergency contact details.
  • Booking and payment details: Payment information, billing address, booking history.
  • Marketing preferences: Your consent choices for newsletters or promotions.


4. How We Use Your Data

We use your personal data for the following purposes:

  • To process bookings, payments, and provide diving services.
  • To register and process diving certifications with training agencies (PADI).
  • 4 E-D, Georgiou A, Potamos Yermasoyias, Limassol , 4047.   +357 25 313208
  • To ensure your health and safety during diving activities.
  • To communicate with you about your bookings, services, or inquiries.
  • To comply with legal obligations (e.g., insurance, safety records).
  • If you consent: to send you newsletters, promotions, and dive centre updates.


5. Legal Basis for Processing

We process your personal data based on:

  • Contractual necessity – to provide our diving services.
  • Legal obligation – to comply with safety and tax laws.
  • Legitimate interests – to improve our services and ensure safety.
  • Consent – for marketing communications (you may withdraw at any time).


6. Sharing Your Data

We may share your data with:

  • Dive training agencies (PADI) for certification purposes.
  • Insurance providers for coverage purposes.
  • Payment processors and banks (for secure transactions).
  • Government or legal authorities where required by law.

We do not sell or rent your personal data to third parties.


7. Data Retention

We will retain your personal data only for as long as necessary:

  • Booking and transaction records: 7 years (for tax and accounting compliance).
  • Certification and safety records: As required by diving industry standards.
  • Marketing data: Until you withdraw consent.


8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data (where legally possible).
  • Restrict or object to processing.
  • Withdraw consent at any time.
  • Data portability (request a copy of your data in a structured format).

To exercise your rights, please contact us at dive@aquatic-centre.com


9. Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure.


10. Transfers Outside the EU

If your data needs to be transferred outside the EU (for example, to certification agencies based abroad), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.


11. Cookies & Website Use 

https://aquatic-centre.com/cookie-policy-eu/


12. Contact & Complaints

If you have questions or concerns about this Privacy Policy, please contact us at:

  • Email: dive@aquatic-centre.com
  • Phone: +357 25 313 208
  • Address: 4 E-D, Georgiou A, Potamos Yermasoyias, Limassol, 4047

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus): https://www.dataprotection.gov.cy