Privacy Policy

1. Introduction

Uniki is an international activity center offering a variety of creative and educational programs for children and adults. Our curriculum is delivered in Russian and embraces diverse cultural backgrounds. We are committed to safeguarding personal data and handling it in compliance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law 125(I)/2018.

This Privacy Policy explains how we collect, use, and protect personal information, and what rights individuals have in relation to their data. It applies to our website www.uniki.cy and to all services we provide.

If you have any questions about how we handle your personal data, you can reach us at: [email protected].

2. What Data We Collect

We may collect and process personal data about students, parents or guardians, staff, suppliers, contractors, partners, and visitors. The categories of data include but are not limited to:

  • Contact details (full name, address, telephone numbers, email).
  • Identification details (passport/ID number, nationality, date of birth).
  • Information relating to students’ academic records, admissions, learning needs, or disciplinary matters.
  • Employment and professional background data.
  • Financial and billing details.
  • Images, audio, and video recordings.
  • Health-related or special category data (only where necessary and permitted by law).

3. Principles of Data Processing

In handling personal data, we adhere to GDPR principles, ensuring:

  • Lawfulness and transparency – data is processed with clear information provided to individuals.
  • Purpose limitation – data is collected only for specific and legitimate purposes.
  • Data minimization – only the information necessary for those purposes is collected.
  • Accuracy and storage limitation – we strive to keep information up to date and retain it only for as long as necessary.
  • Integrity and confidentiality – we apply appropriate measures to keep data secure.

4. How We Collect Data Online

When interacting with our website, we may collect:

  • Name, email, and phone number.
  • Student details (name, date of birth, English language level).

This typically occurs when submitting online forms (pre-registration, registration, or contact forms). Data is stored securely and retained for up to five (5) years or until no longer required.

5. Sharing and Storage of Data

Personal information may be shared with trusted third parties where necessary, such as:

  • Teachers, exam boards, or activity partners.
  • Professional advisors and service providers (e.g., IT, website hosting, communication platforms).
  • Government authorities (e.g., Ministry of Education, Tax Department, Social Insurance).

Data is stored on secure systems, primarily within the European Union. Where data is transferred outside the EU, we ensure adequate protection in line with GDPR.

6. Why We Use Personal Data

We process personal data for purposes including:

  • Admissions, enrollment, and course management.
  • Delivering educational, artistic, and recreational programs.
  • Monitoring progress and providing support services.
  • Managing staff employment, payroll, and HR records.
  • Organizing events, trips, and extracurricular activities.
  • Communicating with parents, students, and the wider community.
  • Meeting legal and regulatory obligations.
  • Promoting our programs through websites, publications, and social media.

7. Rights of Students and Parents

The rights under GDPR apply directly to the individual whose data is processed. In the case of minors, parental or guardian consent is often required. By engaging with our services, you consent to the use of your data in line with this policy, including necessary sharing with teachers and peers.

Parents and guardians will be kept informed of a student’s progress and activities unless there is a compelling reason not to share such information.

8. Fundraising and Communication

We may reach out to individuals, companies, or foundations for fundraising or sponsorship opportunities. Publicly available information (e.g., from social media or professional networks) may be reviewed to tailor communication, but we do not use external profiling companies.

9. Data Protection Roles

  • Data Controller – The designated representative at Uniki responsible for determining how personal data is managed and protected.
  • Data Protection Officer (DPO) – Oversees compliance with GDPR and ensures data is processed lawfully and securely. The DPO can be contacted at [email protected].

10. Your Rights

Under GDPR, you have the following rights:

  • Access your data and request a copy.
  • Request correction or deletion of your data.
  • Restrict or object to certain processing activities.
  • Withdraw consent where previously given.
  • Request transfer of your data to another organization.

File a complaint with the Commissioner for Personal Data Protection in Cyprus if you believe your rights are not respected.

11. Cookies

Our website uses cookies to enhance user experience and analyze traffic. Cookies may include:

  • Session cookies (necessary for site functionality).
  • Google Analytics cookies (for traffic statistics).

You can disable cookies in your browser, but this may limit certain website functions. Cookie consent is valid for up to 13 months.

12. Data Retention

We retain personal data only as long as necessary to fulfill the purpose for which it was collected, or as required by law. Specific retention timelines are defined in our internal policy.

13. Updates to this Policy

This Privacy Policy may be updated from time to time to reflect changes in legislation or our operations. The latest version will always be available on our website.