Depending on how you interact with us, we may collect and process the following categories of personal data:

• Identification Data, such as full name, and where applicable, membership identification photographs.
• Contact Data, such as email address and telephone number.
• Booking and Transaction Data, relating to ticket purchases, memberships and event or group bookings.
• Communication Data, including information provided in enquiries, feedback or correspondence with us.
• Website Usage Data, such as technical information collected when you visit our website, including device information, IP address and browsing activity.
• Security Data, images and video recordings captured through CCTV systems operating within FWW’s premises.

Personal data processed by FWW may relate to visitors, ticket purchasers, membership holders, event or group booking organisers, website users, and individuals who contact FWW for enquiries or customer support.

Certain services provided by FWW (such as memberships or birthday party bookings) may involve personal data relating to minors. In such cases, personal data is provided by the parent or legal guardian, who acts on behalf of the child and is responsible for providing the relevant information and any required authorisations.

We may collect personal data when you:
• purchase tickets or memberships
• complete booking forms (including birthday bookings)
• submit enquiries through our website
• subscribe to newsletters or marketing communications
• communicate with us by email or phone
• browse our website

From time to time, independent photographers may operate within FWW’s premises and offer visitors the opportunity to purchase souvenir photographs taken during their visit.

These photography services are provided by independent operators who act as separate data controllers and are responsible for the collection and processing of any personal data (including images) in connection with those services.

FWW does not determine the purposes or means of processing of such photographs and is not responsible for the processing activities carried out by these independent operators. Visitors who wish to obtain further information regarding the processing of their personal data in relation to such photography services should contact the relevant photographer directly.

We process personal data for the following purposes and legal bases:

Purpose	Legal Basis
Managing memberships and visitor services	Performance of a contract
Administering bookings	Performance of a contract
Processing ticket purchases	Performance of a contract
Customer communication	Legitimate interest
Website operation & improvement	Legitimate interest
Marketing communications	Consent
Legal compliance	Legal obligation
CCTV & safety monitoring	Legitimate interest

If you have provided your consent, we may send you marketing communications regarding:
• promotions
• special offers
• events
• news about Fasouri Watermania Waterpark

You may withdraw your consent at any time by:
• clicking the unsubscribe link in marketing emails, or
• contacting us at [email protected]
Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:
• service providers assisting with our operations (such as IT providers, website developers, hosting providers and booking or ticketing systems)
• payment service providers and financial institutions processing payments
• professional advisors such as auditors, lawyers or consultants where required for legal, accounting or compliance purposes
• competent public authorities, regulators or law enforcement bodies where disclosure is required by law
All service providers processing personal data on behalf of FWW are bound by contractual obligations and are required to process personal data only on documented instructions and in accordance with applicable data protection laws.

Personal data is generally processed within the European Economic Area (EEA). Where transfers outside the EEA are necessary, we ensure appropriate safeguards are implemented in accordance with the GDPR, including:
• adequacy decisions by the European Commission
• Standard Contractual Clauses
• other legally recognised safeguards.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
After the applicable retention period expires, personal data is securely deleted or anonymised.

FWW implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These measures include, but are not limited to:
• restricted access to personal data
• secure IT systems
• internal confidentiality obligations
• access control procedures
• monitoring, logging and security safeguards.

Under GDPR, you have the following rights regarding your personal data:
• Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of personal data where it is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You may request restriction of processing in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests and to processing for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your personal data in a structured, commonly used and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
• Right to Lodge a Complaint: If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority.

In Cyprus, the supervisory authority is:
Office of the Commissioner for Personal Data Protection
Website:
www.dataprotection.gov.cy
Address:
Iasonos 1, 1082 Nicosia, Cyprus

We would, however, appreciate the opportunity to address your concerns before you contact the supervisory authority. Please contact us in the first instance at [email protected].

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our processing practices.
The most recent version will always be published on our website.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Fasouri Watermania Waterpark
P.O. Box 56958 3311 Limassol, Cyprus
Tel: +357 25 714235
Email: [email protected]