BRIDGE VISION GROUP

PRIVACY POLICY

Operated by Serlands Ltd  |  Last Updated: June 2026

 

Your privacy matters to us.

This Privacy Policy explains how Serlands Ltd, operating as The Bridge Vision Group (“BVG”, “we”, “us”, “our”), collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Processing of Personal Data (Protection of Individuals) Law of 2018 of the Republic of Cyprus (Law 125(I)/2018).

 

Please read this policy carefully. By using our website, submitting a membership application, signing the Services Agreement, or participating in BVG activities, you confirm that you have read and understood this policy.

 

1.  Who We Are — The Data Controller

​

The Data Controller responsible for your personal data is:

​

Legal Entity: Serlands Ltd

Trading as: The Bridge Vision Group (BVG)

Registration Number: HE 453750

Registered Address: Riga Feraiou 4, 4th Floor, Flat/Office 42, 3095, Limassol, Cyprus

Email: partners@bridgevisiongroup.com

Telephone: +357 99 234001

Website: www.bridgevisiongroup.com

 

As Data Controller, Serlands Ltd determines the purposes and means of processing your personal data and is legally responsible for its protection.

​

2.  What Personal Data We Collect

​

We collect the following categories of personal data:

 

2.1  Identity and Contact Data

• Full name

• Identity card number or passport number

• Date of birth (where provided)

• Residential or business address

• Email address

• Telephone number(s)

 

2.2  Professional and Business Data

• Business name and trading name

• Company registration number

• Profession, sector, and professional category

• Business address

• VAT registration number (where applicable)

• Professional licence details (where applicable)

• Position and role within the business

 

2.3  Membership and Service Data

• Membership application details

• Membership status, zone, and profession category

• Services Agreement details and payment records

• Attendance and participation records

• Communications with BVG

• Event registration and attendance history

• Loyalty Club card details and usage

 

2.4  Promotional and Visibility Data

• Business logo, brand assets, and promotional materials

• Business description and profile content

• Photographs taken at BVG events (where consent is given)

• Expert content, articles, or contributions submitted to BVG

• Social media handles or professional profile links (where provided)

 

2.5  Technical Data

• IP address and browser type when visiting our website

• Pages visited, time spent, and navigation data

• Cookie data as described in our Cookie Policy

 

We do not collect special categories of sensitive personal data such as health information, racial or ethnic origin, religious beliefs, political opinions, or biometric data as part of the membership process, unless you voluntarily provide such information in specific contexts (for example, dietary requirements for events).

 

3.  How We Collect Your Personal Data

​

We collect personal data through the following means:

​

• Membership application forms (physical or digital)

• The Services Agreement and Annex 1 signed at the time of joining

• Direct communications by email, telephone, or in person

• Event registration forms and attendance records

• Your use of BVG platforms, member portal, or website

• Materials and content you provide for the Business Directory or promotional purposes

• Photographs and recordings taken at BVG events with your consent

• Referrals from existing members (with your knowledge)

• Publicly available business registers, such as the Cyprus Registrar of Companies

​

4.  Legal Basis for Processing Your Personal Data

​

Under GDPR, we must have a lawful legal basis for every processing activity. The following table sets out the legal basis we rely on for each purpose:

​​

​​

​

​

​​​​​​​​​​​​​​

​

​​​​​​​​​​​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

 

 

 

 

 

 

 

 

 

 

​

 

 

 

 

 

5.  How We Use Your Personal Data

 

We use your personal data for the following purposes:

 

• To process and administer your BVG membership

• To deliver the services described in the Services Agreement and Annex 1

• To manage event registration, attendance, and participation

• To maintain and publish your listing in the BVG Business Directory

• To feature your business on BVG social media platforms and communication channels (with your consent)

• To issue and administer BVG Loyalty Club cards

• To send you official membership communications, updates, event invitations, and renewal notices

• To respond to your enquiries and requests

• To manage the renewal or termination of your membership

• To enforce the terms of the Services Agreement, Terms and Conditions, and Code of Conduct

• To comply with our legal and regulatory obligations under Cyprus and EU law

• To improve our services, website, and community operations

• To protect the safety, integrity, and reputation of the BVG community

 

6.  Who We Share Your Data With

​

We do not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data only in the following circumstances:

 

6.1  Within the BVG Community

Your professional profile, business name, contact details, and Business Directory listing are visible to other BVG members and, in the case of the Business Directory, to the general public through the BVG website. You consent to this visibility by submitting your membership application and signing the Services Agreement.

 

6.2  Service Providers and Processors

We may share data with trusted third-party service providers who assist us in operating our business, including:

• IT and website hosting providers

• Email communication and marketing platforms

• Event management platforms

• Payment processing providers

• Accounting and legal advisors

 

All third-party processors are required to handle your data securely, in accordance with GDPR, and only for the purposes we specify.

 

6.3  Legal and Regulatory Requirements

We may disclose your personal data where required to do so by law, court order, regulatory authority, or government authority in Cyprus or the European Union.

 

6.4  Protection of Rights

We may share data where necessary to protect the legal rights, safety, or property of BVG, its members, or third parties.

 

6.5  Business Transfers

In the event of a merger, acquisition, or sale of Serlands Ltd or its assets, your personal data may be transferred as part of that transaction. You will be notified in advance where this affects your personal data.

 

7.  International Data Transfers

​

BVG operates primarily within Cyprus and the European Union. Your personal data is stored and processed within the European Economic Area (EEA) where GDPR applies directly.

​

Where we use service providers located outside the EEA, we ensure that adequate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses approved by the European Commission or equivalent protection mechanisms.

 

8.  How Long We Keep Your Data

​

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply:

 

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

 

After the applicable retention period, your personal data will be securely deleted or anonymised.

 

9.  Your Rights Under GDPR

​

Under the GDPR and Cyprus data protection law, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to conditions and limitations as provided by law.

 

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you and information about how we process it. We will respond within 30 days of your request.

 

Right to Rectification (Article 16)

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

 

Right to Erasure / ‘Right to be Forgotten’ (Article 17)

You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right does not apply where we are required to retain data by law or for the defence of legal claims.

 

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while you contest the accuracy of your data or object to our processing.

 

Right to Data Portability (Article 20)

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.

 

Right to Object (Article 21)

You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to direct marketing processing at any time.

 

Right to Withdraw Consent (Article 7(3))

Where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

 

Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection if you believe your data protection rights have been violated.

 

Cyprus Commissioner for Personal Data Protection

Website: www.dataprotection.gov.cy

Email: commissioner@dataprotection.gov.cy

Telephone: +357 22 818 456

Address: Iasonos 1, 1082 Nicosia, Cyprus

 

To exercise any of your rights, please contact us at partners@bridgevisiongroup.com. We will respond to all requests within 30 calendar days. In complex cases we may extend this period by a further 60 days, in which case we will notify you.

 

10.  How We Protect Your Data

 

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

 

• Password protection and access controls on all systems storing personal data

• Restricted access to personal data — only authorised personnel with a legitimate need

• Secure email communications for sensitive correspondence

• Regular review of our data protection practices

• Secure disposal of physical documents containing personal data

 

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Cyprus Commissioner for Personal Data Protection within 72 hours of becoming aware of the breach, and will notify you directly where the breach poses a high risk to your rights and freedoms.

 

11.  Cookies and Website Tracking

​

Our website at www.bridgevisiongroup.com uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and deliver relevant content.

​

A cookie is a small text file placed on your device when you visit our website. We use the following types of cookies:

 

• Essential cookies — necessary for the website to function correctly

• Analytics cookies — to understand how visitors use our website (e.g. Google Analytics)

• Preference cookies — to remember your settings and choices

 

Non-essential cookies are only placed with your consent. You may withdraw consent or manage your cookie preferences at any time through your browser settings or our cookie consent tool.

 

For full details on the cookies we use, please refer to our Cookie Policy available on our website.

 

12.  Children’s Data

​

BVG membership is exclusively available to business owners, company directors, and professional individuals who are at least 18 years of age. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided us with personal data, please contact us immediately at partners@bridgevisiongroup.com and we will take steps to delete such data.

 

13.  Third-Party Links

​

Our website may contain links to third-party websites, platforms, or services. This Privacy Policy applies only to BVG and Serlands Ltd. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to read the privacy policies of any external websites you visit.

​

14.  Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or data protection standards. The updated version will always be published on our website with the date of the most recent revision at the top of the page.

 

Where changes are material, we will notify active members directly by email at least 30 days before the changes take effect. Continued use of our website or participation in BVG activities after notification constitutes acceptance of the updated Privacy Policy.

 

We encourage you to review this policy periodically.

 

15.  How to Contact Us

 

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

 

Data Controller: Serlands Ltd (The Bridge Vision Group)

Responsible Person: Nikolas Timvios, Director

Email: partners@bridgevisiongroup.com

Telephone: +357 99 234001

Address: Riga Feraiou 4, 4th Floor, Flat/Office 42, 3095, Limassol, Cyprus

 

We are committed to resolving any data protection concerns promptly and transparently. All requests will be acknowledged within 5 business days and responded to in full within 30 calendar days.

 

BRIDGE VISION GROUP — PRIVACY POLICY

Serlands Ltd — HE 453750  |  www.bridgevisiongroup.com  |  Last Updated: June 2026

This policy is governed by the laws of the Republic of Cyprus and the General Data Protection Regulation (EU) 2016/679.