National CSIRT-CY | National Computer Security Incident Response Team of Cyprus

Η Εθνική Ομάδα Αντιμετώπισης Ηλεκτρονικών Επιθέσεων προβλέπει την αύξηση της ηλεκτρονικής ασφαλείας ενισχύοντας την προστασία του κυβερνοχώρου των Εθνικών Κρίσιμων Πληροφοριακών Υποδομών, των τραπεζών και των παροχών επικοινωνίας της Κυπριακής Δημοκρατίας.

Data Protection

Privacy Policy

The Digital Security Authority (“DSA”), with this Privacy Policy, would like to inform you of the personal data it processes, the purpose of the process, the measures undertaken for their protection as well as your rights concerning your personal data.

Types of personal data collected

The personal data collected by the DSA are limited to what is necessary for the accomplishment of the purpose of which they were collected by the data subjects and are used only for that purpose.

The personal data collected and processed by the DSA for the purposes described herein below include indicatively the name, surname, title, organization, position in the organization, contact details etc.

Purpose of processing and use of personal data

Your personal data are processed exclusively and only for the compliance of the DSA with its legal obligations and for the performance of its duties in the exercise of the public authority assigned to it.

Right of data subjects

You, as a data subject, subject to the limitations provided by the applicable legislative framework for the protection of personal data, have the following rights:

  1. Right to be informed of and have access to your personal data;
  2. Right of rectification of the data that concern you;
  3. Right to withdraw the consent given;
  4. Right to be forgotten; and
  5. Lastly the right to object and the right to minimize processing and right to transfer your personal data.

If you wish to exercise your legal rights or have any questions regarding the processing of your personal data, you can contact us at the details listed at the end of this privacy policy.

In the event that you consider that the protection of your personal data is affected in any way, you can appeal to the Commissioner for Personal Data Protection following the link below (https://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/page1i_en/page1i_en?opendocument).

Access to your personal data and transfer to third parties

The DSA may use external partners to carry out the processing on its behalf ("processors"), always in the manner required by the applicable legislation for the protection of personal data. The aforementioned external partners used by the DSA are bound by a legal act or contract for the processing of personal data as required by the Regulation, ensuring that your personal data is protected, as defined by the relevant legislation. In any other case, the DSA does not transmit or disclose personal data to third parties unless it is provided by law in order to fulfill its duties or this is required to comply with the provisions of the applicable legislation or a court decision.

Data retention period

Your personal data is retained for as long as there is a need to carry out the actions necessary to achieve the purpose(s) of the processing. After this period, your personal data will be deleted in absolute security.

Data Security

To protect your personal data, the DSA takes all appropriate technical and organizational measures to ensure the confidentiality, integrity, availability and authenticity of your personal data. The personal data processed by the DSA is kept in digital and written form, stored in a secure environment within the DSA, encrypted and accessed only by authorized personnel of the DSA.

Cookies

The DSA’s website uses cookies. Cookies are small data files created and stored by your browser on your computer’s hard drive. Accessing a website may result in a cookie being stored on your operating system. This cookie contains a specific string of characters that allows the browser to be clearly identified each time the website in question is accessed.

We use cookies to make our website more user-friendly. The processing of personal data based on the use of cookies is legal according to Article 6 (1) of the Regulation (EU) 2016/679. The purpose of these technical cookies is to simplify the use of our website.

As a user, you have full control over the application of cookies. You can disable or restrict cookies by changing your browser settings. Cookies already stored on your hard drive can be deleted at any time. This can also be done automatically. However, disabling cookies for our website may result in some functions of the website not working properly.

Amendments to the Privacy Policy

This Privacy Policy might be amended from time to time. Please make sure to check this page for new information regarding our privacy policy.

This privacy policy is in effect as of 13/09/2019.

This Privacy Policy was amended on 15/01/2025.

Contact details

For any questions and/or clarifications you may have concerning the protection of your personal data, or to submit a complaint or to exercise your legal rights feel free to contact us at the following details:

Data Processor:

Digital Security Authority

1 Andrea Chaliou, 2408, Nicosia

Tel.: 22693000

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Data Protection Officer:

Tel.: 22693000

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

Cyber threats require heightened defences

Working towards a trusted and cyber secure Europe

Protect your cyber hygiene

Cyber Europe 2022 [exercise]