Privacy Policy

The Central Bank of Cyprus (CBC) is responsible for the processing of personal data collected directly from individuals or from other sources, for the purpose of exercising its powers. The CBC shall also collect and process personal data in relation to tenderers in the context of procurement of supplies, works or services or concessions as well as personal data, its employees and candidates for recruitment.

What information does the CBC collect through its website?

CBC servers record the following information:

Cookies: These are small bits of data sent by a website server to the browser on your computer. The browser tells the server when you next visit that particular website. Cookies help us to anonymously store user preferences and monitor usage trends on an aggregated basis.

Log information: Servers automatically record information that your browser sends whenever you visit a website. These server logs may include information such as the data and time of your visit, browser language and screen size as well as one or more cookies that identify your browser without collecting personal data. This information is used to compile statistics, on an aggregated basis, on the usage of the site.

With regard to links to other websites through our website, the CBC is not responsible for the terms of management and protection of personal data they follow.

Personal information communicated via the CBC by e-mail

Your personal data are collected only to the extent necessary to draft a reply. If you have any questions about the processing of your e-mail and related personal data, do not hesitate to include them in your message.

Employment opportunities at the CBC via online recruitment system

Specific information on data protection concerning the handling of personal data for recruitment purposes, can be found on the application forms posted from time to time on the CBC website.

How we collect your personal data

We collect and process personal data that we legally obtain not only from you but also from other sources, such as credit  and other institutions, which are obliged to provide data to the CBC. This processing is necessary for the exercise of the CBC’s responsibilities.

How we protect and safeguard your information

The CBC takes all necessary measures to protect your personal data. The CBC collects and processes your personal data in accordance with Regulation (EU) 2016/679 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data [General Data Protection Regulation (“GDPR”)].

Your personal data is processed only by authorised employees of the CBC.

The CBC does not transmit or disclose your personal data to any third party without your consent unless such transmission or disclosure is necessary:

(a) for the performance of a contract in which you are a contracting party;

(b) to fulfill a legal obligation;

(c) to safeguard your vital interests;

(d) for the performance of a task carried out in the public interest or in the course of exercising official authority;

(e) for the purposes of the legitimate interests pursued by the CBC or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the individuals which require protection of personal data.

The CBC has appointed a Data Protection Officer who is responsible for the implementation of the provisions of the GDPR and advises the CBC on the fulfillment of its obligations.

Your data protection rights

You have the following rights with respect to your personal data held by the CBC:

  • Access your personal data. This allows you, for example, to receive a copy of your personal data and to check that we process it legally.
  • Request a rectification of your personal data. This enables you to correct any incomplete or inaccurate data.
  • Ask for your personal information to be deleted when there is no valid reason to continue processing it.
  • Object to the processing of your personal data when there is a specific reason for your opposition to the processing. If you file a complaint, we will no longer process your personal data, unless we can demonstrate legitimate processing considerations that override your interests, rights and freedoms
  • Ask for the limitation of the processing of your personal data if:
    • you have doubts about their accuracy,
    • they have been used illegally, but you do not wish to delete them,
    • it is no longer needed, but you want to keep them for use in potential legal claims,
    • you have already asked us to stop using your personal data, but expect us to confirm whether there are overriding reasons for their continued use.
  • Withdraw the consent you have given us regarding the processing of your personal data at any time. Please note that any revocation of consent does not affect the legality of consent-based processing before it is withdrawn or revoked by you.

In order to exercise any of your rights or if you have any other questions about the use of your personal data by us, you may contact the Data Protection Officer at the following e-mail address:

We strive to respond as soon as possible to all your requests.

Right to lodge a complaint

If you have exercised some or all of your rights to data protection and you still feel that your concerns about the way we process your personal data have not been fully addressed by us, you have the right to file a complaint to the Office of the Personal Data Protection Commissioner. You will find information on how to file complaints on the relevant website:


Changes to this Privacy Statement

We may occasionally change or modify this privacy statement.

We encourage you to review this statement periodically so that you are always aware of the way we process and protect your personal information.