Cyprus Security and Intelligence Institute — CySII

Last updated: June 1st, 2026

  1. Introduction
    The Cyprus Security and Intelligence Institute, also referred to as CySII, “the Institute,” “we,” “us,” or “our,” respects your privacy and is committed to protecting personal data.
    This Privacy Policy explains how CySII may collect, use, store, protect, and share personal data when you visit our website, contact us, subscribe to updates, register interest in events, submit forms, or communicate with us.
    This Policy is intended to comply with applicable data protection laws, including the General Data Protection Regulation and applicable Cyprus data protection law.
  1. Who We Are
    For the purposes of data protection law, the data controller is:

Cyprus Security and Intelligence Institute — CySII
Email: info@cysii.org
Website: www.cysii.org

  1. Personal Data We May Collect
    Depending on how you use the website, we may collect the following categories of personal data:
    1. Name.
    2. Email address.
    3. Telephone number, if provided.
    4. Organisation or institutional affiliation, if provided.
    5. Job title or professional role, if provided.
    6. Country or location, if provided.
    7. Message content submitted through contact forms or email.
    8. Event registration details.
    9. Newsletter subscription preferences.
    10. Collaboration or partnership inquiry details.
    11. Technical data, such as IP address, browser type, device information, pages visited, time spent on the website, and cookie-related data.
    12. Any other information you voluntarily provide to us.
  1. Important Warning: Do Not Submit Sensitive or Classified Information
    CySII does not request or invite users to submit classified, restricted, confidential, privileged, operational, unlawfully obtained, or security-sensitive information through this website.

You must not submit personal data about third parties unless you have lawful authority to do so.

You must not submit information that could endanger individuals, institutions, public safety, infrastructure, investigations, security procedures, or protected operations.

  1. How We Collect Personal Data
    We may collect personal data when you:
    1. Visit the website.
    2. Complete a contact form.
    3. Send us an email.
    4. Subscribe to a newsletter or updates.
    5. Register for an event or training.
    6. Request information about CySII’s work.
    7. Submit a proposal, inquiry, or collaboration request.
    8. Interact with embedded content or third-party tools.
    9. Use cookies or similar technologies on the website.
  1. Why We Use Personal Data
    CySII may process personal data for the following purposes:
    1. To respond to inquiries.
    2. To manage contact requests.
    3. To provide information about CySII’s work.
    4. To manage newsletter subscriptions.
    5. To organise events, seminars, training, or briefings.
    6. To consider collaboration, partnership, research, or funding inquiries.
    7. To maintain website security.
    8. To improve website functionality and content.
    9. To protect CySII’s legal rights, intellectual property, reputation, and institutional integrity.
    10. To comply with legal obligations.
    11. To prevent misuse, fraud, unlawful activity, or security threats.
  1. Legal Bases for Processing
    Depending on the situation, CySII may process personal data on one or more of the following legal bases:
    1. Consent — for example, when you subscribe to a newsletter or accept non-essential cookies.
    2. Legitimate interests — for example, to respond to inquiries, protect the website, secure CySII’s work, and manage professional communications.
    3. Contractual necessity — for example, where processing is needed to register you for an event, training, service, or paid activity.
    4. Legal obligation — where CySII must process or retain data to comply with applicable law.
    5. Public interest or research-related purposes, where applicable and lawful.
  1. Newsletter and Communications
    If you subscribe to CySII updates, newsletters, event announcements, or similar communications, we may use your email address to send you relevant information.

You may unsubscribe at any time by using the unsubscribe link in the communication or by contacting us at [insert email].

We will not sell your contact details to third parties.

  1. Events, Training, and Registration Data
    If you register for a CySII event, seminar, training, briefing, or programme, we may process information needed to manage your participation, including your name, contact details, professional affiliation, attendance status, and communication preferences.

Additional event-specific privacy information may apply where necessary.

  1. Cookies and Analytics
    The website may use cookies or similar technologies to operate properly, improve performance, understand website use, secure the website, and manage user preferences.

Non-essential cookies, such as analytics or tracking cookies, may require your consent.

More information is provided in our separate Cookie Policy.

  1. Sharing Personal Data
    CySII may share personal data only where necessary and lawful.

This may include sharing data with:

    1. Website hosting providers.
    2. IT and cybersecurity service providers.
    3. Email and communication platforms.
    4. Event management providers.
    5. Professional advisers, such as lawyers or accountants.
    6. Public authorities, regulators, or law-enforcement bodies where legally required.
    7. Project partners, only where necessary and appropriate for a specific project, event, or collaboration.

CySII will not sell personal data.

  1. International Transfers
    Where personal data is transferred outside the European Economic Area, CySII will take appropriate steps to ensure that such transfers are lawful and protected.

This may include using adequacy decisions, standard contractual clauses, or other lawful safeguards where applicable.

  1. How Long We Keep Personal Data
    CySII will keep personal data only for as long as necessary for the purposes for which it was collected, including legal, administrative, security, research, or legitimate institutional purposes.

Indicative retention periods may include:

    1. Contact inquiries: 12–24 months
    2. Newsletter subscriptions: until you unsubscribe or the list is discontinued.
    3. Event registration data: 2–5 years depending on funding/reporting needs.
    4. Contractual or financial records: as required by applicable law.
    5. Security logs: 12-24 months unless needed for investigation.
  1. Security of Personal Data
    CySII takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no online system can be guaranteed to be completely secure.

Users should avoid submitting sensitive, classified, restricted, privileged, or confidential information through general website forms or ordinary email.

  1. Data Breaches
    Where required by law, CySII will notify the competent authority of a personal data breach.

Where required, affected individuals may also be informed.

  1. Your Rights
    Subject to applicable law, you may have the right to:
    1. Request access to your personal data.
    2. Request correction of inaccurate personal data.
    3. Request deletion of personal data.
    4. Request restriction of processing.
    5. Object to processing.
    6. Withdraw consent where processing is based on consent.
    7. Request data portability where applicable.
    8. Lodge a complaint with the competent data protection authority.

To exercise your rights, contact us at: info@cysii.org.

  1. Children’s Data
    This website is not intended to collect personal data from children without appropriate consent or lawful basis.

If CySII organises youth-focused educational, awareness, or research activities, additional safeguards, consent procedures, and privacy notices may apply.

  1. Third-Party Links
    The website may contain links to third-party websites. CySII is not responsible for the privacy practices, security, or content of third-party websites.

Users should read the privacy policies of external websites before submitting personal data.

  1. Changes to This Privacy Policy
    CySII may update this Privacy Policy from time to time.

The updated version will be published on this page with a revised “Last updated” date.

  1. Contact
    For privacy questions or requests, please contact:

Cyprus Security and Intelligence Institute — CySII
Email: info@cysii.org
Website: www.cysii.org