CYQAA Privacy Policy
In order to comply with the General Data Protection Regulation (GDPR), CYQAA has created its privacy policy. This policy is published on the Agency’s website for all interested parties.
The policy describes the personal data that the Agency processes and explains what databases it maintains and how they are used.
The Agency
CYQAA was established on the basis of the “Quality Assurance and Accreditation of Higher Education and the Establishment and Operation of an Agency on Related Matters Law, of 2015,” and is responsible is to ensure the quality of higher education in Cyprus and to support, through the procedures provided by the relevant legislation for the continuous improvement and upgrading of higher education institutions and their programs of study.
Legal Basis of Personal Data Processing
In order to implement its mission, CYQAA has a legal obligation to collect and process personal academic data in accordance to Ν. 136(Ι)/2015 to Ν.35(Ι)/2019 and the requirements of the General Data Protection Regulation - Regulation 2016/679 (Article 5). The public interest is the main factor in this task as CYQAA’s mission is to safeguard quality higher education for the society, which involves informing the public about all the necessary academic information, experience and credentials of the persons involved in quality assurance as well as the background of academics teaching and conducting research at higher education level.
Categories and use of Personal Data
In order to carry out external evaluation and accreditation of higher education as provided by the relevant legislation, CYQAA requires and processes academic data of the teaching personnel of higher education institutions.
It is also CYQAA’s responsibility to publish the results of its external evaluation procedures and thus the names of the experts involved in these procedures are published in the reports they have drafted.
Databases
- Register of Evaluators/Experts The Register of Experts contains a record of current or potential experts for CYQAA’s external evaluations of higher education institutions. It includes the expert’s name, email address, rank, expertise, and a brief history of his/her collaboration with the Agency for the conduct of external evaluations.
- Contacts The database contains a record of CYQAA’s main stakeholders which includes the contact details (name, email address, and position) of relevant personnel. These lists are stored and managed by the CYQAA Secretariat and are used to send information and various correspondence that is targeted to CYQAA stakeholders (ie higher education institutions, government departments and services, professional bodies/associations etc).
- Data for Financial Transactions CYQAA collects and stores information (including the name, address, and banking details) of individuals and organizations with whom it conducts financial transactions. This information is accessible only by staff of the CYQAA and its authorized personnel and the authorized personnel of the Accounts office at the Ministry of Education and Culture.
Any of the above-mentioned data will not be transferred or shared with any unrelated third parties. Only authorized individuals have access to information collected and stored by CYQAA.
CYQAA takes security measures to safeguard its databases, but if a breach of security is identified, CYQAA will inform those affected as quickly as possible as well as the Office of the Commissioner for Personal Data Protection in Cyprus, within 72 hours from the breach of data.
Security measures include access to authorized personnel only, high level firewall, encryption, and codes of conduct. Contacts have the right to ask for a copy of the information CYQAA has about them.
CYQAA aims to comply fully with its obligations under the relevant Regulation. For questions or concerns regarding CYQAA’s management of personal data, including the subjects’ access to data about themselves or if they feel that CYQAA holds inaccurate information about themselves the CYQAA’s Data Protection Officer may be contacted at This email address is being protected from spambots. You need JavaScript enabled to view it. or at 22 504345 or to the postal address, Leoforos Lemessou, 2112 Nicosia, Cyprus.
Security measures include access to authorized personnel only, high level firewall, encryption, and codes of conduct. Contacts have the right to ask for a copy of the information CYQAA has about them.
CYQAA aims to comply fully with its obligations under the relevant Regulation. For questions or concerns regarding CYQAA’s management of personal data, including the subjects’ access to data about themselves or if they feel that CYQAA holds inaccurate information about themselves the CYQAA’s Data Protection Officer may be contacted at This email address is being protected from spambots. You need JavaScript enabled to view it. or at 22 504345 or to the postal address, Leoforos Lemessou, 2112 Nicosia, Cyprus.
