This Data Protection Privacy Notice explains how the Cyprus Financial Literacy and Education Committee (CyFLEC) (hereinafter referred to as “CyFLEC, "we", "our", or "us") collects and processes your personal data when you visit our website moneypedia.cy, including any other media form, media channel, or mobile website related or connected thereto. As the Coordination and Management Team (C&MT) supporting the day-to-day operations of CyFLEC, including the management of moneypedia.cy, is situated at the Central Bank of Cyprus (CBC), the CBC acts as the data controller for the processing of personal data described in this Notice. The Central Bank of Cyprus is located at 80 Kennedy Avenue, 1076 Nicosia.

Purpose of personal data processing:

1. Information We Collect

We may collect information about you in a variety of ways, including:

a. Personal Data: Personally identifiable information such as your name, email address, phone number, and other similar information that you voluntarily give to us.

b. Usage Data: Information automatically collected when you access our site, such as your IP address, browser type, operating system, access times, and pages viewed directly before and after accessing the website.

c. Source of Personal Data: We collect personal data directly from you when you communicate with us, submit enquiries, subscribe to newsletters or otherwise interact with the website. We also collect certain technical information automatically through your use of the website. We do not obtain personal data about you from third-party sources.

d. Cookies and Tracking Technologies: No cookies and tracking technologies are being collected for the time being. We may use cookies, web beacons, tracking pixels, and other tracking technologies in the future to help customize the site and improve your experience. You can manage your cookie preferences in the future through your browser settings or via our Cookie Policy.

2. How We Use Your Information

We use the information we collect in the following ways:

• To operate and maintain our website
• To personalise user experience
• To improve our website and customer service
• To send periodic emails or newsletters
• To respond to customer service requests
• To ensure the security and proper functioning of the website.
• To comply with applicable legal and regulatory obligations.

Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent (Article 6(1)(a) GDPR), where you have voluntarily provided your consent, including where you have requested to receive newsletters or updates.
• Legitimate Interests (Article 6(1)(f) GDPR), for the operation, administration, security and improvement of the website, and for responding to enquiries and requests submitted by users.
• Compliance with a Legal Obligation (Article 6(1)(c) GDPR), where processing is necessary to comply with applicable legal or regulatory requirements.

Where processing is based on legitimate interests, these interests include ensuring the effective operation, security, maintenance and improvement of the website, responding to user enquiries and supporting the provision of financial literacy and educational content.

3. Disclosure of Your Information

We may share information we have collected about you in certain situations, including:

• With Service Providers: We may share your information with third parties who perform services for us.
• By Law or to Protect Rights: If we believe the release is appropriate to comply with the law or protect the rights, property, or safety of ourselves or others.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.

We do not sell your personal data to third parties.

International Transfers

Personal data collected through the website is processed and stored within the European Economic Area (EEA). We do not transfer personal data to countries outside the EEA or to international organisations.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and administrative requirements. When personal data is no longer required, it will be securely deleted or anonymised, as appropriate.

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. These include SSL/TLS encryption, firewalls, security audits, and access controls. However, no method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security. Please also refer to our Terms.

6. Your Rights

You have the following rights with respect to your personal data processed by the CyFLEC’s C&MT situated at the CBC:

• Access your personal data. This allows you, for example, to receive a copy of your personal data and to check that we process it legally.
• Request a rectification of your personal data. This enables you to correct any incomplete or inaccurate data.
• Ask for your personal information to be deleted when there is no valid reason to continue processing it.
• Restrict the processing of your personal data. The C&MT is still permitted to store your personal data but other use of the data is prohibited, save in certain limited circumstances.
• Object to the processing of your personal data when there is a specific reason for your opposition to the processing. If you file a complaint, we will no longer process your personal data, unless we can demonstrate legitimate processing considerations that override your interests, rights and freedoms
• Data Portability. This right allows you to obtain your personal data in a format that enables you to transfer that personal data to another organisation where the C&MT is processing your personal data on the basis of consent or on the fulfilment of a contract and if processing is carried out by automated means.
• Not to be subject to a decision based solely on automated processing (i.e. without any human involvement) where that decision produces a legal effect or otherwise significantly affects you.
• Ask for the limitation of the processing of your personal data if:

o you have doubts about their accuracy,

o they have been used illegally, but you do not wish to delete them,

o it is no longer needed, but you want to keep them for use in potential legal claims,

o you have already asked us to stop using your personal data but expect us to confirm whether there are overriding reasons for their continued use.

• Withdraw the consent you may give us regarding the processing of your personal data at any time. Please note that any revocation of consent does not affect the legality of consent-based processing before it is withdrawn or revoked by you.
• Lodge a complaintto the Office of the Commissioner for Personal Data Protection if you have exercised some or all of your rights to data protection and you still feel that your concerns about the way we process your personal data have not been fully addressed by us.

To exercise these rights, please contact us at FinLitSecretariat@centralbank.cy.

Should you have any queries on any aspects of this Data Protection Privacy Notice, you may contact our Data Protection Officer at dpo@centralbank.cy.

7. Third-Party Websites

Our website may contain links to third-party websites. These third parties have their own privacy policies, and we are not responsible for their security practices. We are not responsible for the privacy practices of such other sites.

8. Changes to This Privacy Policy

This Data Protection Privacy Notice may be updated from time to time. Any changes will be published on this page and will become effective upon publication.

Last Updated: 06 July 2026