This electronic platform “drones.gov.cy”, hereinafter “the eService” collects personal data within the meaning of and according to the provisions of the Data General Protection Regulation (EU) 2016/679 (“the Regulation”) and the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data Law 2018, L. 125(I)/2018 (national Legislation), both forming the Legislative framework for the protection of personal data.”
Data Controllers
Data Controllers of the data collected through the platform is the Ministry of Transport, Communications and Work. For questions regarding the processing of personal data and the exercise of the Regulation rights you may contact the Department of Civil Aviation at the email address info@drones.gov.cy
Object and legal basis of processing
The data Controllers collect and process your personal data according to the basic Principles governing the Legislative framework for the protection of personal data, i.e. the principles of legality, limitation of purpose, transparency, minimization, precision, limitation of storage time, confidentiality, integrity and accountability, for the following objects:
The purpose of the functioning of the platform is to provide information to drone users regarding drone operations, drone regulation in Cyprus and Europe, restricted areas. Additionally, it serves as the registration platform for drone users.
Categories of data subjects
Drone users
Categories of personal data under processing
· Contact details: full name, I.D. No/passport No, address, telephone
· Declaration: declaration that the registration details are correct and the user has understood the regulation
Confidentiality and Safety of Personal Data
Your personal data shall remain confidential and safe. Technical and organizational measures are being taken for the protection of your personal data against accidental of unlawful destruction, loss, alteration, unauthorized communication or access. The personal data are kept in server computers in a controlled secure and protected environment. When the personal information is being uploaded on the platform, it is protected through the use of encryption, such as the SecureSocketLayer (SSL) Protocol.
More specifically, access and management of the above personal data will be given only to specially authorized personnel of the joint controllers and to isolated users depending on their jurisdiction, role and needfulness:
· Department of Civil Aviation
· Police
· Customs
· Statistical Services
Data Recipients
The joint data controllers shall ensure that your personal data are communicated to recipients only if this is provided for by the Legislative framework for the protection of personal data and in accordance with national and European Union legislations.
The company that has developed the platform may have access to the data for purposes of support/maintenance of the platform, which is bound by a contract for the assignment of processing as the data processor in accordance with article 28 of the Regulation.
Retention of Data
The personal data will be retained for a maximum period of two (2) months, after the expiry of which they will be completely erased.
Exercise of rights by data subjects
In accordance with the Legislative framework for the protection of personal data, you have the following rights, which you may exercise any time during the time frame of two (2) months, on the basis of which the data concerning you are stored.
Right of access (article 15 of Regulation): You may have access to your data and obtain complementary information concerning their processing as well as a copy of such data.
Right to Erasure (article 17 of Regulation): You have the right to ask for your personal data to be erased subject to the requirements of Article 17 of the Regulation.
Right to restriction of processing (article 18 of Regulation): You have the right to ask for the processing of your data to be restricted in the cases provided for by Article 18 of the Regulation.
Right to object (article 21(1) of the Regulation): You have the right to object at any time to the processing of your personal data for reasons related to your special circumstances, in accordance with the stipulations of article 21(1) of the Regulation.
You may exercise any of the above rights as well as make any request by communicating with the Department of Civil Aviation at the email address info@drones.gov.cy
You also reserve the right to file a complaint to the competent supervising Authority, The Commissioner for the Protection of Personal Data, if you discover that an unlawful processing of your personal data is taking place or your rights in respect of your personal data have been breached.
EN 
GR 