The Digital Security Authority (“DSA” or “Authority”), through this Privacy Policy, informs you about the personal data it processes concerning you, the purpose of such processing, the measures taken to protect your data, and your rights.
The DSA guarantees the protection of your personal data and fully complies with the General Data Protection Regulation (GDPR), as well as with the applicable laws, regulations, guidelines, and directives relating to personal data protection and the Authority’s responsibilities arising from The Security of Networks and Information Systems Law of 2020 (Law 89(I)/2020).
This Privacy Policy explains how your personal data is managed when using the Mila AI Chatbot in accordance with the applicable legal framework (Regulation (EU) 2016/679 of the European Parliament and of the Council) as well as Cypriot legislation, namely the Law Providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data of 2018 (Law 125(I)/2018).
Personal Data We Collect
The DSA may collect information that you provide when using and interacting with the Mila AI Chatbot, such as your contact details (full name, email address, telephone number), as well as the content of your conversations that you voluntarily share during your interaction with the Mila AI Chatbot.
Purpose of Processing and Use of Personal Data
The data is used exclusively to provide and improve the services of Mila AI Chatbot, to comply with our legal obligations, and to perform our duties in the exercise of the public authority entrusted to us.
Data Subject Rights
As a data subject, subject to the limitations provided under the applicable personal data protection legislation, you have the following rights regarding your personal data:
- Right to information and access to your personal data;
- Right to rectification of data concerning you;
- Right to withdraw your consent;
- Right to erasure of your personal data; and
- Right to object, restrict processing, and to data portability.
If you wish to exercise your legal rights or have any questions regarding the processing of your personal data, you may contact us using the contact details provided at the end of this Privacy Policy.
If you believe that the protection of your personal data has been violated in any way, you may lodge a complaint with the Commissioner for Personal Data Protection.
Access to Your Data and Disclosure to Third Parties
The DSA may engage external partners to carry out processing on its behalf (“data processors”), always in accordance with the applicable personal data protection legislation.
When using the Mila AI Chatbot, the DSA collaborates with AC Goldman Solutions & Services GSS Ltd and applies the following Privacy Policy:
https://www.milabot.ai/privacy-policy
Our external partners are bound by legal acts or contracts, and we ensure that your personal data is protected as required by applicable legislation. In any other case, the DSA does not transfer or disclose personal data to third parties unless required by law in order to fulfil its duties or to comply with applicable legislation or a court decision.
Data Retention Period
Your personal data is retained for the period provided for under the applicable legislation and for as long as necessary to carry out actions required to achieve the purpose(s) of processing. After this period, your personal data will be securely deleted.
Personal Data Security
To protect your personal data, the DSA takes all appropriate technical and organizational measures to ensure the confidentiality, integrity, availability, and authenticity of your personal data.
The personal data processed by the DSA is maintained in digital form, stored in a secure environment within the organization, encrypted during transmission, and retained in a secure database. Access to the data is granted only to authorised personnel of the organization.
Amendments to Privacy Policy
This Privacy Policy may be amended from time to time. Please review this page regularly for updates regarding our privacy practices.
This notice is effective as of 16/02/2026.
Contact Details
For any questions and/or clarifications regarding the protection of your personal data, as well as to submit a complaint or exercise your legal rights, you may contact us as follows:
Data Controller
Digital Security Authority
1 Andrea Chaliou Street
2408 Nicosia, Cyprus
Tel: +357 22693000
Email: [email protected]
Data Protection Officer
Tel: +357 22693000
Email: [email protected]