Terms of use

General Statement of the Ministry of Health

The “EU DCC Portal” is a web-based platform managed by the Ministry of Health of the Republic of Cyprus for the implementation of Regulation (EU) 2021/953 on the issuance of the EU Digital COVID Certificate. Users of this platform are deemed to have accepted the Terms and Conditions of Use, as indicated below.

Therefore, before inserting any of your details to obtain the EU Digital COVID Certificate, you must have accepted the said Terms and Conditions of Use.

Personal Data Protection Statement

The digital certificate has been designed based on the needs of the Member States to progressively lift the restrictive measures against the Covid-19 pandemic, since it will be used as a proof of vaccination, test result or recovery, safeguarding public health in response to the redispersion of Covid-19.

The Ministry of Health ensures that it respects the rights of the EU DCC platform users, safeguarding that during the submission of the application and the insertion of the details (Identity Card No or ARC No or Passport No), the data provided shall only be used for the digital Covid-19 certificate issuance, preventing any other processing or disclosure of the relevant information.

When applying for the certificate issuance and during the identification process through the insertion of the unique OPT code, it is ensured that the personal details shall not be disclosed other than some statistical information that may be available through the internet service provider for the creation of summary statistics, enabling the assessment of the overall number of applications.

The Ministry of Health reserves the right to amend the Terms of Use at any future time, ensuring that any changes shall be regularly published.

Protection of data

Your personal data shall be processed with the highest possible level of security and confidentiality, strictly according to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), as amended from time to time.

Data shall be retained in an encrypted form for the period of validity of Regulation (ΕU) 2021/953 on the digital Covid-19 certificates. The encrypted data shall not be processed or/and used or/and retained for longer than is necessary for the purposes for which they have been provided. This period may be extended provided that the period of validity of the Regulation is also extended.

The Ministry of Health ensures that your data kept in an encrypted form shall not be disclosed to recipients unless permitted by the legislative framework on the protection of personal data and according to national and EU law.

It is noted that by using the EU DCC platform you consent to the processing of your personal data provided, according to the Privacy Policy.

Disclaimer

By accepting the Terms and Conditions you agree to adhere to the following:

  • users undertake to check the conditions, travel directives, measures and epidemiological situation of their EU country of destination.
  • platform users undertake and accept full responsibility for their travel arrangements and the safety of their personal health and agree to hold harmless from any loss, liability, damages or costs that they may incur due their travel and stay to countries within the EU, as a result to the redispersion of Covid-19 or/and for any inconvenience they will be suffered, including their travel companions/family members (if any) under 18.
  • neither the Republic of Cyprus nor its authorised officers shall be held responsible for any loss, harm, property damage or bodily injury, including death of you or your travel companions/family members (if any) under 18 and you have to be fully aware of the risks connected to your flight and stay in countries within the EU, due to the prescribed measures for the protection of public health or the redispersion of Covid-19.

Terms of use

General Statement

The “CovPass” application was developed by the eHealthLab, Department of Computer Science and Biomedical Engineering Research Center, University of Cyprus, in cooperation with the Ministry of Health and the Deputy Ministry of Research, Innovation and Digital Policy, for the implementation of Regulation (EU) 2021/953 on the issuance of the EU Digital Covid Certificate. Users of this application are deemed to have accepted the Terms and Conditions of Use, as indicated below:

Therefore, before installing the CovPass application, scanning the QR code and storing the digital Covid certificate, you must have accepted the said Terms and Conditions of Use.

Personal Data Protection Statement

The digital certificate has been designed based on the needs of the Member States to progressively lift the restrictive measures against the Covid-19 pandemic, since it will be used as a proof of vaccination, test result or recovery, safeguarding public health in response to the redispersion of Covid-19.

The users’ personal data shall be processed with the highest possible level of security and confidentiality, strictly according to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), as amended from time to time.

We reserve the right to amend this Statement any future time. Any changes shall be published to the Privacy Statement and the Terms of Use.

Confidentiality and Safety of Data during the issuance of the EU digital COVID certificate

In order to issue the EU Digital Covid certificate data contained in the digital certificate shall be retained in an encrypted form for the period of validity of Regulation (ΕU) 2021/953. The encrypted data shall not be processed or/and used or/and retained for longer than is necessary for the purposes for which they have been provided. This period may be extended provided that the period of validity of the Regulation is also extended.

The Ministry of Health ensures that data kept in an encrypted form for the issuance and use of the digital certificate shall not be disclosed to recipients unless permitted by the legislative framework on the protection of personal data and according to national and EU law.

How to install and operate the CovPass application

  • The installation of the CovPass application on the mobile phone and its use are voluntary for users.
  • Once the CovPass application is installed, the camera must be activated for the electronic transmission of Covid-19 certificates either form paper or mobile devices to the app by means of scanning. The QR code can be scanned, imported and stored using the camera.
  • Once the QR code is scanned, the app user shall be requested to insert the TAN (transaction authentication number), which is produced during the issuance of the certificate, ensuring that each QR code shall be scanned and used only in one CovPass wallet. Each user shall be able to manage his/her own CovPass wallet, as he/she wishes so, by storing even the certificates of the family members.
  • After the saving of the scanned certificate on the CovPass application, a new TAN will be generated, if the user wishes to transfer his/her EU Digital Covid-19 Certificate on another device.

Use of the Camera

The user of the CovPass Application must give his/her permission for the use the camera. If the access to the camera is not granted the scanning of the QR code will not be possible to take place.

Data contained in the certificates issued and stored in the CovPass Wallet:

a) Vaccination Certificate:

  • name: surname(s) and forename(s);
  • date of birth;
  • disease or agent targeted: COVID-19 (SARS-CoV-2 or one of its variants);
  • COVID-19 vaccine or prophylaxis;
  • COVID-19 vaccine product name;
  • COVID-19 vaccine marketing authorisation holder or manufacturer;
  • number in a series of doses as well as the overall number of doses in the series;
  • date of vaccination, indicating the date of the latest dose received;
  • Member State or third country in which the vaccine was administered;
  • certificate issuer;
  • unique certificate identifier.
b) Certificate of Recovery:
  • name: surname(s) and forename(s);
  • date of birth;
  • disease or agent from which the holder has recovered: COVID-19 (SARS-CoV-2 or one of its variants);
  • date of the holder’s first positive NAAT test result;
  • Member State or third country in which test was carried out;
  • certificate issuer;
  • certificate valid from;
  • certificate valid until (not more than 180 days after the date of first positive NAAT test result);
  • unique certificate identifier.
c) Test certificate:
  • name: surname(s) and forename(s);
  • date of birth;
  • disease or agent targeted: COVID-19 (SARS-CoV-2 or one of its variants);
  • the type of test;
  • test name (optional for NAAT test);
  • test manufacturer (optional for NAAT test);
  • date and time of the test sample collection;
  • result of the test;
  • testing centre or facility (optional for rapid antigen test);
  • Member State or third country in which the test was carried out;
  • certificate issuer;
  • unique certificate identifier.

During the check at the points of entry of an EU Member State, the authorised officers shall be able to proceed to the necessary verification of the authenticity and validity of the QR code, using special verifier devices. This ensures that during the verification process the data contained in the digital Covid certificate shall not be further processed or/and stored.

Disclaimer

By accepting the Terms and Conditions you agree to adhere to the following:

  • users undertake to check the conditions, travel directives, measures and epidemiological situation of their EU country of destination;
  • the digital certificate users undertake and accept full responsibility for their travel arrangements and the safety of their personal health and agree to hold harmless from any loss, liability, damages or costs that they may incur due their travel and stay to countries within the EU, as a result to the redispersion of Covid-19 or/and for any inconvenience they will be suffered, including their travel companions/family members (if any) under 18;
  • neither the Republic of Cyprus nor its authorised officers shall be held responsible for any loss, harm, property damage or bodily injury, including death of you or your travel companions/family members (if any) under 18 and you have to be fully aware of the risks connected to your flight and stay in countries within the EU, due to the prescribed measures for the protection of public health or the redispersion of Covid-19.

Terms of use

General Statement of the Ministry of Health

The “CovScan” application was developed by the eHealthLab, Department of Computer Science and Biomedical Engineering Research Center, University of Cyprus, in cooperation with the Ministry of Health and the Deputy Ministry of Research, Innovation and Digital Policy, based in the context of the implementation of the Regulation (EU) 2021/953 and the Infectious Diseases (Determination of Measures for the Prevention of the Spread of the Covid-19 Coronavirus Decree of 2021) Decrees, issued by the Minister of Health of the Republic of Cyprus. Users of this application are deemed to have accepted the Terms and Conditions of Use, as indicated below:

Therefore, before installing the CovScan application and proceed with the scanning of the QR code in order to verify/check the authenticity, validity and integrity of the digital Covid-19 certificate, you must have accepted the said Terms and Conditions of Use.

Personal Data Protection Statement

The digital certificate has been designed based on the needs of the Member States to progressively lift the restrictive measures against the Covid-19 pandemic, since it will be used as a proof of vaccination, test result or recovery, safeguarding public health in response to the redispersion of Covid-19.

The users’ personal data shall be processed with the highest possible level of security and confidentiality, strictly according to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), as amended from time to time.

In particular, the CovScan application has been designed in accordance to the principle of minimisation, which means that the application uses only the available public keys for the required verification of the validity, authenticity and integrity of the certificates. For verification purposes, only the validity and authenticity of the certificate is checked, by verifying who issued and signed it.

We reserve the right to amend this Statement any future time. Any changes shall be published to the Privacy Statement and the Terms of Use.

Confidentiality and Safety of Data during the issuance of the EU digital Covid-19 certificate

In order to issue the EU Digital Covid-19 certificate data contained in the digital certificate shall be retained in an encrypted form for the period of validity of Regulation (ΕU) 2021/953. The encrypted data shall not be processed or/and used or/and retained for longer than is necessary for the purposes for which they have been provided. This period may be extended provided that the period of validity of the Regulation is also extended.

The Ministry of Health ensures that data kept in an encrypted form for the issuance and use of the digital certificate shall not be disclosed to recipients unless permitted by the legislative framework on the protection of personal data and according to national and EU law.

How to install and operate the CovScan application

  • The installation of the CovScan application on the mobile phone and its use is voluntary for users.
  • Once the CovScan application is installed, the camera must be activated for the electronic checking of Covid-19 certificates either form paper or mobile devices by means of scanning. The QR is scanned using the camera.
  • Once the QR code is scanned, the application user will be notified for the results/indications:
    • indication in red colour for invalid certificates,
    • indication in yellow colour for valid certificates with a negative test result,
    • indication in green colour for valid certificates with a proof of vaccination or recovery.
  • The application displays only the indication with the corresponding colour, the full name and the date of birth of the certificate holder for identification purposes.
  • The information is displayed to checkers only until they leave the corresponding view in the application or within a timelapse of 15 seconds. No certificate content data is stored.

Use of the Camera

The user of the CovScan Application must give his/her permission for the use the camera. If the access to the camera is not granted the scanning of the QR code and the verification of the digital Covid-19 certificate will not be possible to take place.

Verification/Check Procedure by authorised officers

During the checks at the points of entry of an EU Member State, the authorised officers shall be able to proceed to the necessary verification of the authenticity, integrity and validity of the QR code, using verifying handheld devices. This ensures that during the verification process the data contained in the digital Covid-19 certificate shall not be further processed or/and stored.

In the cases, specified by the Infectious Diseases (Determination of Measures for the Prevention of the Spread of the COVID-19 Coronavirus Decree of 2021) Decrees, issued by the Minister of Health, the authorised officers shall be able to procced with the required verifications/checks through the use of the CovScan application.

Disclaimer

By accepting the Terms and Conditions you agree to adhere to the following:

  • users/travellers undertake to check the conditions, travel directives, measures and epidemiological situation of the Republic of Cyprus;
  • the digital certificate users/travellers undertake and accept full responsibility for their travel arrangements and the safety of their personal health and agree to hold harmless from any loss, liability, damages or costs that they may incur due their travel and stay at the Republic of Cyprus, as a result to the redispersion of Covid-19 or/and for any inconvenience they will be suffered, including their travel companions/family members (if any) under 18;
  • neither the Republic of Cyprus nor its authorised officers shall be held responsible for any loss, harm, property damage or bodily injury, including death of you or your travel companions/family members (if any) under 18 and you have to be fully aware of the risks connected to your flight and stay at the Republic of Cyprus, due to the prescribed measures for the protection of public health or the redispersion of Covid-19.