FantasticSearch

1. The Commission, the Agency and the competent authorities of Member States shall exchange relevant data and information available to them regarding joint control and inspection activities within the territory of Member States and Union and international waters in accordance with Regulation (EC) No 1224/2009.

2. The Agency shall take, in accordance with the relevant Union legislation, measures to ensure appropriate protection of the confidentiality of the information collected or received pursuant to this Regulation in accordance with Article 113 of Regulation (EC) No 1224/2009.

3. Regulation (EU) 2018/1725 of the European Parliament and of the Council () shall apply to the processing of personal data carried out by the Agency.

4. In relation to the processing of personal data collected or received by the Agency in the accomplishment of its missions and tasks set out in Chapter II of this Regulation, the Agency shall be regarded as a controller as defined in Article 3, point (8), of Regulation (EU) 2018/1725.

5. Personal data collected or received by the Agency may only be processed for the purpose of fulfilling its mission and tasks set out in Chapter II of this Regulation, provided those purposes cannot be fulfilled with data that do not permit identification of data subjects.

6. Personal data collected or received shall not be stored for a period longer than necessary for the purposes referred to in paragraph 5, and in any event for no longer than five years from the date on which the Agency receives the relevant data.

7. By way of derogation from paragraph 6, personal data collected or received shall not be stored for a period longer than necessary for the purposes referred to in paragraph 5 relating to:

(a) participation in, or coordination of, control and inspections; or (b) enquiries pertaining to complaints, infringements and judicial or administrative proceedings. In any event, the personal data referred to in the first subparagraph shall be stored for no longer than until the end of the proceedings and enquiries referred to in the first subparagraph. If the information is retained for a period of time longer than that set out in paragraph 6 or in this paragraph, the personal data shall be anonymised.

8. The transfer of personal data contained in fishing activity data to a third country or to an international organisation shall only be performed in accordance with Chapter V of Regulation (EU) 2018/1725 and in compliance with agreement with that third country or with the applicable rules of that international organisation.