FantasticSearch

1. The data subject shall have the right to obtain from the EPPO without undue delay the rectification of inaccurate operational personal data relating to him/her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete operational personal data completed, including by means of providing a supplementary statement.

2. The EPPO shall erase operational personal data without undue delay and the data subject shall have the right to obtain from the EPPO the erasure of operational personal data concerning him/her without undue delay where processing infringes Article 47, 49 or 55, or where operational personal data must be erased in order to comply with a legal obligation to which the EPPO is subject.

3. Instead of erasure, the EPPO shall restrict processing where:

(a) the accuracy of the operational personal data is contested by the data subject and their accuracy or inaccuracy cannot be ascertained; or (b) the operational personal data must be maintained for the purposes of evidence.

Where processing is restricted pursuant to point (a) of the first subparagraph, the EPPO shall inform the data subject before lifting the restriction of processing.

4. Where processing has been restricted under paragraph 3, such operational personal data shall, with the exception of storage, only be processed for the protection of the rights of the data subject or another natural or legal person who is a party of the proceedings of the EPPO, or for the purposes laid down in point (b) of paragraph 3.

5. The EPPO shall inform the data subject in writing of any refusal of rectification or erasure of operational personal data or restriction of processing and of the reasons for the refusal. The EPPO may restrict, wholly or partly, the obligation to provide such information to the extent that such a restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and legitimate interests of the natural person concerned in order to:

(a) avoid obstructing official or legal inquiries, investigations or procedures;

(b) avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties;

(c) protect public security of the Member States of the European Union;

(d) protect national security of the Member States of the European Union;

(e) protect the rights and freedoms of others. The EPPO shall inform the data subject of the possibility of lodging a complaint with the European Data Protection Supervisor or of seeking a judicial remedy from the Court of Justice against the EPPO’s decision.

6. The EPPO shall communicate the rectification of inaccurate operational personal data to the competent authority from which the inaccurate operational personal data originate.

7. The EPPO shall, where operational personal data has been rectified or erased or processing has been restricted pursuant to paragraphs 1, 2 and 3, notify the recipients and inform them that they have to rectify or erase the operational personal data or restrict processing of the operational personal data under their responsibility.