Registered exporter database: data protection
Article 83
1. The data registered in the REX system shall be processed solely for the purpose of the application of the GSP scheme as set out in this Subsection. 2. Registered exporters shall be provided with the information laid down in Article 11(1)(a) to (e) of Regulation (EC) No 45/2001 of the European Parliament and of the Council ( 14 ) or Article 10 of Directive 95/46/EC of the European Parliament and of the Council ( 15 ) . In addition, they shall also be provided with the following information: (a) information concerning the legal basis of the processing operations for which the data is intended; (b) the data retention period. Registered exporters shall be provided with that information via a notice attached to the application to become a registered exporter as set out in Annex 22-06. 3. Each competent authority in a beneficiary country and each customs authority in a Member State that has introduced data into the REX system shall be considered the controller with respect to the processing of those data. The Commission shall be considered as a joint controller with respect to the processing of all data to guarantee that the registered exporter will obtain his rights. 4. The rights of registered exporters with regard to the processing of data which is stored in the REX system listed in Annex 22-06 and processed in national systems shall be exercised in accordance with the data protection legislation implementing Directive 95/46/EC of the Member State which is storing their data. 5. Member States who replicate in their national systems the data of the REX system they have access to shall keep the replicated data-up-to date. 6. The rights of registered exporters with regard to the processing of their registration data by the Commission shall be exercised in accordance with Regulation (EC) No 45/2001. 7. Any request by a registered exporter to exercise the right of access, rectification, erasure or blocking of data in accordance with Regulation (EC) No 45/2001 shall be submitted to and processed by the controller of data. Where a registered exporter has submitted such a request to the Commission without having tried to obtain his rights from the controller of data, the Commission shall forward that request to the controller of data of the registered exporter. If the registered exporter fails to obtain his rights from the controller of data, the registered exporter shall submit such request to the Commission acting as controller. The Commission shall have the right to rectify, erase or block the data. 8. The national supervisory data protection authorities and the European Data Protection Supervisor, each acting within the scope of their respective competence, shall cooperate and ensure coordinated supervision of the registration data. They shall, each acting within the scope of their respective competences, exchange relevant information, assist each other in carrying out audits and inspections, examine difficulties of interpretation or application of this Regulation, study problems with the exercise of independent supervision or in the exercise of the rights of data subjects, draw up harmonised proposals for joint solutions to any problems and promote awareness of data protection rights, as necessary.