General principles for the contents and quality of data
Article 3
1. The data transmitted to the EURES portal in accordance with Regulation (EU) 2016/589 and this Decision is indexed, stored and made available there solely for search and matching purposes during the period of validity set by the originator or the EURES data holder of the individual data. Data that has been anonymised may be stored and released, also to third parties, for research and statistical purposes even after the expiry of the period of validity. 2. The transmission of data to the EURES portal shall not affect the rights to the data held by the originators of the data or the EURES data holders, in accordance with the laws, regulations and agreements applicable through the whole chain of transmission from the originator of data to the EURES portal. 3. Personal data transmitted to and stored on the EURES portal may only be released to the extent consented by the originator of the data. It may only be released to EURES Members and Partners or to end users, who have registered on the EURES portal or with a EURES Member or Partner providing them access to the data through the application interfaces referred to in Article 2(4), provided that these end users have accepted terms and conditions that are fully compliant with the consent and agreements given by the originators of the data. 4. Employers may implicitly or explicitly cede or renounce the rights to the data contained in a job vacancy apart from any personal information therein. A worker shall keep the rights to his or her personal data and shall, at all times, be able to withdraw his or her consent to make the information public and to delete, modify or otherwise process parts or all of the data transmitted to the EURES portal. The same shall apply with regard to employers for any personal data contained in a job vacancy 5. It is the responsibility of the National Coordination Offices and the EURES Members and, where relevant, EURES Partners to ensure that all data passing via them for the purpose of being provided to the EURES portal is compliant with Regulation (EU) 2016/589, this Decision and any other laws and regulations applicable, in particular with regard to the protection of personal data, that originators of data or EURES data holders are informed about how their data will be used and processed and that all necessary consents and permission have been obtained. The origin of the data and any modifications of it as well as the consent given must be traceable throughout the whole chain of transmission from the originator to the EURES portal. 6. The European Coordination Office shall be the ‘controller’ within the meaning of Regulation (EC) No 45/2001 in relation to personal data stored on the EURES portal. It shall be responsible under that Regulation for the processing of personal data, including the anonymisation process referred to in paragraph 1, and for the technical and organisational measures necessary to ensure adequate security, confidentiality and integrity of the data concerned. 7. The Coordination Group shall elaborate and agree on common minimum requirements regarding personal data protection statements, terms and conditions to be applied by the European Coordination Office, the National Coordination Offices, the EURES Members and, where relevant, the EURES Partners in order to fulfil the requirements laid down in Regulation (EU) 2016/589 of informed consent by originators of data or EURES data holders and to ensure uniform terms and conditions for access to the data.