Processing of personal data
Article 4
1. Processing of personal data may take place in the interface only for the following purposes: (a) enabling information to be exchanged between national customs systems and ICSMS for the control of products entering the Union market in accordance with Articles 25 to 28 of Regulation (EU) 2019/1020; (b) performing the transformation of data, where necessary, to ensure alignment of customs and non-customs terminology and thereby enabling the exchange of information referred to in point (a). 2. The interface may process personal data only for the following categories of data subjects: (a) natural persons whose personal information is contained in the customs declaration; (b) natural persons whose personal information is contained in the supporting documents or in any other additional documentary evidence required for the verification of compliance with Union law of the products subject to the customs declaration; (c) authorised staff of customs authorities and market surveillance authorities or any other relevant authority or authorised body whose personal information is contained in any documents referred to in points (a) and (b); (d) Commission staff and third party providers acting on behalf of the Commission that perform operations and maintenance activities related to the interface. 3. The interface may process only the following categories of personal data: (a) name and contact information (including address, country code, e-mail, telephone) or identification number of the natural persons referred to in paragraph 2, points (a) and (b); (b) name, contact information (including address, country code, e-mail, telephone) and signature of the authorised staff referred to in paragraph 2, points (c) and (d). 4. The transformation of personal data referred to in paragraph 1, point (b), shall be performed using information technology infrastructure located in the Union.