Data protection
Article 3
1. The Member States and the Commission shall process and make public the personal data received in the course of the procedures for registration, approval of amendments, cancellation, opposition, granting of transitional period and control pursuant to this Regulation and Regulations (EU) No 1308/2013 and (EU) 2019/787, in accordance with Regulations (EU) 2018/1725 and (EU) 2016/679. 2. The Commission shall be a controller within the meaning of Regulation (EU) 2018/1725 in relation to the processing of personal data in the procedure it is competent for in accordance with Regulations (EU) 2019/787 and (EU) No 1308/2013 and this Regulation. 3. The competent authorities of the Member States shall be controllers within the meaning of Regulation (EU) 2016/679 in relation to the processing of personal data in the procedures they are competent for in accordance with Regulations (EU) 2019/787 and (EU) No 1308/2013 and this Regulation. 4. The European Union Intellectual Property Office (EUIPO) shall be a ‘processor’ within the meaning of Regulation (EU) 2018/1725 in relation to the processing of personal data linked to the Union register of geographical indications.