Personal data in the EU Customs Data Hub
Article 44
1. The personal data of the following categories of data subjects may be processed in the EU Customs Data Hub, exclusively and to the extent necessary for the purposes laid down in Article 41: (a) data subjects registered or applying for registration in accordance with Article 26(1), (3) or (4); (b) data subjects other than those referred to in point (a) of this paragraph who are occasionally involved in activities covered by the customs legislation or by other legislation applied by the customs authorities, or whose personal data is contained in the data collected for risk management purposes pursuant to Article 55(3), point (a); (c) data subjects whose personal information is contained in the supporting documents referred to in Article 76, or in any additional evidence required for the fulfilment of the obligations imposed by the customs legislation and other legislation applied by the customs authorities; (d) authorised staff of customs authorities, of other competent authorities or of any other relevant authority or authorised body whose personal information is necessary to ensure appropriate control and supervision of the access to the information in the EU Customs Data Hub; (e) staff or authorised third parties working on behalf of the Commission, the EU Customs Authority or other Union bodies, offices or agencies authorised to access the EU Customs Data Hub. 2. The following categories of personal data may be processed in the EU Customs Data Hub in accordance with Article 41: (a) personal data in the EU Customs Data model referred to in Article 49, and those collected for risk management purposes pursuant to Article 55(3), point (a), namely: (i) identification data; (ii) contact data, namely address and electronic contact details; (iii) identity document (ID) data; (iv) financial and payment data; (v) location and transport data; (vi) employment or work position data; (vii) data contained in powers of attorney or their supporting documents; (viii) employee data; (ix) electronic identification data; (x) customs representation data; (xi) identification data of customs representative; (xii) customs transaction data; (xiii) user technical data; (xiv) law infringement and offences data; (xv) control results and mitigation results data; (b) personal data required to ensure a proper identification of the staff authorised to process data in the EU Customs Data Hub referred to in paragraph 1, points (d) and (e), of this Article, namely: (i) identification data; (ii) contact data, namely address and electronic contact details; (iii) identity document (ID) data; (iv) employment or work position data; (v) data contained in powers of attorney or their supporting documents; (vi) employee data; (vii) electronic identification data; (viii) user technical data.