F2The relevant authorityF3... shall collect personal data for the purpose of carrying out their respective management control, monitoring and evaluation obligations under this Regulation, and in particular those laid down in Titles VI and VII, and shall not process this data in a way which is incompatible with this purpose.

Where personal data are processed for monitoring and evaluation purposes under Title VII using the secure electronic system referred to in Article 85, they shall be made anonymous, and processed in aggregated form only.

Personal data shall be processed in accordance with the rules of F7Directive 95/46/EC and Regulation (EC) No 45/2001F7Regulation (EU) No 2016/679 and the Data Protection Act 2018. In particular, such data shall not be stored in a form which permits identification of data subjects for longer than is necessary for the purposes for which they were collected or for which they are further processed, taking into account the minimum retention periods laid down in the F4law as it applies in the constituent nation.

F2The relevant authority shall inform the data subjects that their personal data may be processed by F5public bodies in accordance with paragraph 1 and that in this respect they enjoy the rights set out in the data protection rules of, respectively, F8Directive 95/46/EC and Regulation (EC) No 45/2001F8Regulation (EU) No 2016/679 and the Data Protection Act 2018.

Articles 111 to 114 in Regulation(EU) 1306/2013 shall apply to this Article.