. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Processing of personal data by the Commissioners for Her Majesty’s Revenue and Customs shall be carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data shall be collected and used solely for the purposes of this Regulation. Personal data so collected shall be accurate and shall be kept up to date.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Personal data shall not be kept longer than six months from the date the relevant decision granting the application has been revoked or the relevant period during which the customs authorities are to take action has expired.

Where the holder of the decision has initiated proceedings in accordance with Article 23(3) or Article 26(9) and has notified the customs authorities of the initiation of such proceedings, personal data shall be kept for six months after proceedings have determined in a final way whether an intellectual property right has been infringed.