6. The customs authorities shall introduce into the central database information related to the applications submitted to the competent customs department. The customs authorities which have introduced information into the central database shall, where necessary, amend, supplement, correct or delete such information. Each customs authority that has introduced information in the central database shall be responsible for the accuracy, adequacy and relevancy of this information.
7. The Commission shall establish and maintain adequate technical and organisational arrangements for the reliable and secure operation of the central database. The customs authorities of each Member State shall establish and maintain adequate technical and organisational arrangements to ensure the confidentiality and security of processing with respect to the processing operations carried out by their customs authorities and with respect to terminals of the central database located on the territory of that Member State.
Article 32
Establishment of a central database
The Commission shall establish the central database referred to in Article 31. That database shall be operational as soon as possible and not later than 1 January 2015.
Article 33
Data protection provisions
1. The processing of personal data in the central database of the Commission shall be carried out in accordance with Regulation (EC) No 45/2001 and under the supervision of the European Data Protection Supervisor.
2. Processing of personal data by the competent authorities in the Member States shall be carried out in accordance with Directive 95/46/EC and under the supervision of the public independent authority of the Member State referred to in Article 28 of that Directive.
3. Personal data shall be collected and used solely for the purposes of this Regulation. Personal data so collected shall be accurate and shall be kept up to date.
4. Each customs authority that has introduced personal data into the central database shall be the controller with respect to the processing of this data.
5. A data subject shall have a right of access to the personal data relating to him or her that are processed through the central database and, where appropriate, the right to the rectification, erasure or blocking of personal data in accordance with Regulation (EC) No 45/2001 or the national laws implementing Directive 95/46/EC.
6. All requests for the exercise of the right of access, rectification, erasure or blocking shall be submitted to and processed by the customs authorities. Where a data subject has submitted a request for the exercise of that right to the Commission, the Commission shall forward such request to the customs authorities concerned.
7. Personal data shall not be kept longer than six months from the date the relevant decision granting the application has been revoked or the relevant period during which the customs authorities are to take action has expired.
8. Where the holder of the decision has initiated proceedings in accordance with Article 23(3) or Article 26(9) and has notified the customs authorities of the initiation of such proceedings, personal data shall be kept for six months after proceedings have determined in a final way whether an intellectual property right has been infringed.