# C_2023025EN.01000901.xml

| 24.1.2023 | EN | Official Journal of the European Union | C 25/9 |
| --- | --- | --- | --- |

24.1.2023

EN

Official Journal of the European Union

C 25/9

---

Notice for the attention of the data subjects to whom the restrictive measures provided for in Council Decision 2011/235/CFSP and Council Regulation (EU) No 359/2011 concerning restrictive measures directed against certain persons, entities and bodies in view of the situation in Iran apply

(2023/C 25/08)

The attention of data subjects is drawn to the following information in accordance with Article 16 of Regulation (EU) 2018/1725 of the European Parliament and of the Council (1).

The legal basis for this processing operation are Council Decision 2011/235/CFSP (2), as implemented by Council Implementing Decision (CFSP) 2023/153 (3), and Council Regulation (EU) No 359/2011 (4), as implemented by Council Implementing Regulation (EU) 2023/152 (5).

The controller of this processing operation is RELEX.1 in the Directorate-General for External Relations - RELEX of the General Secretariat of the Council (GSC), that can be contacted at:

| Council of the European Union |
| --- |
| General Secretariat |
| RELEX.1 |
| Rue de la Loi/Wetstraat 175 |
| 1048 Bruxelles/Brussel |
| BELGIQUE/BELGIË |

Council of the European Union

General Secretariat

RELEX.1

Rue de la Loi/Wetstraat 175

1048 Bruxelles/Brussel

BELGIQUE/BELGIË

Email: sanctions@consilium.europa.eu

The GSC's Data Protection Officer can be contacted at:

Data Protection Officer

data.protection@consilium.europa.eu

The purpose of the processing operation is the establishment and updating of the list of persons subject to restrictive measures in accordance with Decision 2011/235/CFSP, as implemented by Implementing Decision (CFSP) 2023/153, and Regulation (EU) No 359/2011, as implemented by Implementing Regulation (EU) 2023/152.

The data subjects are the natural persons who fulfil the listing criteria as laid down in Decision 2011/235/CFSP and Regulation (EU) No 359/2011.

The personal data collected includes data necessary for the correct identification of the person concerned, the statement of reasons and any other data related thereto.

The personal data collected may be shared as necessary with the European External Action Service and the Commission.

Without prejudice to restrictions pursuant to Article 25 of Regulation (EU) 2018/1725, the exercise of the rights of the data subjects such as the right of access, as well as the rights to rectification or to object will be answered in accordance with Regulation (EU) 2018/1725.

Personal data will be retained for 5 years from the moment the data subject has been removed from the list of persons subject to the restrictive measures or the validity of the measure has expired, or for the duration of court proceedings in the event they had been started.

Without prejudice to any judicial, administrative or non-judicial remedy, data subjects may lodge a complaint with the European Data Protection Supervisor in accordance with Regulation (EU) 2018/1725 (edps@edps.europa.eu).

---

(1)  OJ L 295, 21.11.2018, p. 39.

(2)  OJ L 100, 14.4.2011, p. 51.

(3)  OJ L 20 I, 23.1.2023, p. 23.

(4)  OJ L 100, 14.4.2011, p. 1.

(5)  OJ L 20 I, 23.1.2023, p. 1.

---