# C_2021504EN.01004001.xml

| 14.12.2021 | EN | Official Journal of the European Union | C 504/40 |
| --- | --- | --- | --- |

14.12.2021

EN

Official Journal of the European Union

C 504/40

---

Notice for the attention of the data subjects to whom the restrictive measures provided for in Council Decision (CFSP) 2020/1999 and Council Regulation (EU) 2020/1998 concerning restrictive measures against serious human rights violations and abuses apply

(2021/C 504/13)

The attention of data subjects is drawn to the following information in accordance with Article 16 of Regulation (EU) 2018/1725 of the European Parliament and of the Council (1).

The legal basis for this processing operation are Decision (CFSP) 2020/1999 (2), as amended by Council Decision (CFSP) 2021/2197 (3), and Regulation (EU) 2020/1998 (4), as implemented by Council Implementing Regulation (EU) 2021/2195 (5).

The controller of this processing operation is the Department RELEX.1.C in the Directorate-General for External Relations - RELEX of the General Secretariat of the Council (GSC), that can be contacted at:

| Council of the European Union |
| --- |
| General Secretariat |
| RELEX.1.C |
| Rue de la Loi/Wetstraat 175 |
| 1048 Bruxelles/Brussel |
| BELGIQUE/BELGIË |

Council of the European Union

General Secretariat

RELEX.1.C

Rue de la Loi/Wetstraat 175

1048 Bruxelles/Brussel

BELGIQUE/BELGIË

Email: sanctions@consilium.europa.eu

The GSC’s Data Protection Officer can be contacted at:

Data Protection Officer

data.protection@consilium.europa.eu

The purpose of the processing operation is the establishment and updating of the list of persons subject to restrictive measures in accordance with Decision (CFSP) 2020/1999, as amended by Decision (CFSP) 2021/2197, and Regulation (EU) 2020/1998 as implemented by Implementing Regulation (EU) 2021/2195, concerning restrictive measures against serious human rights violations and abuses.

The data subjects are the natural persons who fulfil the listing criteria as laid down in Decision (CFSP) 2020/1999 and Regulation (EU) 2020/1998.

The personal data collected includes data necessary for the correct identification of the person concerned, the statement of reasons and any other data related thereto.

The personal data collected may be shared as necessary with the European External Action Service and the Commission.

Without prejudice to restrictions pursuant to Article 25 of Regulation (EU) 2018/1725, the exercise of the rights of the data subjects such as the right of access, as well as the rights to rectification or to object will be answered in accordance with Regulation (EU) 2018/1725.

Personal data will be retained for 5 years from the moment the data subject has been removed from the list of persons subject to the restrictive measures or the validity of the measure has expired, or for the duration of court proceedings in the event they had been started.

Without prejudice to any judicial, administrative or non-judicial remedy, data subjects may lodge a complaint with the European Data Protection Supervisor in accordance with Regulation (EU) 2018/1725 (edps@edps.europa.eu).

---

(1)  OJ L 295, 21.11.2018, p. 39.

(2)  OJ L 410 I , 7.12.2020, p. 13.

(3)  OJ L 445 I, 13.12.2021, p. 17.

(4)  OJ L 410 I , 7.12.2020, p. 1.

(5)  OJ L 445 I, 13.12.2021, p. 10.

---