# Official Journal L 301/2011

| | ISSN 1977-0677
  doi:10.3000/19770677.L_2011.301.eng |
| --- | --- |
| Official Journal
  of the European Union | L 301 |
| | |
| English edition | Legislation | Volume 5418 November 2011 |

ISSN 1977-0677

doi:10.3000/19770677.L_2011.301.eng

Official Journal

of the European Union

L 301

English edition

Legislation

Volume 5418 November 2011

---

| Contents | | I   Legislative acts | page |
| --- | --- | --- | --- |
| | | DIRECTIVES |
| | * | Directive 2011/87/EU of the European Parliament and of the Council of 16 November 2011 amending Directive 2000/25/EC as regards the application of emission stages for narrow-track tractors (
  1
  ) | 1 |

Contents

I   Legislative acts

page

DIRECTIVES

*

Directive 2011/87/EU of the European Parliament and of the Council of 16 November 2011 amending Directive 2000/25/EC as regards the application of emission stages for narrow-track tractors (
  1
  )

1

1

| | | II   Non-legislative acts |
| --- | --- | --- |
| | | REGULATIONS |
| | * | Commission Implementing Regulation (EU) No 1179/2011 of 17 November 2011 laying down technical specifications for online collection systems pursuant to Regulation (EU) No 211/2011 of the European Parliament and of the Council on the citizens’ initiative | 3 |
| | | Commission Implementing Regulation (EU) No 1180/2011 of 17 November 2011 establishing the standard import values for determining the entry price of certain fruit and vegetables | 10 |
| | | Commission Implementing Regulation (EU) No 1181/2011 of 17 November 2011 on the issue of import licences for applications submitted in the first seven days of November 2011 under the tariff quota for high-quality beef administered by Regulation (EC) No 620/2009 | 12 |
| | | Commission Implementing Regulation (EU) No 1182/2011 of 17 November 2011 fixing representative prices in the poultrymeat and egg sectors and for egg albumin, and amending Regulation (EC) No 1484/95 | 13 |

II   Non-legislative acts

REGULATIONS

*

Commission Implementing Regulation (EU) No 1179/2011 of 17 November 2011 laying down technical specifications for online collection systems pursuant to Regulation (EU) No 211/2011 of the European Parliament and of the Council on the citizens’ initiative

3

Commission Implementing Regulation (EU) No 1180/2011 of 17 November 2011 establishing the standard import values for determining the entry price of certain fruit and vegetables

10

Commission Implementing Regulation (EU) No 1181/2011 of 17 November 2011 on the issue of import licences for applications submitted in the first seven days of November 2011 under the tariff quota for high-quality beef administered by Regulation (EC) No 620/2009

12

Commission Implementing Regulation (EU) No 1182/2011 of 17 November 2011 fixing representative prices in the poultrymeat and egg sectors and for egg albumin, and amending Regulation (EC) No 1484/95

13

| | |
| --- | --- |
| | (1)   Text with EEA relevance |

---

(1)   Text with EEA relevance

1

| EN | Acts whose titles are printed in light type are those relating to day-to-day management of agricultural matters, and are generally valid for a limited period.
  The titles of all other Acts are printed in bold type and preceded by an asterisk. |
| --- | --- |

EN

Acts whose titles are printed in light type are those relating to day-to-day management of agricultural matters, and are generally valid for a limited period.

The titles of all other Acts are printed in bold type and preceded by an asterisk.

---

I Legislative acts

DIRECTIVES

| 18.11.2011 | EN | Official Journal of the European Union | L 301/1 |
| --- | --- | --- | --- |

18.11.2011

EN

Official Journal of the European Union

L 301/1

---

DIRECTIVE 2011/87/EU OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL

of 16 November 2011

amending Directive 2000/25/EC as regards the application of emission stages for narrow-track tractors

(Text with EEA relevance)

THE EUROPEAN PARLIAMENT AND THE COUNCIL OF THE EUROPEAN UNION,

Having regard to the Treaty on Functioning of European Union, and in particular Article 114 thereof,

Having regard to the proposal from the European Commission,

After transmission of the draft legislative act to the national parliaments,

Having regard to the opinion of the European Economic and Social Committee (1),

Acting in accordance with the ordinary legislative procedure (2),

Whereas:

| (1) | Directive 2000/25/EC of the European Parliament and of the Council of 22 May 2000 on action to be taken against the emission of gaseous and particulate pollutants by engines intended to power agricultural or forestry tractors (3) regulates exhaust emissions from engines installed in agricultural and forestry tractors with a view to further safeguarding human health and the environment. Directive 2000/25/EC provided that the emission limits applicable in 2010 for type-approval of the majority of compression ignition engines, referred to as Stage III A, were to be replaced by the more stringent Stage III B limits, entering into force progressively as from 1 January 2010 as regards the type-approval, and from 1 January 2011 with regard to the placing on the market, for those engines. Stage IV, providing for emission limits more stringent than Stage III B, will enter into force progressively as from 1 January 2013 as regards the type-approval for those engines and from 1 January 2014 with regard to the placing on the market. |
| --- | --- |

(1)

Directive 2000/25/EC of the European Parliament and of the Council of 22 May 2000 on action to be taken against the emission of gaseous and particulate pollutants by engines intended to power agricultural or forestry tractors (3) regulates exhaust emissions from engines installed in agricultural and forestry tractors with a view to further safeguarding human health and the environment. Directive 2000/25/EC provided that the emission limits applicable in 2010 for type-approval of the majority of compression ignition engines, referred to as Stage III A, were to be replaced by the more stringent Stage III B limits, entering into force progressively as from 1 January 2010 as regards the type-approval, and from 1 January 2011 with regard to the placing on the market, for those engines. Stage IV, providing for emission limits more stringent than Stage III B, will enter into force progressively as from 1 January 2013 as regards the type-approval for those engines and from 1 January 2014 with regard to the placing on the market.

| (2) | Article 2(b) of Directive 2004/26/EC of the European Parliament and of the Council of 21 April 2004 amending Directive 97/68/EC on the approximation of the laws of the Member States relating to measures against the emission of gaseous and particulate pollutants from internal combustion engines to be installed in non-road mobile machinery (4), provides that the Commission is to consider the available technology, including the cost/benefits, with a view to confirming Stage III B and IV limit values and evaluating the possible need for additional flexibilities, exemptions or later introduction dates for certain types of equipment or engines and taking into account engines installed in non-road mobile machinery used in seasonal applications. Moreover, Article 4(8) of Directive 2000/25/EC provides for a review clause in order to take into account the specificities of tractors of categories T2, T4.1 and C2. |
| --- | --- |

(2)

Article 2(b) of Directive 2004/26/EC of the European Parliament and of the Council of 21 April 2004 amending Directive 97/68/EC on the approximation of the laws of the Member States relating to measures against the emission of gaseous and particulate pollutants from internal combustion engines to be installed in non-road mobile machinery (4), provides that the Commission is to consider the available technology, including the cost/benefits, with a view to confirming Stage III B and IV limit values and evaluating the possible need for additional flexibilities, exemptions or later introduction dates for certain types of equipment or engines and taking into account engines installed in non-road mobile machinery used in seasonal applications. Moreover, Article 4(8) of Directive 2000/25/EC provides for a review clause in order to take into account the specificities of tractors of categories T2, T4.1 and C2.

| (3) | Directive 97/68/EC of the European Parliament and of the Council (5) was the subject of several technical studies. As a result of those technical studies carried out in 2007, 2009 and 2010 and confirmed by the impact assessment carried out by the Commission, it was established that it is not technically feasible for tractors of categories T2, T4.1 and C2 to meet the requirements of Stages III B and IV by the dates set out in that Directive. |
| --- | --- |

(3)

Directive 97/68/EC of the European Parliament and of the Council (5) was the subject of several technical studies. As a result of those technical studies carried out in 2007, 2009 and 2010 and confirmed by the impact assessment carried out by the Commission, it was established that it is not technically feasible for tractors of categories T2, T4.1 and C2 to meet the requirements of Stages III B and IV by the dates set out in that Directive.

| (4) | In order to prevent Union legislation from prescribing technical requirements which cannot be met yet and in order to prevent a situation in which tractors of categories T2, T4.1 and C2 can no longer be type-approved and placed on the market or put into service, it is necessary to provide for a transitional period of 3 years, during which tractors of categories T2, T4.1 and C2 may still be type-approved and placed on the market or put into service. |
| --- | --- |

(4)

In order to prevent Union legislation from prescribing technical requirements which cannot be met yet and in order to prevent a situation in which tractors of categories T2, T4.1 and C2 can no longer be type-approved and placed on the market or put into service, it is necessary to provide for a transitional period of 3 years, during which tractors of categories T2, T4.1 and C2 may still be type-approved and placed on the market or put into service.

| (5) | The Commission should report annually to the European Parliament and the Council on progress in the development of technical solutions for Stage IV-compliant technology. |
| --- | --- |

(5)

The Commission should report annually to the European Parliament and the Council on progress in the development of technical solutions for Stage IV-compliant technology.

| (6) | Directive 2000/25/EC should therefore be amended accordingly, |
| --- | --- |

(6)

Directive 2000/25/EC should therefore be amended accordingly,

HAVE ADOPTED THIS DIRECTIVE:

Article 1

Amendments to Directive 2000/25/EC

In Article 4 of Directive 2000/25/EC, the following paragraph is added:

‘9.   By way of derogation, the dates set out in points (d) and (e) of paragraph 2 and in paragraph 3 shall, for tractors of categories T2, T4.1 and C2, as defined respectively in the second indent of point A.1 of Chapter A, in point 1.1 of Part I of Appendix 1 of Chapter B, and in point A.2 of Chapter A of Annex II to Directive 2003/37/EC, and equipped with engines of categories L to R, be postponed for 3 years. Until such dates, the requirements of Stage III A in this Directive shall continue to apply.’.

Article 2

Availability of compatible technology

The Commission shall, by 31 December 2014, consider what technology is available that is capable of meeting Stage IV requirements and that is compatible with the needs of categories T2, T4.1 and C2, and submit, where appropriate, proposals to the European Parliament and the Council.

Article 3

Transposition

1.   Member States shall adopt and publish, by 9 December 2012 at the latest, the laws, regulations and administrative provisions necessary to comply with this Directive. They shall forthwith communicate to the Commission the text of those measures.

When Member States adopt those measures, they shall contain a reference to this Directive or be accompanied by such a reference on the occasion of their official publication. Member States shall determine how such reference is to be made.

2.   Member States shall forthwith communicate to the Commission the text of the main provisions of national law which they adopt in the field covered by this Directive.

Article 4

Entry into force

This Directive shall enter into force on the 20th day following its publication in the Official Journal of the European Union.

Official Journal of the European Union

Article 5

Addressees

This Directive is addressed to the Member States.

Done at Strasbourg, 16 November 2011.

For the European Parliament

The President

J. BUZEK

For the Council

The President

W. SZCZUKA

---

(1)  
  OJ C 132, 3.5.2011, p. 53.

1

(2)  Position of the European Parliament of 25 October 2011 (not yet published in the Official Journal) and decision of the Council of 8 November 2011.

2

(3)  
  OJ L 173, 12.7.2000, p. 1.

3

(4)  
  OJ L 146, 30.4.2004, p. 1.

4

(5)  
  OJ L 59, 27.2.1998, p. 1.

5

---

II Non-legislative acts

REGULATIONS

| 18.11.2011 | EN | Official Journal of the European Union | L 301/3 |
| --- | --- | --- | --- |

18.11.2011

EN

Official Journal of the European Union

L 301/3

---

COMMISSION IMPLEMENTING REGULATION (EU) No 1179/2011

of 17 November 2011

laying down technical specifications for online collection systems pursuant to Regulation (EU) No 211/2011 of the European Parliament and of the Council on the citizens’ initiative

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Regulation (EU) No 211/2011 of the European Parliament and of the Council of 16 February 2011 on the citizens’ initiative (1), and in particular Article 6(5) thereof,

After consulting the European Data Protection Supervisor,

Whereas:

| (1) | Regulation (EU) No 211/2011 provides that where statements of support are collected online, the system used for that purpose must satisfy certain security and technical requirements and must be certified by the competent authority of the relevant Member State. |
| --- | --- |

(1)

Regulation (EU) No 211/2011 provides that where statements of support are collected online, the system used for that purpose must satisfy certain security and technical requirements and must be certified by the competent authority of the relevant Member State.

| (2) | An online collection system within the meaning of Regulation (EU) No 211/2011 is an information system, consisting of software, hardware, hosting environment, business processes and staff in order to accomplish the online collection of statements of support. |
| --- | --- |

(2)

An online collection system within the meaning of Regulation (EU) No 211/2011 is an information system, consisting of software, hardware, hosting environment, business processes and staff in order to accomplish the online collection of statements of support.

| (3) | Regulation (EU) No 211/2011 sets out the requirements that online collection systems have to comply with in order to be certified and provides that the Commission should adopt technical specifications for implementing those requirements. |
| --- | --- |

(3)

Regulation (EU) No 211/2011 sets out the requirements that online collection systems have to comply with in order to be certified and provides that the Commission should adopt technical specifications for implementing those requirements.

| (4) | The Open Web Application Security Project’s (OWASP) Top 10 2010 project provides an overview of the most critical web application security risks as well as tools for addressing these risks; the technical specifications therefore draw upon the findings of this project. |
| --- | --- |

(4)

The Open Web Application Security Project’s (OWASP) Top 10 2010 project provides an overview of the most critical web application security risks as well as tools for addressing these risks; the technical specifications therefore draw upon the findings of this project.

| (5) | Implementation by the organisers of the technical specifications should guarantee certification of the online collection systems by the Member States’ authorities, and contribute to ensure the implementation of the appropriate technical and organisational measures required to comply with the obligations imposed by Directive 95/46/EC of the European Parliament and of the Council (2) on the security of the processing activities, both at the time of the design of the processing system and at the time of the processing itself, in order to maintain security and thereby to prevent any unauthorised processing and protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access. |
| --- | --- |

(5)

Implementation by the organisers of the technical specifications should guarantee certification of the online collection systems by the Member States’ authorities, and contribute to ensure the implementation of the appropriate technical and organisational measures required to comply with the obligations imposed by Directive 95/46/EC of the European Parliament and of the Council (2) on the security of the processing activities, both at the time of the design of the processing system and at the time of the processing itself, in order to maintain security and thereby to prevent any unauthorised processing and protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.

| (6) | The process of certification should be facilitated by the use by the organisers of the software provided by the Commission in accordance with Article 6(2) of Regulation (EU) No 211/2011. |
| --- | --- |

(6)

The process of certification should be facilitated by the use by the organisers of the software provided by the Commission in accordance with Article 6(2) of Regulation (EU) No 211/2011.

| (7) | Organisers of citizens’ initiatives, as data controllers, should, when collecting statements of support online, implement the technical specifications set out in this Regulation in order to ensure the protection of personal data processed. Where the processing is carried out by a processor, the organisers should ensure that the processor acts only on instructions from the organisers and that he implements the technical specifications set out in this Regulation. |
| --- | --- |

(7)

Organisers of citizens’ initiatives, as data controllers, should, when collecting statements of support online, implement the technical specifications set out in this Regulation in order to ensure the protection of personal data processed. Where the processing is carried out by a processor, the organisers should ensure that the processor acts only on instructions from the organisers and that he implements the technical specifications set out in this Regulation.

| (8) | This Regulation respects fundamental rights and observes the principles enshrined in the Charter of Fundamental Rights of the European Union, in particular Article 8 thereof, which states that everyone has the right to the protection of personal data concerning him or her. |
| --- | --- |

(8)

This Regulation respects fundamental rights and observes the principles enshrined in the Charter of Fundamental Rights of the European Union, in particular Article 8 thereof, which states that everyone has the right to the protection of personal data concerning him or her.

| (9) | The measures provided for in this Regulation are in accordance with the opinion of the Committee established under Article 20 of Regulation (EU) No 211/2011, |
| --- | --- |

(9)

The measures provided for in this Regulation are in accordance with the opinion of the Committee established under Article 20 of Regulation (EU) No 211/2011,

HAS ADOPTED THIS REGULATION:

Article 1

The technical specifications referred to in Article 6(5) of Regulation (EU) No 211/2011 are set out in the Annex.

Article 2

This Regulation shall enter into force on the 20th day following its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 17 November 2011.

For the Commission

The President

José Manuel BARROSO

---

(1)  
  OJ L 65, 11.3.2011, p. 1.

1

(2)  
  OJ L 281, 23.11.1995, p. 31.

2

---

ANNEX

1.   TECHNICAL SPECIFICATIONS AIMING AT IMPLEMENTING ARTICLE 6(4)(a) OF REGULATION (EU) No 211/2011

In order to prevent automated submission of a statement of support using the system, the signatory goes through an adequate verification process in line with current practice before submission of a statement of support. One possible verification process is the use of strong ‘captcha’.

2.   TECHNICAL SPECIFICATIONS AIMING AT IMPLEMENTING ARTICLE 6(4)(b) OF REGULATION (EU) No 211/2011

Information assurance standards

2.1.   Organisers provide documentation showing that they fulfil the requirements of standard ISO/IEC 27001, short of adoption. For that purpose, they have:

| (a) | performed a full risk assessment, which identifies the scope of the system, highlights business impact in case of various breaches in information assurance, enumerates the threats and vulnerabilities of the information system, produces a risk analysis document that also list countermeasures to avoid such threats and remedies that will be taken if a threat occurs, and finally draws up a prioritised list of improvements; |
| --- | --- |

(a)

performed a full risk assessment, which identifies the scope of the system, highlights business impact in case of various breaches in information assurance, enumerates the threats and vulnerabilities of the information system, produces a risk analysis document that also list countermeasures to avoid such threats and remedies that will be taken if a threat occurs, and finally draws up a prioritised list of improvements;

| (b) | designed and implemented measures for treating risks with regard to the protection of personal data and the protection of family and private life and measures that will be taken in the case risk occurs; |
| --- | --- |

(b)

designed and implemented measures for treating risks with regard to the protection of personal data and the protection of family and private life and measures that will be taken in the case risk occurs;

| (c) | identified the residual risks in writing; |
| --- | --- |

(c)

identified the residual risks in writing;

| (d) | provided the organisational means to receive feedback on new threats and security improvements. |
| --- | --- |

(d)

provided the organisational means to receive feedback on new threats and security improvements.

2.2.   Organisers choose security controls based on the risk analysis in 2.1(a) from the following standards:

| (1) | ISO/IEC 27002; or |
| --- | --- |

(1)

ISO/IEC 27002; or

| (2) | the Information Security Forum’s ‘Standard of Good Practice’
  to address the following issues:






  (a) | risk assessments (ISO/IEC 27005 or another specific and suitable risk assessment methodology are recommended); |
| --- | --- | --- |

(2)

the Information Security Forum’s ‘Standard of Good Practice’

to address the following issues:

(a)

risk assessments (ISO/IEC 27005 or another specific and suitable risk assessment methodology are recommended);

| (b) | physical and environmental security; |
| --- | --- |

(b)

physical and environmental security;

| (c) | human resources security; |
| --- | --- |

(c)

human resources security;

| (d) | communications and operations management; |
| --- | --- |

(d)

communications and operations management;

| (e) | standard access control measures, in addition to those set forth in this Regulation; |
| --- | --- |

(e)

standard access control measures, in addition to those set forth in this Regulation;

| (f) | information systems acquisition, development and maintenance; |
| --- | --- |

(f)

information systems acquisition, development and maintenance;

| (g) | information security incident management; |
| --- | --- |

(g)

information security incident management;

| (h) | measures to remedy and mitigate breaches in information systems which would result in the destruction or accidental loss, alteration, unauthorised disclosure or access of personal data processed; |
| --- | --- |

(h)

measures to remedy and mitigate breaches in information systems which would result in the destruction or accidental loss, alteration, unauthorised disclosure or access of personal data processed;

| (i) | compliance; |
| --- | --- |

(i)

compliance;

| (j) | computer network security (ISO/IEC 27033 or the SoGP are recommended). |
| --- | --- |

(j)

computer network security (ISO/IEC 27033 or the SoGP are recommended).

Application of these standards can be limited to the parts of the organisation that are relevant for the online collection system. For instance, human resources security can be limited to any staff that has physical or networking access to the online collection system, and physical/environmental security can be limited to the building(s) hosting the system.

Functional requirements

2.3.   The online collection system consists of a web-based application instance set up for the purpose of collecting statements of support for a single citizens’ initiative.

2.4.   If administering the system requires different roles, then different levels of access control are established according to the principle of least privilege.

2.5.   The publicly accessed features are clearly separated from the features destined for administration purposes. No access control hinders reading of the information available in the public area of the system, including information on the initiative and the electronic statement of support form. Signing up for an initiative is possible only via this public area.

2.6.   The system detects and prevents submission of duplicate statements of support.

Application level security

2.7.   The system is suitably protected against known vulnerabilities and exploits. For this purpose it satisfies, inter alia, the following requirements:

| 2.7.1. | The system guards against injection flaws such as structured query language (SQL) queries, lightweight directory access protocol (LDAP) queries, XML path language (XPath) queries, operating system (OS) commands or program arguments. For this purpose, it requires at least that:






  (a) | all user input is validated; |
| --- | --- | --- |

2.7.1.

The system guards against injection flaws such as structured query language (SQL) queries, lightweight directory access protocol (LDAP) queries, XML path language (XPath) queries, operating system (OS) commands or program arguments. For this purpose, it requires at least that:

(a)

all user input is validated;

| (b) | validation is performed at least by the server-side logic; |
| --- | --- |

(b)

validation is performed at least by the server-side logic;

| (c) | all use of interpreters clearly separates untrusted data from the command or query. For SQL calls, this means using bind variables in all prepared statements and stored procedures, and avoiding dynamic queries. |
| --- | --- |

(c)

all use of interpreters clearly separates untrusted data from the command or query. For SQL calls, this means using bind variables in all prepared statements and stored procedures, and avoiding dynamic queries.

| 2.7.2. | The system guards against cross-site scripting (XSS). For this purpose, it requires at least that:






  (a) | all user supplied input sent back to the browser is verified to be safe (via input validation); |
| --- | --- | --- |

2.7.2.

The system guards against cross-site scripting (XSS). For this purpose, it requires at least that:

(a)

all user supplied input sent back to the browser is verified to be safe (via input validation);

| (b) | all user input is properly escaped before it is included in the output page; |
| --- | --- |

(b)

all user input is properly escaped before it is included in the output page;

| (c) | proper output encoding ensures that such input is always treated as text in the browser. No active content is used. |
| --- | --- |

(c)

proper output encoding ensures that such input is always treated as text in the browser. No active content is used.

| 2.7.3. | The system has strong authentication and session management, which requires at least that:






  (a) | credentials are always protected when stored using hashing or encryption. The risk that someone authenticates using ‘pass-the-hash’ is mitigated; |
| --- | --- | --- |

2.7.3.

The system has strong authentication and session management, which requires at least that:

(a)

credentials are always protected when stored using hashing or encryption. The risk that someone authenticates using ‘pass-the-hash’ is mitigated;

| (b) | credentials cannot be guessed or overwritten through weak account management functions (e.g. account creation, change password, recover password, weak session identifiers (IDs)); |
| --- | --- |

(b)

credentials cannot be guessed or overwritten through weak account management functions (e.g. account creation, change password, recover password, weak session identifiers (IDs));

| (c) | session IDs and session data are not exposed in the uniform resource locator (URL); |
| --- | --- |

(c)

session IDs and session data are not exposed in the uniform resource locator (URL);

| (d) | session IDs are not vulnerable to session fixation attacks; |
| --- | --- |

(d)

session IDs are not vulnerable to session fixation attacks;

| (e) | session IDs timeout, which ensures that users log out; |
| --- | --- |

(e)

session IDs timeout, which ensures that users log out;

| (f) | session IDs are not rotated after successful login; |
| --- | --- |

(f)

session IDs are not rotated after successful login;

| (g) | passwords, session IDs, and other credentials are sent only over transport layer security (TLS); |
| --- | --- |

(g)

passwords, session IDs, and other credentials are sent only over transport layer security (TLS);

| (h) | the administration part of the system is protected. If it is protected by single-factor authentication, then the password is composed of a minimum of 10 characters, including at least one letter, one number and one special character. Alternatively two-factor authentication may be used. Where only single-factor authentication is used, it includes a two-step verification mechanism for accessing the administration part of the system via the Internet, in which the single factor is augmented by another means of authentication, such as a one-time pass-phrase/code via SMS or an asymmetrically encrypted random challenge string to be decrypted using the organisers’/administrators’ private key unknown to the system. |
| --- | --- |

(h)

the administration part of the system is protected. If it is protected by single-factor authentication, then the password is composed of a minimum of 10 characters, including at least one letter, one number and one special character. Alternatively two-factor authentication may be used. Where only single-factor authentication is used, it includes a two-step verification mechanism for accessing the administration part of the system via the Internet, in which the single factor is augmented by another means of authentication, such as a one-time pass-phrase/code via SMS or an asymmetrically encrypted random challenge string to be decrypted using the organisers’/administrators’ private key unknown to the system.

| 2.7.4. | The system does not have insecure direct object references. For this purpose, it requires at least that:






  (a) | for direct references to restricted resources, the application verifies that the user is authorised to access the exact resource requested; |
| --- | --- | --- |

2.7.4.

The system does not have insecure direct object references. For this purpose, it requires at least that:

(a)

for direct references to restricted resources, the application verifies that the user is authorised to access the exact resource requested;

| (b) | if the reference is an indirect reference, the mapping to the direct reference is limited to values authorised for the current user. |
| --- | --- |

(b)

if the reference is an indirect reference, the mapping to the direct reference is limited to values authorised for the current user.

| 2.7.5. | The system guards against cross-site request forgery flaw. |
| --- | --- |

2.7.5.

The system guards against cross-site request forgery flaw.

| 2.7.6. | Proper security configuration is in place, which requires, at least, that:






  (a) | all software components are up to date, including the OS, web/application server, database management system (DBMS), applications, and all code libraries; |
| --- | --- | --- |

2.7.6.

Proper security configuration is in place, which requires, at least, that:

(a)

all software components are up to date, including the OS, web/application server, database management system (DBMS), applications, and all code libraries;

| (b) | OS and web/application server unnecessary services are disabled, removed, or not installed; |
| --- | --- |

(b)

OS and web/application server unnecessary services are disabled, removed, or not installed;

| (c) | default account passwords are changed or disabled; |
| --- | --- |

(c)

default account passwords are changed or disabled;

| (d) | error handling is set up to prevent stack traces and other overly informative error messages from leaking; |
| --- | --- |

(d)

error handling is set up to prevent stack traces and other overly informative error messages from leaking;

| (e) | security settings in the development frameworks and libraries are configured in accordance with best practices, such as the guidelines of OWASP. |
| --- | --- |

(e)

security settings in the development frameworks and libraries are configured in accordance with best practices, such as the guidelines of OWASP.

| 2.7.7. | The system provides for encryption of data as follows:






  (a) | personal data in electronic format is encrypted when stored or transferred to the competent authorities of the Member States in accordance with Article 8(1) of Regulation (EU) No 211/2011, the keys being managed and backed up separately; |
| --- | --- | --- |

2.7.7.

The system provides for encryption of data as follows:

(a)

personal data in electronic format is encrypted when stored or transferred to the competent authorities of the Member States in accordance with Article 8(1) of Regulation (EU) No 211/2011, the keys being managed and backed up separately;

| (b) | strong standard algorithms and strong keys are used in line with international standards. Key management is in place; |
| --- | --- |

(b)

strong standard algorithms and strong keys are used in line with international standards. Key management is in place;

| (c) | passwords are hashed with a strong standard algorithm and an appropriate ‘salt’ is used; |
| --- | --- |

(c)

passwords are hashed with a strong standard algorithm and an appropriate ‘salt’ is used;

| (d) | all keys and passwords are protected from unauthorised access. |
| --- | --- |

(d)

all keys and passwords are protected from unauthorised access.

| 2.7.8. | The system restricts URL access based on the user access levels and permissions. For this purpose, it requires at least that:






  (a) | if external security mechanisms are used to provide authentication and authorisation checks for page access, they need to be properly configured for every page; |
| --- | --- | --- |

2.7.8.

The system restricts URL access based on the user access levels and permissions. For this purpose, it requires at least that:

(a)

if external security mechanisms are used to provide authentication and authorisation checks for page access, they need to be properly configured for every page;

| (b) | if code level protection is used, code level protection needs to be in place for every required page. |
| --- | --- |

(b)

if code level protection is used, code level protection needs to be in place for every required page.

| 2.7.9. | The system uses sufficient transport layer protection. For this purpose, all of the following measures or measures of at least equal strength are in place:






  (a) | the system requires the most current version of the hypertext transfer protocol secure (HTTPS) to access any sensitive resource using certificates that are valid, not expired, not revoked, and match all domains used by the site; |
| --- | --- | --- |

2.7.9.

The system uses sufficient transport layer protection. For this purpose, all of the following measures or measures of at least equal strength are in place:

(a)

the system requires the most current version of the hypertext transfer protocol secure (HTTPS) to access any sensitive resource using certificates that are valid, not expired, not revoked, and match all domains used by the site;

| (b) | the system sets the ‘secure’ flag on all sensitive cookies; |
| --- | --- |

(b)

the system sets the ‘secure’ flag on all sensitive cookies;

| (c) | the server configures the TLS provider to only support encryption algorithms in line with best practices. The users are informed that they must enable TLS support in their browser. |
| --- | --- |

(c)

the server configures the TLS provider to only support encryption algorithms in line with best practices. The users are informed that they must enable TLS support in their browser.

| 2.7.10. | The system guards against invalidated redirects and forwards. |
| --- | --- |

2.7.10.

The system guards against invalidated redirects and forwards.

Database security and data integrity

2.8.   Where online collection systems used for different citizens’ initiatives share hardware and operating system resources, they do not share any data, including access/encryption credentials. In addition, this is reflected in the risk assessment and in the implemented countermeasures.

2.9.   The risk that someone authenticates on the database using ‘pass-the-hash’ is mitigated.

2.10.   The data provided by the signatories is only accessible to the database administrator/organiser.

2.11.   Administrative credentials, personal data collected from signatories and its backup are secured via strong encryption algorithms in line with point 2.7.7(b). However, the Member State where the statement of support will be counted, the date of submission of the statement of support and the language in which the signatory filled in the statement of support form may be stored unencrypted in the system.

2.12.   Signatories only have access to the data submitted during the session in which they complete the statement of support form. Once the statement of support form is submitted the above session is closed and the submitted data is not accessible anymore.

2.13.   Signatories’ personal data are only available in the system, including the backup, in encrypted format. For the purpose of data consultation or certification by the national authorities in accordance with Article 8 of Regulation (EU) No 211/2011, organisers may export the encrypted data in accordance with point 2.7.7(a).

2.14.   The persistence of the data entered in the statement of support form is atomic. That is, once the user has entered all required details in the statement of support form, and validates his/her decision to support the initiative, the system either successfully commits all of the form data to the database, or, in case of error, fails by saving no data at all. The system informs the user of the success or failure of his/her request.

2.15.   The DBMS used is up to date and continuously patched for newly discovered exploits.

2.16.   All system activity logs are in place. The system makes sure that audit logs recording exceptions and other security-relevant events listed below may be produced and kept until the data is destroyed in accordance with Article 12(3) or (5) of Regulation (EU) No 211/2011. Logs are adequately protected, for instance by storage on encrypted media. Organisers/administrators regularly check the logs for suspicious activity. Log contents include at least:

| (a) | dates and times for log-on and log-off by organisers/administrators; |
| --- | --- |

(a)

dates and times for log-on and log-off by organisers/administrators;

| (b) | performed backups; |
| --- | --- |

(b)

performed backups;

| (c) | all database administrator changes and updates. |
| --- | --- |

(c)

all database administrator changes and updates.

Infrastructure security — physical location, network infrastructure and server environment

2.17.   Physical security

Whatever the type of hosting used, the machine hosting the application is properly protected, which provides:

| (a) | hosting area access control and audit log; |
| --- | --- |

(a)

hosting area access control and audit log;

| (b) | physical protection of backup data against theft or incidental misplacement; |
| --- | --- |

(b)

physical protection of backup data against theft or incidental misplacement;

| (c) | that the server hosting the application is installed in a secured rack. |
| --- | --- |

(c)

that the server hosting the application is installed in a secured rack.

2.18.   Network security

| 2.18.1. | The system is hosted on an Internet facing server installed on a demilitarised zone (DMZ) and protected by a firewall. |
| --- | --- |

2.18.1.

| 2.18.2. | When relevant updates and patches of the firewall product become public, then such updates or patches are installed expediently. |
| --- | --- |

2.18.2.

| 2.18.3. | All inbound and outbound traffic to the server (destined to the online collection system) is inspected by the firewall rules and logged. The firewall rules deny all traffic that is not needed for the secure use and administration of the system. |
| --- | --- |

2.18.3.

| 2.18.4. | The online collection system must be hosted on an adequately protected production network segment that is separated from segments used to host non-production systems such as development or testing environments. |
| --- | --- |

2.18.4.

| 2.18.5. | Local area network (LAN) security measures are in place such as:






  (a) | layer 2 (L2) access list/port switch security; |
| --- | --- | --- |

2.18.5.

(a)

layer 2 (L2) access list/port switch security;

| (b) | unused switch ports are disabled; |
| --- | --- |

(b)

unused switch ports are disabled;

| (c) | the DMZ is on a dedicated virtual local area network (VLAN)/LAN; |
| --- | --- |

(c)

the DMZ is on a dedicated virtual local area network (VLAN)/LAN;

| (d) | no L2 trunking enabled on unnecessary ports. |
| --- | --- |

(d)

no L2 trunking enabled on unnecessary ports.

2.19.   OS and web/application server security

| 2.19.1. | A proper security configuration is in place including the elements listed in point 2.7.6. |
| --- | --- |

2.19.1.

| 2.19.2. | Applications run with the lowest set of privileges that they require to run. |
| --- | --- |

2.19.2.

| 2.19.3. | Administrator access to the management interface of the online collection system has a short session time-out (maximum 15 minutes). |
| --- | --- |

2.19.3.

| 2.19.4. | When relevant updates and patches of the OS, the application runtimes, applications running on the servers, or anti-malware become public, then such updates or patches are installed expediently. |
| --- | --- |

2.19.4.

| 2.19.5. | The risk that someone authenticates on the system using ‘pass-the-hash’ is mitigated. |
| --- | --- |

2.19.5.

2.20.   Organiser client security

For the sake of end-to-end security, the organisers take necessary measures to secure their client application/device that they use to manage and access the online collection system, such as:

| 2.20.1. | Users run non-maintenance tasks (such as office automation) with the lowest set of privileges that they require to run. |
| --- | --- |

2.20.1.

Users run non-maintenance tasks (such as office automation) with the lowest set of privileges that they require to run.

| 2.20.2. | When relevant updates and patches of the OS, any installed applications, or anti-malware become public, then such updates or patches are installed expediently. |
| --- | --- |

2.20.2.

When relevant updates and patches of the OS, any installed applications, or anti-malware become public, then such updates or patches are installed expediently.

3.   TECHNICAL SPECIFICATIONS AIMING AT IMPLEMENTING ARTICLE 6(4)(c) OF REGULATION (EU) No 211/2011

3.1.   The system provides the possibility to extract for each individual Member State a report listing the initiative and the personal data of the signatories subject to verification by the competent authority of that Member State.

3.2.   Exporting of signatories’ statements of support is possible in the format of Annex III to Regulation (EU) No 211/2011. The system may in addition provide for the possibility of exporting the statements of support in an interoperable format such as the extensible mark-up language (XML).

3.3.   The exported statements of support are marked as being of limited distribution to the Member State concerned, and labelled as personal data.

3.4.   The electronic transmission of exported data to the Member States is secured against eavesdropping using suitable end-to-end encryption.

---

| 18.11.2011 | EN | Official Journal of the European Union | L 301/10 |
| --- | --- | --- | --- |

18.11.2011

EN

Official Journal of the European Union

L 301/10

---

COMMISSION IMPLEMENTING REGULATION (EU) No 1180/2011

of 17 November 2011

establishing the standard import values for determining the entry price of certain fruit and vegetables

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Council Regulation (EC) No 1234/2007 of 22 October 2007 establishing a common organisation of agricultural markets and on specific provisions for certain agricultural products (Single CMO Regulation) (1),

Having regard to Commission Implementing Regulation (EU) No 543/2011 of 7 June 2011 laying down detailed rules for the application of Council Regulation (EC) No 1234/2007 in respect of the fruit and vegetables and processed fruit and vegetables sectors (2), and in particular Article 136(1) thereof,

Whereas:

Implementing Regulation (EU) No 543/2011 lays down, pursuant to the outcome of the Uruguay Round multilateral trade negotiations, the criteria whereby the Commission fixes the standard values for imports from third countries, in respect of the products and periods stipulated in Annex XVI, Part A thereto,

HAS ADOPTED THIS REGULATION:

Article 1

The standard import values referred to in Article 136 of Implementing Regulation (EU) No 543/2011 are fixed in the Annex hereto.

Article 2

This Regulation shall enter into force on 18 November 2011.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 17 November 2011.

For the Commission, On behalf of the President,

José Manuel SILVA RODRÍGUEZ

Director-General for Agriculture and Rural Development

---

(1)  
  OJ L 299, 16.11.2007, p. 1.

1

(2)  
  OJ L 157, 15.6.2011, p. 1.

2

---

ANNEX

Standard import values for determining the entry price of certain fruit and vegetables

| (EUR/100 kg) |
| --- |
| CN code | Third country code (1) | Standard import value |
| 0702 00 00 | AL | 62,0 |
| AR | 40,4 |
| MA | 48,6 |
| MK | 64,0 |
| TR | 89,6 |
| ZZ | 60,9 |
| 0707 00 05 | AL | 73,2 |
| EG | 161,4 |
| TR | 110,1 |
| ZZ | 114,9 |
| 0709 90 70 | MA | 61,4 |
| TR | 131,5 |
| ZZ | 96,5 |
| 0805 20 10 | MA | 94,7 |
| ZA | 65,5 |
| ZZ | 80,1 |
| 0805 20 30 , 0805 20 50 , 0805 20 70 , 0805 20 90 | HR | 82,7 |
| IL | 73,3 |
| MA | 79,7 |
| TR | 81,7 |
| UY | 42,7 |
| ZA | 62,9 |
| ZZ | 70,5 |
| 0805 50 10 | TR | 58,5 |
| ZA | 43,5 |
| ZZ | 51,0 |
| 0806 10 10 | BR | 226,9 |
| CL | 70,8 |
| LB | 291,7 |
| PE | 200,1 |
| TR | 144,9 |
| US | 300,4 |
| ZA | 82,6 |
| ZZ | 188,2 |
| 0808 10 80 | CA | 86,1 |
| CL | 90,0 |
| NZ | 120,0 |
| TR | 95,1 |
| US | 124,3 |
| ZA | 108,8 |
| ZZ | 104,1 |
| 0808 20 50 | CL | 73,3 |
| CN | 77,1 |
| TR | 85,0 |
| ZA | 73,2 |
| ZZ | 77,2 |

(EUR/100 kg)

CN code

Third country code (1)

Standard import value

0702 00 00

AL

62,0

AR

40,4

MA

48,6

MK

64,0

TR

89,6

ZZ

60,9

0707 00 05

AL

73,2

EG

161,4

TR

110,1

ZZ

114,9

0709 90 70

MA

61,4

TR

131,5

ZZ

96,5

0805 20 10

MA

94,7

ZA

65,5

ZZ

80,1

0805 20 30 , 0805 20 50 , 0805 20 70 , 0805 20 90

HR

82,7

IL

73,3

MA

79,7

TR

81,7

UY

42,7

ZA

62,9

ZZ

70,5

0805 50 10

TR

58,5

ZA

43,5

ZZ

51,0

0806 10 10

BR

226,9

CL

70,8

LB

291,7

PE

200,1

TR

144,9

US

300,4

ZA

82,6

ZZ

188,2

0808 10 80

CA

86,1

CL

90,0

NZ

120,0

TR

95,1

US

124,3

ZA

108,8

ZZ

104,1

0808 20 50

CL

73,3

CN

77,1

TR

85,0

ZA

73,2

ZZ

77,2

---

(1)  Nomenclature of countries laid down by Commission Regulation (EC) No 1833/2006 (OJ L 354, 14.12.2006, p. 19). Code ‘
  ZZ
  ’ stands for ‘of other origin’.

---

| 18.11.2011 | EN | Official Journal of the European Union | L 301/12 |
| --- | --- | --- | --- |

18.11.2011

EN

Official Journal of the European Union

L 301/12

---

COMMISSION IMPLEMENTING REGULATION (EU) No 1181/2011

of 17 November 2011

on the issue of import licences for applications submitted in the first seven days of November 2011 under the tariff quota for high-quality beef administered by Regulation (EC) No 620/2009

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Council Regulation (EC) No 1234/2007 of 22 October 2007 establishing a common organisation of agricultural markets and on specific provisions for certain agricultural products (Single CMO Regulation) (1),

Having regard to Commission Regulation (EC) No 1301/2006 of 31 August 2006 laying down common rules for the administration of import tariff quotas for agricultural products managed by a system of import licences (2), and in particular Article 7(2) thereof,

Whereas:

| (1) | Commission Regulation (EC) No 620/2009 of 13 July 2009 providing for the administration of an import tariff quota for high-quality beef (3) sets out detailed rules for the submission and issue of import licences. |
| --- | --- |

(1)

Commission Regulation (EC) No 620/2009 of 13 July 2009 providing for the administration of an import tariff quota for high-quality beef (3) sets out detailed rules for the submission and issue of import licences.

| (2) | Article 7(2) of Regulation (EC) No 1301/2006 provides that in cases where quantities covered by licence applications exceed the quantities available for the quota period, allocation coefficients should be fixed for the quantities covered by each licence application. The applications for import licences submitted pursuant to Article 3 of Regulation (EC) No 620/2009 between 1 and 7 November 2011 exceed the quantities available. Therefore, the extent to which import licences may be issued and the allocation coefficient should be determined, |
| --- | --- |

(2)

Article 7(2) of Regulation (EC) No 1301/2006 provides that in cases where quantities covered by licence applications exceed the quantities available for the quota period, allocation coefficients should be fixed for the quantities covered by each licence application. The applications for import licences submitted pursuant to Article 3 of Regulation (EC) No 620/2009 between 1 and 7 November 2011 exceed the quantities available. Therefore, the extent to which import licences may be issued and the allocation coefficient should be determined,

HAS ADOPTED THIS REGULATION:

Article 1

Import licence applications covered by the quota with order number 09.4449 and submitted between 1 and 7 November 2011 in accordance with Article 3 of Regulation (EC) No 620/2009, shall be multiplied by an allocation coefficient of 0,414127 %.

Article 2

This Regulation shall enter into force on the day following its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 17 November 2011.

For the Commission, On behalf of the President,

José Manuel SILVA RODRÍGUEZ

Director-General for Agriculture and Rural Development

---

(1)  
  OJ L 299, 16.11.2007, p. 1.

1

(2)  
  OJ L 238, 1.9.2006, p. 13.

2

(3)  
  OJ L 182, 15.7.2009, p. 25.

3

---

| 18.11.2011 | EN | Official Journal of the European Union | L 301/13 |
| --- | --- | --- | --- |

18.11.2011

EN

Official Journal of the European Union

L 301/13

---

COMMISSION IMPLEMENTING REGULATION (EU) No 1182/2011

of 17 November 2011

fixing representative prices in the poultrymeat and egg sectors and for egg albumin, and amending Regulation (EC) No 1484/95

THE EUROPEAN COMMISSION,

Having regard to the Treaty on the Functioning of the European Union,

Having regard to Council Regulation (EC) No 1234/2007 of 22 October 2007 establishing a common organisation of agricultural markets and on specific provisions for certain agricultural products (Single CMO Regulation) (1), and in particular Article 143 thereof,

Having regard to Council Regulation (EC) No 614/2009 of 7 July 2009 on the common system of trade for ovalbumin and lactalbumin (2), and in particular Article 3(4) thereof,

Whereas:

| (1) | Commission Regulation (EC) No 1484/95 (3) lays down detailed rules for implementing the system of additional import duties and fixes representative prices for poultrymeat and egg products and for egg albumin. |
| --- | --- |

(1)

Commission Regulation (EC) No 1484/95 (3) lays down detailed rules for implementing the system of additional import duties and fixes representative prices for poultrymeat and egg products and for egg albumin.

| (2) | Regular monitoring of the data used to determine representative prices for poultrymeat and egg products and for egg albumin shows that the representative import prices for certain products should be amended to take account of variations in price according to origin. The representative prices should therefore be published. |
| --- | --- |

(2)

Regular monitoring of the data used to determine representative prices for poultrymeat and egg products and for egg albumin shows that the representative import prices for certain products should be amended to take account of variations in price according to origin. The representative prices should therefore be published.

| (3) | In view of the situation on the market, this amendment should be applied as soon as possible. |
| --- | --- |

(3)

In view of the situation on the market, this amendment should be applied as soon as possible.

| (4) | The measures provided for in this Regulation are in accordance with the opinion of the Management Committee for the Common Organisation of Agricultural Markets, |
| --- | --- |

(4)

The measures provided for in this Regulation are in accordance with the opinion of the Management Committee for the Common Organisation of Agricultural Markets,

HAS ADOPTED THIS REGULATION:

Article 1

Annex I to Regulation (EC) No 1484/95 is replaced by the Annex to this Regulation.

Article 2

This Regulation shall enter into force on the day of its publication in the Official Journal of the European Union.

This Regulation shall be binding in its entirety and directly applicable in all Member States.

Done at Brussels, 17 November 2011.

For the Commission, On behalf of the President,

José Manuel SILVA RODRÍGUEZ

Director-General for Agriculture and Rural Development

---

(1)  
  OJ L 299, 16.11.2007, p. 1.

1

(2)  
  OJ L 181, 14.7.2009, p. 8.

2

(3)  
  OJ L 145, 29.6.1995, p. 47.

3

---

ANNEX

to the Commission Regulation of 17 November 2011 fixing representative prices in the poultrymeat and egg sectors and for egg albumin, and amending Regulation (EC) No 1484/95

‘ANNEX I

| CN code | Description of goods | Representative price
  (EUR/100 kg) | Security under Article 3(3)
  (EUR/100 kg) | Origin (1) |
| --- | --- | --- | --- | --- |
| 0207 12 10 | Fowls of the species Gallus domesticus, not cut in pieces, presented as “70 % chickens”, frozen | 128,7 | 0 | BR |
| 128,8 | 0 | AR |
| 0207 12 90 | Fowls of the species Gallus domesticus, not cut in pieces, presented as “65 % chickens”, frozen | 138,3 | 0 | BR |
| 141,1 | 0 | AR |
| 0207 14 10 | Fowls of the species Gallus domesticus, boneless cuts, frozen | 224,7 | 23 | BR |
| 266,1 | 10 | AR |
| 341,6 | 0 | CL |
| 0207 14 60 | Fowl of the species Gallus domesticus, legs, frozen | 249,8 | 0 | BR |
| 0207 27 10 | Turkeys, boneless cuts, frozen | 372,8 | 0 | BR |
| 413,1 | 0 | CL |
| 0408 11 80 | Egg yolks | 303,9 | 2 | AR |
| 0408 91 80 | Eggs, not in shell, dried | 314,9 | 0 | AR |
| 1602 32 11 | Preparations of fowls of the species Gallus domesticus, uncooked | 283,4 | 1 | BR |
| 356,5 | 0 | CL |
| 3502 11 90 | Egg albumin, dried | 483,9 | 0 | AR |

CN code

Description of goods

Representative price

(EUR/100 kg)

Security under Article 3(3)

(EUR/100 kg)

Origin (1)

0207 12 10

Fowls of the species Gallus domesticus, not cut in pieces, presented as “70 % chickens”, frozen

128,7

0

BR

128,8

0

AR

0207 12 90

Fowls of the species Gallus domesticus, not cut in pieces, presented as “65 % chickens”, frozen

138,3

0

BR

141,1

0

AR

0207 14 10

Fowls of the species Gallus domesticus, boneless cuts, frozen

224,7

23

BR

266,1

10

AR

341,6

0

CL

0207 14 60

Fowl of the species Gallus domesticus, legs, frozen

249,8

0

BR

0207 27 10

Turkeys, boneless cuts, frozen

372,8

0

BR

413,1

0

CL

0408 11 80

Egg yolks

303,9

2

AR

0408 91 80

Eggs, not in shell, dried

314,9

0

AR

1602 32 11

Preparations of fowls of the species Gallus domesticus, uncooked

283,4

1

BR

356,5

0

CL

3502 11 90

Egg albumin, dried

483,9

0

AR

---

(1)  Nomenclature of countries laid down by Commission Regulation (EC) No 1833/2006 (OJ L 354, 14.12.2006, p. 19). The code “
  ZZ
  ” represents “other origins”.’

1

---