Document ID: chunk:federal_register_of_legislation:C2024C00057:schedule:10:p13
Version: federal_register_of_legislation:C2024C00057
Segment Type: schedule
Provision Reference: sch 10 (pt 13/15)
Character Range: 355466–358388

the communicating body thereof without undue delay.

     (e) A person whose personal data has been communicated pursuant to the Agreement, who proves their identity in an appropriate manner, shall, upon request of that person, be provided by the body responsible for processing with information about the data relating to them which has been communicated or processed, the origin of the data as far as possible, the recipients or categories of recipients of communications, the intended purpose of the use of data and the legal basis of the communication of the data in a generally understandable form. This information shall be given without undue delay and, in principle, free of charge. Moreover the person concerned shall have the right to have incomplete or inaccurate data corrected and unlawfully processed data deleted. Further procedural details relating to the enforcement of these rights are subject to domestic law.

     (f) The Parties shall provide every data subject whose rights to information, correction and deletion have been violated with the right to have the matter decided by an independent authority. Furthermore, the Parties shall ensure that any data subject who has suffered damage as a result of an unlawful processing of data is entitled to receive compensation for the damage suffered from the body responsible for processing the data in accordance with the respective Party's domestic law.

     (g) Personal data communicated shall be deleted, if found to be inaccurate, or unlawfully obtained or communicated, or if lawfully communicated data are to be deleted at a later date pursuant to the domestic law of the communicating Party, or if data is no longer needed for the purpose for which it was communicated and if there is no reason to suppose that the deletion could affect interests deserving protection of the person in the field of social security or the legislation specified in subparagraph 1(a)(ii) of Article 2 of the Agreement.

     (h) Both the communicating body and the receiving body shall record the reason, contents and date of any communication or receipt of personal data as well as the communicating and receiving body. Data communicated online shall be logged using automated processes. The records and logs shall be stored for at least three years and may only be used for the purpose of monitoring compliance with the applicable provisions on data protection.

     (i) Both the communicating body and the receiving body shall effectively protect communicated personal data against accidental or unauthorised destruction, accidental loss, unauthorised access, unauthorised or accidental modification and unauthorised disclosure.

2. The provisions of paragraph (1) of this Article shall apply accordingly to trade and business secrets.

Article 21
Resolution of Difficulties

1. Disagreements arising in connection with the application of this Agreement shall,