Artikel 13

Personal data shall be furnished only when it is necessary for the implementation of this Agreement by the competent authorities of the Parties. When communicating, processing or treating personal data in a particular case, the competent authorities of the Parties shall abide by their own relevant legislation. In addition, the following principles apply:
1. personal data must be processed fairly and lawfully;
2. personal data must be obtained for the specific, explicitly defined and justified objective of implementing this Agreement and may not be processed further by the communicating or receiving authority in any way that is incompatible with that objective;
3. personal data must be appropriate, relevant and not excessive, given the objectives for which they are collected and/or are subsequently processed; in particular, the personal data provided may not concern anything other than the following: – the personal details of the person to be transferred (surname, given name, any previous names, nicknames or pseudonyms, date and place of birth, sex, current and previous nationality);
– an identity card or passport (serial number, period of validity, issue date, issuing authority, place of issue);
– stopping places and travel routes;
– other data, useful for the identification of the person to be transferred or for examining the readmission requirements on the basis of this Agreement;
– the personal details of the person to be transferred (surname, given name, any previous names, nicknames or pseudonyms, date and place of birth, sex, current and previous nationality);
– an identity card or passport (serial number, period of validity, issue date, issuing authority, place of issue);
– stopping places and travel routes;
– other data, useful for the identification of the person to be transferred or for examining the readmission requirements on the basis of this Agreement;
4. personal data must be accurate and must be updated if necessary;
5. personal data must not be kept in a form which makes it possible to identify the persons concerned any longer than is necessary in order to achieve the objectives for which the data were collected or are subsequently processed;
6. the communicating and the receiving authorities shall take all appropriate measures to ensure, where necessary, the correction, deletion or masking of personal data when the processing is not in accordance with the provisions of this Article of the present Agreement, in particular because the data are inappropriate, irrelevant, inaccurate or excessive in relation to the objective of the processing. This includes notifying the other Party of each correction, deletion or masking;
7. on request, the receiving authority shall inform the communicating authority of the use that is being made of the data provided and of the results obtained;
8. personal data may be provided solely to the competent authorities. Passing them on to other authorities requires prior approval from the communicating authority;
9. the communicating and receiving authorities are obliged to keep written records of any provision or receipt of personal data.