Artikel 13

The communication of personal data shall only take place if such communication is necessary for the implementation of this Agreement. The processing and treatment of personal data by the competent authorities of the Parties in a particular case shall be subject to the domestic laws of Belize and, where the data are treated and used by a competent authority of a Benelux State, to the provisions of Regulation (EU) of the European Parliament and of The Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and of the national legislation of the relevant Benelux States adopted pursuant to this Regulation. The following principles shall apply:
1. Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);
2. Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes (“purpose limitation”);
3. Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization’); in particular, personal data communicated may concern only the following: 1) the particulars of the person to be readmitted (e.g. surnames, given names, any previous names, other names used/by which known or aliases, sex, civil status, date and place of birth, current and previous nationality);
2) passport, identity card or driving licence (number, period of validity, date of issue, issuing authority and place of issue);
3) places of stay and itineraries;
4) other information needed to identify the person to be readmitted or to examine the readmission requirements pursuant to this Agreement, including biometric data such as a photograph (facial image) or fingerprints (dactyloscopic data);
5) special circumstances relating to the transferee, including information on the assistance which the transferee may require and on other protection or security measures which may be necessary for the transfer;
1) the particulars of the person to be readmitted (e.g. surnames, given names, any previous names, other names used/by which known or aliases, sex, civil status, date and place of birth, current and previous nationality);
2) passport, identity card or driving licence (number, period of validity, date of issue, issuing authority and place of issue);
3) places of stay and itineraries;
4) other information needed to identify the person to be readmitted or to examine the readmission requirements pursuant to this Agreement, including biometric data such as a photograph (facial image) or fingerprints (dactyloscopic data);
5) special circumstances relating to the transferee, including information on the assistance which the transferee may require and on other protection or security measures which may be necessary for the transfer;
4. Personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);
5. Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures in order to safeguard the rights and freedoms of the data subject (“storage limitation”);
6. Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”’);
7. Both the communicating and the receiving authority shall take every adequate step to ensure as appropriate the rectification, removal or blocking of personal data where the processing does not comply with the provisions of this Article, in particular because those data are not adequate, relevant, accurate or they are excessive in relation to the purpose of processing. This includes the notification of any rectification, removal or blocking to the other Party;
8. Upon request, the receiving authority shall inform the communicating authority of the use of the communicated data and of the results obtained therefrom;
9. Personal data may only be communicated to the competent authorities. Further communication to other bodies requires the prior consent of the communicating authority;
10. The communicating and the receiving authorities are obliged to make a written record of the communication and receipt of personal data.